$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa File: ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa (raw, json) Hash identifier: h1zV2BYt45RgP112T6pSscfxi0eBvvl+L//Pyr+8Za0= Subject key identifier: B3:F7:31:FA:8B:D9:52:90:C4:4E:AD:3C:6C:20:FA:F5:46:37:09:54 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0CDC22C5AF95856CAC9D2180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 8069 IP address blocks: 52.122.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:22:c5:af:95:85:6c:ac:9d:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=213619d8-cacb-46f1-a671-a7b96125ef77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:30:f4:27:69:a3:11:28:17:93:9d:eb:a0: 46:2e:17:9d:90:ce:ca:ce:52:69:a6:98:68:d2:e3: 4b:04:e4:24:63:37:ea:fa:d0:3c:f2:2b:6d:1c:aa: 0a:1d:22:21:3c:21:a3:4a:9c:2b:62:51:51:4f:97: 2e:8d:32:5e:30:71:8c:7e:c3:01:fe:14:79:74:b5: ba:5d:5b:42:ab:31:64:85:8b:87:c4:38:8f:f3:37: 8c:f4:dc:b2:39:a4:3b:46:6c:90:2a:60:c0:68:5b: b9:bc:db:3f:25:8a:90:fa:c2:6e:d5:a4:ba:9b:3c: 1c:fd:f3:30:43:42:32:04:ae:02:74:40:a8:e6:0c: f7:91:cc:5c:84:83:42:1b:06:90:5b:76:03:92:ab: 11:b5:49:ba:91:75:ae:68:21:a4:48:0e:ed:01:6e: e3:d9:d8:01:b1:e2:52:b2:b7:a4:f5:8f:4b:95:1a: 03:03:b3:4e:9c:27:21:f6:7c:b4:68:b3:4f:dd:02: 8e:05:b7:a5:5c:6d:f0:0e:f7:0f:db:92:06:97:48: 7b:a7:02:f0:a6:03:23:6a:a3:1e:df:a8:bb:56:9a: 04:a7:4f:20:ab:f9:7a:e3:a4:5e:4c:f2:46:0b:85: 63:c0:36:73:fe:2f:17:ee:a9:b7:f1:6a:8a:71:71: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F7:31:FA:8B:D9:52:90:C4:4E:AD:3C:6C:20:FA:F5:46:37:09:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:47:da:23:1d:e9:96:6b:06:41:23:24:65:e6:b0:be:1a:24: ad:84:46:8e:d0:59:d6:5b:15:82:48:59:34:25:81:24:0b:a9: 96:f1:27:cf:56:88:cf:57:bd:97:29:e1:c1:ef:db:34:b8:ca: 00:30:55:62:16:70:5a:f6:10:83:3f:2f:a9:ce:cc:8a:89:b0: 63:7a:e6:05:98:47:ea:77:24:1f:a7:20:68:ba:10:54:24:65: cb:d0:73:bb:2c:23:d9:86:e4:1c:9d:6d:ed:42:68:3f:a2:3a: a7:3b:90:8a:79:ce:a8:13:e0:78:ad:dc:1f:a4:9b:3d:6d:0f: 85:4d:94:66:03:30:3f:3a:ff:7b:dd:f9:b2:97:82:65:2b:f3: 8f:d4:24:f0:c2:28:06:25:9c:8f:2e:75:0f:f2:60:5b:cc:f1: df:e6:2a:fd:05:a9:50:8a:bf:6a:43:9c:56:fb:9c:91:00:c5: 35:6d:ea:a0:88:10:1f:83:b2:32:53:8a:28:f4:f0:3f:c7:a5: ab:3c:54:6f:b3:49:ef:85:de:d5:af:bf:d1:77:78:44:36:8e: d9:a2:af:e5:20:c2:9b:84:b5:ca:32:ad:47:37:23:97:0b:37: 8f:61:4e:a8:7a:1d:2f:bf:a1:be:27:53:bf:33:a0:dc:8e:6e: c3:6e:94:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CLFr5WFbKydIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MjEzNjE5ZDgtY2FjYi00NmYxLWE2NzEtYTdiOTYxMjVlZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbsw9CdpoxEoF5Od66BGLhedkM7KzlJpppho 0uNLBOQkYzfq+tA88ittHKoKHSIhPCGjSpwrYlFRT5cujTJeMHGMfsMB/hR5dLW6 XVtCqzFkhYuHxDiP8zeM9NyyOaQ7RmyQKmDAaFu5vNs/JYqQ+sJu1aS6mzwc/fMw Q0IyBK4CdECo5gz3kcxchINCGwaQW3YDkqsRtUm6kXWuaCGkSA7tAW7j2dgBseJS srek9Y9LlRoDA7NOnCch9ny0aLNP3QKOBbelXG3wDvcP25IGl0h7pwLwpgMjaqMe 36i7VpoEp08gq/l646ReTPJGC4VjwDZz/i8X7qm38WqKcXFrWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP3MfqL2VKQxE6tPGwg+vVGNwlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2U4MjE5Y2MtYzVkMi0z NWFmLTg0YTUtYWFhOGMxNzVmZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFH2iMd6ZZrBkEjJGXmsL4aJK2ERo7QWdZbFYJIWTQlgSQLqZbxJ89W iM9XvZcp4cHv2zS4ygAwVWIWcFr2EIM/L6nOzIqJsGN65gWYR+p3JB+nIGi6EFQk ZcvQc7ssI9mG5Bydbe1CaD+iOqc7kIp5zqgT4Hit3B+kmz1tD4VNlGYDMD86/3vd +bKXgmUr84/UJPDCKAYlnI8udQ/yYFvM8d/mKv0FqVCKv2pDnFb7nJEAxTVt6qCI EB+DsjJTiij08D/Hpas8VG+zSe+F3tWvv9F3eEQ2jtmir+UgwpuEtcoyrUc3I5cL N49hTqh6HS+/ob4nU78zoNyObsNulDQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:32:26 2025 by rpki-client