$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa File: ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa (raw, json) Hash identifier: JAZnLYBCpe7PVWviqutua5cIW3tLAcJfNIj3mCaXiIY= Subject key identifier: 84:31:27:76:15:95:E0:F7:B1:40:6C:A1:BC:C0:B6:8D:FE:1A:CA:FB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3052853B5D5C86953AB0BB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 52.122.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:85:3b:5d:5c:86:95:3a:b0:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=97140deb-69cb-4bf3-9092-99fe29431664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:c3:f3:ad:4a:ea:d0:21:e3:ee:ab:a0:74: 33:4d:4a:e7:5b:7b:b3:bc:dd:3d:44:e3:a7:3f:91: ef:e0:eb:de:4e:c2:48:2b:85:22:fd:e8:bb:5c:49: 3d:59:d5:fa:aa:e2:65:70:80:23:e6:78:b3:50:07: d7:14:03:7e:d2:9d:e2:c7:8b:dd:df:5e:3b:87:1b: 7a:3e:14:7a:4d:3a:bb:57:0d:0c:7a:ad:fb:a4:58: 5e:8f:75:ac:bf:38:86:37:88:ef:b4:89:f9:53:05: c0:c9:99:6b:ad:51:44:48:28:47:37:1f:e9:70:35: 49:02:5f:56:aa:6f:40:8c:87:87:f0:49:7b:15:e7: bf:9b:9c:30:e4:86:2b:1b:51:d2:91:a9:42:fa:cd: d6:f4:ee:ca:20:b1:00:e2:26:c0:cf:15:36:ed:bb: c4:83:b3:87:31:2c:c7:89:0e:b2:e2:35:e4:66:c5: fc:49:df:a3:a2:03:a8:2f:3a:47:a7:23:87:a0:fd: da:a2:d8:51:72:64:31:c8:88:ca:b3:de:13:7b:30: 1d:e2:fc:85:d1:b6:d0:a6:b3:2d:b2:f0:a6:97:a6: 30:7b:ad:53:63:79:1f:23:07:74:1d:82:f9:23:f9: ac:2d:88:20:2e:e2:d5:f1:cc:28:19:b1:1d:ed:31: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:31:27:76:15:95:E0:F7:B1:40:6C:A1:BC:C0:B6:8D:FE:1A:CA:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:36:fa:a0:91:30:59:f4:f9:cf:e0:01:58:2f:20:32:de:24: 41:b2:43:4b:79:a3:c9:79:57:5f:d6:48:cb:e1:e0:6e:9b:24: a2:b1:bb:42:8c:88:47:d7:dc:03:08:75:2f:21:5e:d6:87:f4: 87:7a:9a:68:91:e2:6d:e7:5e:49:91:26:5a:78:c6:dc:68:b3: 4f:8e:5e:3a:0b:1d:43:01:a9:d0:2e:9c:76:5e:3a:24:f8:74: ea:15:22:da:81:b9:a4:73:aa:7b:96:47:3f:e7:63:1b:94:4e: c1:3d:58:eb:b7:73:70:68:99:db:49:c5:82:77:46:1e:bc:08: 54:63:64:fc:98:37:7b:a2:a0:d9:1f:2d:ab:62:f8:b5:14:46: e4:5e:c1:51:8b:07:7e:a6:93:99:10:9c:08:27:85:f9:df:d9: 49:c0:2b:63:85:11:69:0a:c4:85:b8:b6:ac:f3:4f:2b:96:78: ef:62:04:35:5e:0d:4e:bc:9c:76:16:60:2c:06:f2:94:c2:d3: 02:4c:90:bd:92:20:22:96:e7:2a:a6:f3:b1:e3:7b:18:1a:74: c0:e4:bf:79:21:91:a7:7d:5e:bf:d3:f3:00:14:d7:81:e4:36: 9e:9d:7c:13:fd:35:2d:48:fb:75:68:2c:76:a1:24:ae:06:65: 1b:ff:58:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoU7XVyGlTqwuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk OTcxNDBkZWItNjljYi00YmYzLTkwOTItOTlmZTI5NDMxNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM7D861K6tAh4+6roHQzTUrnW3uzvN09ROOn P5Hv4OveTsJIK4Ui/ei7XEk9WdX6quJlcIAj5nizUAfXFAN+0p3ix4vd3147hxt6 PhR6TTq7Vw0Meq37pFhej3WsvziGN4jvtIn5UwXAyZlrrVFESChHNx/pcDVJAl9W qm9AjIeH8El7Fee/m5ww5IYrG1HSkalC+s3W9O7KILEA4ibAzxU27bvEg7OHMSzH iQ6y4jXkZsX8Sd+jogOoLzpHpyOHoP3aothRcmQxyIjKs94TezAd4vyF0bbQprMt svCml6Ywe61TY3kfIwd0HYL5I/msLYggLuLV8cwoGbEd7TF20QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQxJ3YVleD3sUBsobzAto3+Gsr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2U4MjE5Y2MtYzVkMi0z NWFmLTg0YTUtYWFhOGMxNzVmZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ2+qCRMFn0+c/gAVgvIDLeJEGyQ0t5o8l5V1/WSMvh4G6bJKKxu0KM iEfX3AMIdS8hXtaH9Id6mmiR4m3nXkmRJlp4xtxos0+OXjoLHUMBqdAunHZeOiT4 dOoVItqBuaRzqnuWRz/nYxuUTsE9WOu3c3BomdtJxYJ3Rh68CFRjZPyYN3uioNkf Lati+LUURuRewVGLB36mk5kQnAgnhfnf2UnAK2OFEWkKxIW4tqzzTyuWeO9iBDVe DU68nHYWYCwG8pTC0wJMkL2SICKW5yqm87HjexgadMDkv3khkad9Xr/T8wAU14Hk Np6dfBP9NS1I+3VoLHahJK4GZRv/WIE= -----END CERTIFICATE-----Generated at Mon Sep 28 21:10:56 2026 by rpki-client