$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa File: d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa (raw, json) Hash identifier: doo7rkcoiowgY/eNsG1Oo21audg4etP4OEY9eRB3bCE= Subject key identifier: 4B:C2:B5:15:66:B2:AA:67:91:69:9A:0B:1B:6A:3E:42:A4:86:E7:D8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA8158A839A62C02C3E92F100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 52.122.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:8a:83:9a:62:c0:2c:3e:92:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=e7970cec-d002-4204-8f7f-db28414a5ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:a9:7c:14:a9:f8:fe:12:9e:1d:0a:df:24: 29:ed:34:49:66:a2:1a:b4:c2:c9:37:aa:bf:30:fa: 3f:96:1a:d5:17:0a:f4:d6:c5:b4:1c:24:fa:2d:a4: e2:24:6b:cf:65:74:52:31:e1:1f:09:cf:cd:aa:ca: c0:2d:cb:17:94:d8:50:a3:2c:e3:ee:eb:36:53:a1: a4:a2:a7:0e:1a:04:89:e9:cd:74:67:b0:28:43:ae: eb:5e:8f:80:0b:54:35:35:a3:cf:b6:e0:ec:c8:c3: a5:49:02:2e:3a:08:2c:ab:82:ee:4c:05:d7:88:7e: 80:31:7e:68:ac:75:56:69:a5:6b:03:7f:af:fa:36: e4:9b:09:01:15:33:95:77:a7:79:4a:36:4d:8e:59: 49:f8:17:11:8c:63:83:d5:2c:35:42:a1:5e:74:86: 73:f1:76:35:0f:c8:7b:15:a9:52:bb:c7:69:dd:be: 5c:02:63:5a:aa:f4:29:93:99:73:ad:93:4b:ed:51: 6a:d0:c9:7b:91:59:52:fa:ac:e9:a7:74:74:42:04: 9d:2b:88:f4:27:10:cd:f5:85:6c:75:c7:99:d9:e0: 21:d4:d5:a4:68:16:f1:e0:68:44:9e:62:71:45:95: bc:c3:58:20:a8:65:b6:93:11:dc:10:b4:7d:b6:ca: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C2:B5:15:66:B2:AA:67:91:69:9A:0B:1B:6A:3E:42:A4:86:E7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:cb:11:01:dc:93:c0:1f:cc:6c:b7:f4:d8:ef:44:f1:b8:8b: fc:e3:35:61:92:4d:c2:fb:1c:7f:ca:63:41:e6:dc:74:45:bc: cd:3f:70:8b:9a:21:a1:b8:f5:41:18:11:49:2e:2d:7e:4c:0a: fc:10:8e:de:e5:01:d9:41:f7:2b:ce:9e:b8:54:72:51:66:1d: 0d:0f:38:93:fa:96:ba:f5:a2:62:5e:2a:de:2c:7a:f0:9f:e1: 1f:dc:2b:94:f8:50:c3:c2:0d:bb:e8:2a:e6:58:b1:b5:e4:f1: 07:0e:a8:08:2e:ea:87:e7:c7:cc:97:4a:4a:c0:9c:6a:a2:af: 0d:1f:cf:99:39:f5:5b:f4:ab:8e:f6:9d:71:9f:51:82:f9:5b: 5f:bf:30:8b:a9:b0:9d:a5:dc:ba:87:fb:b5:b6:86:9b:e7:b6: 0a:76:56:61:69:03:05:f9:c9:72:37:b4:83:4a:20:5a:9d:0b: 60:1f:d6:e7:8b:01:16:5a:4f:6e:81:87:5a:03:6b:0c:2e:b9: f3:ee:14:6a:95:be:80:75:d8:fa:ff:27:3e:da:6d:8f:fd:ba: 63:e8:79:f5:7f:15:f8:82:e8:28:aa:31:62:4a:23:ab:29:10: 73:2a:f7:85:cd:65:07:b5:8b:f0:16:a5:0c:a2:78:80:d2:4f: da:17:d3:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYqDmmLALD6S8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk ZTc5NzBjZWMtZDAwMi00MjA0LThmN2YtZGIyODQxNGE1YWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNypfBSp+P4Snh0K3yQp7TRJZqIatMLJN6q/ MPo/lhrVFwr01sW0HCT6LaTiJGvPZXRSMeEfCc/NqsrALcsXlNhQoyzj7us2U6Gk oqcOGgSJ6c10Z7AoQ67rXo+AC1Q1NaPPtuDsyMOlSQIuOggsq4LuTAXXiH6AMX5o rHVWaaVrA3+v+jbkmwkBFTOVd6d5SjZNjllJ+BcRjGOD1Sw1QqFedIZz8XY1D8h7 FalSu8dp3b5cAmNaqvQpk5lzrZNL7VFq0Ml7kVlS+qzpp3R0QgSdK4j0JxDN9YVs dceZ2eAh1NWkaBbx4GhEnmJxRZW8w1ggqGW2kxHcELR9tspyiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvCtRVmsqpnkWmaCxtqPkKkhufYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDE1N2VhMmMtYjA3ZC0z MmZiLWJjZmUtNDBjNTZmMDBiMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjLEQHck8AfzGy39NjvRPG4i/zjNWGSTcL7HH/KY0Hm3HRFvM0/cIua IaG49UEYEUkuLX5MCvwQjt7lAdlB9yvOnrhUclFmHQ0POJP6lrr1omJeKt4sevCf 4R/cK5T4UMPCDbvoKuZYsbXk8QcOqAgu6ofnx8yXSkrAnGqirw0fz5k59Vv0q472 nXGfUYL5W1+/MIupsJ2l3LqH+7W2hpvntgp2VmFpAwX5yXI3tINKIFqdC2Af1ueL ARZaT26Bh1oDawwuufPuFGqVvoB12Pr/Jz7abY/9umPoefV/FfiC6CiqMWJKI6sp EHMq94XNZQe1i/AWpQyieIDST9oX020= -----END CERTIFICATE-----Generated at Wed May 13 08:12:09 2026 by rpki-client