$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa File: ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa (raw, json) Hash identifier: xbS4uidP9ipZn6Z+lAxV/Yg7tHcBXGqupQ6nc9I3UKM= Subject key identifier: 0F:80:64:4D:7C:BE:91:50:B8:FE:84:E8:93:02:FE:4C:7D:48:B3:A1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DADAAE75E67FDF89675E39680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 8069 IP address blocks: 52.122.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e7:5e:67:fd:f8:96:75:e3:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=c35c2262-c4b7-4b8f-9edf-8a03c239e0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6e:d5:ac:fc:99:8d:2e:c8:98:ae:bf:7e:39: d8:d5:d6:33:8c:83:95:af:dc:7e:65:51:9d:1b:51: 72:43:5e:47:cf:10:22:dc:97:20:90:17:3f:e5:99: e3:1c:46:3e:aa:6f:75:08:f9:ac:d9:33:1b:38:97: c4:f2:bf:1f:e5:3c:22:8f:f5:b5:d0:cb:e8:7f:a3: 16:a7:f1:37:d3:0f:7a:c7:92:22:4a:a9:cd:ca:20: 09:ff:8e:fe:25:b1:40:e6:89:3a:4d:1d:6d:9b:63: 1b:a3:7e:41:23:1c:6f:4a:e6:a3:aa:64:d9:ad:aa: 10:bc:71:f1:81:2f:1b:26:aa:b1:c0:76:25:3e:07: c1:97:56:ab:cf:8f:c9:96:dc:80:c1:08:33:60:23: 1f:c4:93:8c:ee:4b:5c:72:4d:d9:f2:d6:ce:12:4f: cf:85:fd:fb:e8:e9:cb:49:aa:25:c0:8d:d2:57:97: 3c:e8:77:bc:f7:a0:92:c1:55:09:65:73:c3:99:ac: 02:2f:35:a4:bf:b5:8a:db:f9:66:ff:82:d4:6b:16: f9:37:c9:56:0d:a4:0e:c3:a4:a1:01:51:99:03:05: 78:ea:4c:e8:c0:d8:4f:5d:73:9e:a1:bb:46:d7:80: 9c:e1:92:d8:25:03:d6:0e:4d:a0:1b:62:9c:6a:13: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:80:64:4D:7C:BE:91:50:B8:FE:84:E8:93:02:FE:4C:7D:48:B3:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:fd:4d:b9:1f:c2:65:28:85:c3:5e:f7:fe:73:4e:fe:b4:87: ed:b0:54:d9:b8:57:7d:e0:86:a3:8c:a3:ce:99:ff:b8:ea:c6: d7:5c:89:3b:17:d0:be:e7:16:c7:33:a5:08:14:d5:ba:9f:61: 2a:ea:9e:49:b8:f0:a4:ba:1f:36:71:2a:04:92:aa:81:24:bc: 46:6e:b8:1d:78:83:d2:44:b1:b0:51:01:51:a9:3b:30:8d:30: 6d:0b:43:a2:22:73:80:4e:52:1e:80:79:10:4f:c3:93:de:2d: cc:5f:bf:b4:d1:a9:28:30:50:e5:50:8f:8b:2b:5b:fd:3c:71: a9:64:f7:ad:40:cb:e2:df:46:f5:ef:1a:f7:49:48:6e:70:83: ae:90:1e:53:35:f3:4d:35:cf:d4:1e:49:c7:e2:f9:63:a2:d8: 4a:21:fe:ca:8e:a1:6b:01:59:63:81:28:eb:37:e3:34:29:c3: f0:e8:57:68:00:ff:11:5f:6e:34:85:c5:80:dc:1e:89:2b:02: 2d:89:1c:61:41:56:85:0e:8f:ef:67:02:f1:60:47:9d:7c:e8: 20:da:5a:2d:14:c3:02:70:c8:52:8a:38:0d:81:51:27:cd:27: 9e:20:85:ea:9b:36:e8:1c:6d:04:e2:d2:32:bb:a6:79:e8:40: 5f:9c:71:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqudeZ/34lnXjloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk YzM1YzIyNjItYzRiNy00YjhmLTllZGYtOGEwM2MyMzllMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj27VrPyZjS7ImK6/fjnY1dYzjIOVr9x+ZVGd G1FyQ15HzxAi3JcgkBc/5ZnjHEY+qm91CPms2TMbOJfE8r8f5Twij/W10Mvof6MW p/E30w96x5IiSqnNyiAJ/47+JbFA5ok6TR1tm2Mbo35BIxxvSuajqmTZraoQvHHx gS8bJqqxwHYlPgfBl1arz4/JltyAwQgzYCMfxJOM7ktcck3Z8tbOEk/Phf376OnL SaolwI3SV5c86He896CSwVUJZXPDmawCLzWkv7WK2/lm/4LUaxb5N8lWDaQOw6Sh AVGZAwV46kzowNhPXXOeobtG14Cc4ZLYJQPWDk2gG2KcahO5iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+AZE18vpFQuP6E6JMC/kx9SLOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2U4MjE5Y2MtYzVkMi0z NWFmLTg0YTUtYWFhOGMxNzVmZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT9TbkfwmUohcNe9/5zTv60h+2wVNm4V33ghqOMo86Z/7jqxtdciTsX 0L7nFsczpQgU1bqfYSrqnkm48KS6HzZxKgSSqoEkvEZuuB14g9JEsbBRAVGpOzCN MG0LQ6Iic4BOUh6AeRBPw5PeLcxfv7TRqSgwUOVQj4srW/08calk961Ay+LfRvXv GvdJSG5wg66QHlM18001z9QeScfi+WOi2Eoh/sqOoWsBWWOBKOs34zQpw/DoV2gA /xFfbjSFxYDcHokrAi2JHGFBVoUOj+9nAvFgR5186CDaWi0UwwJwyFKKOA2BUSfN J54gheqbNugcbQTi0jK7pnnoQF+cca4= -----END CERTIFICATE-----Generated at Wed May 13 09:34:14 2026 by rpki-client