$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa File: d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa (raw, json) Hash identifier: p8ELCKTuHph6jpseB5HYy3BpwkaXvZ4v8gNLfRyJh+E= Subject key identifier: DF:1F:1C:97:F1:A8:C6:9D:57:BB:0A:34:F8:32:D9:90:73:3B:10:98 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0746C95AB78D5DB677FFC580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 52.122.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c9:5a:b7:8d:5d:b6:77:ff:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=a3c5e219-c609-43e2-a33e-02d90fe5dbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:a3:09:ac:b9:47:d6:4e:5b:82:5d:3c:f1: 80:4a:ea:71:15:81:40:f2:79:f9:0a:71:9c:bc:73: 29:f4:89:00:67:32:94:ac:75:dc:75:e3:41:be:85: 1a:57:74:c0:8a:2f:f4:74:be:2f:83:95:86:82:01: d1:13:46:7f:19:fb:b5:14:90:70:a9:b5:64:4f:32: 8e:01:0b:a3:0f:93:a3:e6:06:c5:43:b6:c4:03:3c: 56:00:52:6b:68:3f:0c:f3:9c:6a:c1:5e:f0:e1:3e: fa:79:19:6f:95:eb:03:bd:05:99:41:0b:03:c1:92: c7:4f:af:9e:1d:c4:fd:41:38:ce:33:13:9b:ce:d7: b7:2b:b1:74:93:09:1e:bb:41:63:72:8e:e2:a5:06: 3f:42:6a:24:54:14:2e:a2:37:3f:c0:2d:da:9d:01: a0:d0:15:8f:b7:bd:91:f6:11:11:a0:6d:39:76:5c: 30:ef:94:ca:2d:df:22:4a:28:42:c6:58:10:3b:12: 93:a7:23:8c:d7:ec:7a:e7:08:81:27:e2:95:5d:e2: 28:2c:82:75:3b:3e:78:22:c3:2a:8d:0d:df:d2:18: 99:2d:5a:e1:dd:7e:54:51:c7:ed:35:7f:78:ff:27: 77:03:42:5c:8d:9d:9a:81:3d:27:35:2a:20:78:21: ed:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1F:1C:97:F1:A8:C6:9D:57:BB:0A:34:F8:32:D9:90:73:3B:10:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:62:ab:93:27:ea:e2:18:07:73:18:91:db:fb:d9:53:1e:53: df:9b:ea:3b:57:83:df:f1:0b:6b:24:f8:69:2b:7d:d4:7b:52: 9f:8b:49:f3:9e:e5:35:b4:b2:5b:66:14:aa:f7:0e:81:c1:c1: f9:42:02:2b:b0:a4:7b:30:d2:22:21:c5:49:43:45:8d:6b:19: be:ff:a4:36:17:22:da:21:a5:54:2b:e0:2d:a9:41:c8:7c:85: 82:76:cb:ae:6a:e3:fb:33:ec:75:b6:d7:2a:5c:0e:36:cb:0e: fb:65:d0:f9:94:84:a1:3b:f0:f8:de:4f:93:ba:d5:a3:e7:4e: 1c:98:eb:3c:ca:f6:84:7b:2a:1b:dc:86:ca:a3:b3:6d:52:ae: 3c:54:6f:86:b2:b3:b5:b5:5f:97:53:8e:6a:0c:1b:31:30:3f: 7a:a6:d7:27:c6:f3:5c:c9:b5:04:f4:1a:61:2b:c6:91:65:67: 98:99:33:ee:8a:98:59:50:09:59:6d:23:40:85:b9:b7:dd:96: 64:68:86:5d:54:2b:19:ce:60:c4:b1:52:5d:0c:a1:19:9b:b8: 83:b8:21:9c:37:2e:31:94:c0:41:c9:bb:36:a3:61:12:80:d8: 3c:a1:30:73:91:01:bb:21:b2:af:73:0b:cd:04:19:3f:ad:7d: d6:28:4a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRslat41dtnf/xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YTNjNWUyMTktYzYwOS00M2UyLWEzM2UtMDJkOTBmZTVkYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9GjCay5R9ZOW4JdPPGASupxFYFA8nn5CnGc vHMp9IkAZzKUrHXcdeNBvoUaV3TAii/0dL4vg5WGggHRE0Z/Gfu1FJBwqbVkTzKO AQujD5Oj5gbFQ7bEAzxWAFJraD8M85xqwV7w4T76eRlvlesDvQWZQQsDwZLHT6+e HcT9QTjOMxObzte3K7F0kwkeu0Fjco7ipQY/QmokVBQuojc/wC3anQGg0BWPt72R 9hERoG05dlww75TKLd8iSihCxlgQOxKTpyOM1+x65wiBJ+KVXeIoLIJ1Oz54IsMq jQ3f0hiZLVrh3X5UUcftNX94/yd3A0JcjZ2agT0nNSogeCHtWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8fHJfxqMadV7sKNPgy2ZBzOxCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDE1N2VhMmMtYjA3ZC0z MmZiLWJjZmUtNDBjNTZmMDBiMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZiq5Mn6uIYB3MYkdv72VMeU9+b6jtXg9/xC2sk+GkrfdR7Up+LSfOe 5TW0sltmFKr3DoHBwflCAiuwpHsw0iIhxUlDRY1rGb7/pDYXItohpVQr4C2pQch8 hYJ2y65q4/sz7HW21ypcDjbLDvtl0PmUhKE78PjeT5O61aPnThyY6zzK9oR7Khvc hsqjs21SrjxUb4ays7W1X5dTjmoMGzEwP3qm1yfG81zJtQT0GmErxpFlZ5iZM+6K mFlQCVltI0CFubfdlmRohl1UKxnOYMSxUl0MoRmbuIO4IZw3LjGUwEHJuzajYRKA 2DyhMHORAbshsq9zC80EGT+tfdYoSkQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:50:42 2025 by rpki-client