$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e060f73a-cc71-3717-9a65-c4449d65942b.roa File: e060f73a-cc71-3717-9a65-c4449d65942b.roa (raw, json) Hash identifier: Gwbo9Z/8MCy3mgwIm4QTnL8EFQxS6Ay5rMQyxjK2rsQ= Subject key identifier: D0:D8:59:F4:2F:B0:0A:DD:33:49:67:C2:AF:63:5E:8F:BD:F5:6B:5B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D975566B351FA0F996594F480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e060f73a-cc71-3717-9a65-c4449d65942b.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 52.122.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:66:b3:51:fa:0f:99:65:94:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=f4f4775d-147a-46a3-8555-5f7f12d87f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c5:37:e8:14:8a:be:21:47:f2:1e:b8:4c:01: 89:fd:eb:29:23:67:79:0d:0a:30:30:1e:51:cc:04: 8e:1e:63:ec:63:e1:0b:fb:57:4e:64:b1:71:53:ec: 12:73:b4:f0:7f:4d:7e:04:d2:cb:9d:ca:71:c5:65: b4:87:51:2b:c6:c3:4f:54:2c:83:b9:35:49:80:fa: d8:0c:2f:6d:d1:02:17:bb:1c:ba:b1:36:2b:d4:86: d5:09:3b:2c:02:71:d0:f2:f4:7c:b9:57:b2:c6:c5: b0:91:4d:7f:25:ed:55:31:ee:cc:b6:bb:20:fe:3e: 9d:fe:4d:8f:7c:05:11:32:d0:1b:a7:dd:c2:ec:f6: 8b:bd:c9:35:21:26:c8:f7:8f:3a:94:57:33:ca:c0: 68:94:04:8e:75:a3:c0:ff:0e:58:0b:82:a6:2c:72: e3:5e:d2:73:62:7c:06:bf:6c:85:d9:be:6d:94:5a: 8c:47:cd:4e:72:74:d6:22:5c:d6:7a:44:df:87:80: a9:37:7c:04:77:bb:60:31:b7:d8:84:65:3a:9c:ca: ff:b7:f4:fd:ee:2f:b3:cb:04:ec:02:fa:d6:47:1f: fe:65:03:96:b1:31:d2:d9:f9:94:6a:2c:3f:29:b6: 50:ba:31:aa:a2:2a:10:98:32:a6:60:b0:f3:99:7b: 00:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D8:59:F4:2F:B0:0A:DD:33:49:67:C2:AF:63:5E:8F:BD:F5:6B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e060f73a-cc71-3717-9a65-c4449d65942b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d2:be:77:56:06:f4:d0:f4:f7:bc:0f:59:af:92:65:6c:d0: 63:7a:48:ae:0a:21:1b:f5:81:7d:e9:be:9d:5c:48:97:48:6c: 40:12:9f:28:e8:51:34:58:04:57:23:4a:ba:1d:e8:e3:c0:e5: ac:25:93:91:df:c2:8b:de:ad:33:a4:c4:40:b8:fa:92:5a:e2: 2f:82:bc:64:ec:3b:6c:16:02:32:06:2d:76:76:23:6e:f3:da: 7a:d0:ca:91:60:82:f3:f8:b2:cb:f0:ec:68:36:82:cc:82:88: 12:89:27:ab:6e:e4:eb:06:7e:1f:f1:45:35:86:42:a3:09:56: 00:a9:ae:ce:15:0b:b7:4f:eb:2d:2d:2e:6b:01:18:0d:38:aa: 67:fb:c3:f7:7d:17:81:84:2c:27:34:6f:ba:4d:4d:cf:1a:5d: 0f:0a:82:89:8f:88:43:9f:b2:c7:f3:8d:1a:0c:d0:96:83:b3: 63:68:da:cc:c1:aa:ec:f3:5e:76:e4:70:c5:9a:36:55:6f:69: 56:05:b2:d4:4a:67:4e:a9:f2:40:30:fd:61:2f:cd:05:bf:b9: e5:38:02:71:71:26:d3:60:5a:28:a9:cf:dc:eb:22:cb:20:ee: e8:d6:76:76:19:da:a7:9c:72:99:fc:03:a3:f3:2c:27:8c:32: 57:50:2e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWazUfoPmWWU9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk ZjRmNDc3NWQtMTQ3YS00NmEzLTg1NTUtNWY3ZjEyZDg3ZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsU36BSKviFH8h64TAGJ/espI2d5DQowMB5R zASOHmPsY+EL+1dOZLFxU+wSc7Twf01+BNLLncpxxWW0h1ErxsNPVCyDuTVJgPrY DC9t0QIXuxy6sTYr1IbVCTssAnHQ8vR8uVeyxsWwkU1/Je1VMe7Mtrsg/j6d/k2P fAURMtAbp93C7PaLvck1ISbI9486lFczysBolASOdaPA/w5YC4KmLHLjXtJzYnwG v2yF2b5tlFqMR81OcnTWIlzWekTfh4CpN3wEd7tgMbfYhGU6nMr/t/T97i+zywTs AvrWRx/+ZQOWsTHS2fmUaiw/KbZQujGqoioQmDKmYLDzmXsASQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDYWfQvsArdM0lnwq9jXo+99WtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTA2MGY3M2EtY2M3MS0z NzE3LTlhNjUtYzQ0NDlkNjU5NDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbSvndWBvTQ9Pe8D1mvkmVs0GN6SK4KIRv1gX3pvp1cSJdIbEASnyjo UTRYBFcjSrod6OPA5awlk5HfwoverTOkxEC4+pJa4i+CvGTsO2wWAjIGLXZ2I27z 2nrQypFggvP4ssvw7Gg2gsyCiBKJJ6tu5OsGfh/xRTWGQqMJVgCprs4VC7dP6y0t LmsBGA04qmf7w/d9F4GELCc0b7pNTc8aXQ8KgomPiEOfssfzjRoM0JaDs2No2szB quzzXnbkcMWaNlVvaVYFstRKZ06p8kAw/WEvzQW/ueU4AnFxJtNgWiipz9zrIssg 7ujWdnYZ2qeccpn8A6PzLCeMMldQLsY= -----END CERTIFICATE-----Generated at Wed May 13 12:50:39 2026 by rpki-client