$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa File: d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa (raw, json) Hash identifier: dAJcu2GXiwTZXS2nQBu8/w9UdzX5gE+zkQQXsvacBe4= Subject key identifier: A1:56:9F:65:99:36:BA:B4:58:8B:5F:50:98:8A:AA:F3:FA:2F:F7:32 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2ABD25325418332FF8B4DA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 52.122.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:25:32:54:18:33:2f:f8:b4:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=8200aea8-122e-4985-9cd4-f613b804ad5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:50:1e:ec:89:49:94:f3:77:e6:d0:1f:80: 3f:5a:bd:06:b9:bb:37:fa:2a:7c:1f:cd:84:5a:4f: 23:68:a4:35:07:e6:0a:24:64:41:fa:bc:7c:f4:8c: ef:25:9f:ba:79:05:14:a6:5b:57:06:19:b1:fb:48: 08:80:de:4f:86:cb:95:45:42:1b:ea:23:04:07:f1: 88:b9:f5:55:7c:2a:62:41:13:fd:fa:bd:18:c2:82: 61:b8:46:96:b7:0a:81:9a:29:5d:ed:e2:e1:00:d5: 05:79:6b:e5:7a:64:47:cb:e3:6b:8b:95:46:4b:ee: 57:b8:9a:94:4c:65:6d:b4:d2:23:2b:da:8d:50:60: 32:0b:eb:5e:3e:7b:ec:89:c4:7a:ad:72:e4:28:09: cb:49:ed:e4:71:49:10:a2:b8:85:1c:01:ff:df:ed: c4:f1:89:9e:7c:ef:db:a3:74:45:6b:e9:c2:b9:f9: d4:56:9a:1e:8a:fe:2a:dc:2f:8c:06:be:30:ad:15: 1e:3f:d1:0c:f0:fc:1d:1b:b6:a2:7d:6a:1e:63:76: 29:82:8b:ea:af:d3:3d:dc:6e:8c:b6:96:df:13:5e: 13:5d:b8:84:b3:b1:d2:d2:e5:38:5e:81:54:5e:a6: 8c:24:cc:c5:ee:ed:f5:85:35:77:24:b6:1a:63:0e: e9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:9F:65:99:36:BA:B4:58:8B:5F:50:98:8A:AA:F3:FA:2F:F7:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3c:0d:f0:19:32:8a:44:e7:98:7b:62:7a:26:8b:4d:78:46: 33:d0:8e:22:21:92:8e:56:2f:9b:0b:40:cd:93:16:f6:7e:3b: 49:b2:6d:25:0c:17:80:d5:d8:ef:6c:f2:0b:91:19:33:e4:50: 01:a8:c3:26:ab:a2:59:9e:e5:97:19:04:84:ab:22:b3:2c:5c: 31:4e:3c:26:2b:0c:60:d0:6a:d7:7d:03:a4:c3:e9:39:0e:68: 22:c2:f8:73:4c:e8:8a:4a:01:53:cf:06:63:8d:fa:74:99:0e: da:5b:ac:71:7e:47:22:7e:e4:4a:ca:15:bb:11:c6:99:56:67: f0:72:89:bd:00:b4:7d:bd:ac:6b:0e:fd:25:d7:bd:7c:01:12: a0:7e:59:b4:18:c9:b7:4c:b1:28:ff:f3:6b:d7:1c:43:50:ae: 0d:79:d3:bf:e3:69:07:c8:79:b3:33:64:f6:f0:7e:dd:9f:76: c9:3a:7b:75:d2:3b:48:c0:12:6c:19:23:16:cd:14:f8:e9:7c: 3f:13:4d:cc:d7:70:f7:2b:4f:8d:56:bb:37:9c:58:22:be:be: 08:85:7f:25:5f:81:cf:c3:73:f2:bf:37:cd:80:23:79:75:87: fd:03:21:1f:1b:08:b0:f5:74:ce:4d:2a:c9:31:ca:ac:cd:ea: a0:37:77:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSUyVBgzL/i02gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ODIwMGFlYTgtMTIyZS00OTg1LTljZDQtZjYxM2I4MDRhZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+RQHuyJSZTzd+bQH4A/Wr0Gubs3+ip8H82E Wk8jaKQ1B+YKJGRB+rx89IzvJZ+6eQUUpltXBhmx+0gIgN5PhsuVRUIb6iMEB/GI ufVVfCpiQRP9+r0YwoJhuEaWtwqBmild7eLhANUFeWvlemRHy+Nri5VGS+5XuJqU TGVttNIjK9qNUGAyC+tePnvsicR6rXLkKAnLSe3kcUkQoriFHAH/3+3E8YmefO/b o3RFa+nCufnUVpoeiv4q3C+MBr4wrRUeP9EM8PwdG7aifWoeY3Ypgovqr9M93G6M tpbfE14TXbiEs7HS0uU4XoFUXqaMJMzF7u31hTV3JLYaYw7pgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFWn2WZNrq0WItfUJiKqvP6L/cyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDE1N2VhMmMtYjA3ZC0z MmZiLWJjZmUtNDBjNTZmMDBiMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc8DfAZMopE55h7Ynomi014RjPQjiIhko5WL5sLQM2TFvZ+O0mybSUM F4DV2O9s8guRGTPkUAGowyarolme5ZcZBISrIrMsXDFOPCYrDGDQatd9A6TD6TkO aCLC+HNM6IpKAVPPBmON+nSZDtpbrHF+RyJ+5ErKFbsRxplWZ/Byib0AtH29rGsO /SXXvXwBEqB+WbQYybdMsSj/82vXHENQrg1507/jaQfIebMzZPbwft2fdsk6e3XS O0jAEmwZIxbNFPjpfD8TTczXcPcrT41WuzecWCK+vgiFfyVfgc/Dc/K/N82AI3l1 h/0DIR8bCLD1dM5NKskxyqzN6qA3d9Y= -----END CERTIFICATE-----Generated at Mon Sep 28 16:23:33 2026 by rpki-client