$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa File: f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa (raw, json) Hash identifier: pFhjuYal6G5Ykq1dFzEUeRic5WZt3cVKef29Rtm9FTY= Subject key identifier: 7B:0A:40:52:4F:6A:41:18:87:10:B9:34:5E:77:1A:27:97:FC:7C:2D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1897AF562BC5C2A6F6A078C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 52.122.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:af:56:2b:c5:c2:a6:f6:a0:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=93da6b8d-1f9a-4745-af91-2775d11c7985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ea:6a:e3:a3:4d:02:d4:a9:c9:f1:90:67:e9: 9f:a9:19:5e:11:ad:16:0c:22:46:94:4f:ab:00:f6: 88:f3:c8:3a:a9:09:e3:57:98:0f:9c:f2:65:db:a4: 0c:3f:a0:d3:10:90:94:0b:5d:61:44:a4:20:50:25: 59:f3:95:2f:eb:de:e6:28:42:01:d7:11:c1:10:dd: f4:93:bd:a9:48:83:95:41:32:0a:92:57:72:46:a8: 51:f5:5c:b4:8a:b7:f7:14:da:3d:e6:62:81:80:29: c6:2e:bd:84:33:a7:03:54:a0:10:c3:00:d2:63:67: a6:07:92:28:64:a6:a6:bc:5e:f4:e3:36:cc:3d:ea: 50:26:13:7f:f5:3b:d3:ea:d2:c7:a3:c8:48:43:d1: 4c:74:29:d3:12:19:5f:41:9e:46:74:3b:ee:04:25: 5d:32:5f:86:46:9f:9d:94:7c:d8:f3:6f:20:9f:75: 92:c0:2b:0d:fe:6f:8c:ab:81:d5:35:50:89:04:b7: 4b:23:38:5a:28:87:94:7b:b9:d7:d4:1b:31:72:a1: 44:56:cf:dd:bb:2e:a1:c4:04:50:f7:28:cc:6c:6b: 7d:86:c7:9e:c1:6d:2a:3f:49:54:6b:f7:4b:37:9c: 10:a2:e9:5b:9a:34:d3:53:9c:76:5c:c7:cd:2d:c7: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0A:40:52:4F:6A:41:18:87:10:B9:34:5E:77:1A:27:97:FC:7C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:22:6b:71:61:14:fd:59:58:e3:84:a0:d2:ee:c6:a6:a5:86: 23:dc:43:43:5e:43:e2:86:ee:d1:95:6f:0e:eb:48:84:6c:6c: f3:fa:17:95:dc:1d:e7:e3:cb:c9:86:70:f6:a8:97:1f:f8:f7: 3c:93:79:f8:1f:9b:51:47:e1:e7:c9:03:a0:af:e3:12:c8:cc: 70:6b:86:59:0a:ae:a1:ce:93:6d:e5:b8:3a:81:22:95:bb:41: 7e:35:c4:18:d6:98:d9:23:3a:fd:a4:49:fe:92:8f:12:44:08: 72:a0:4a:85:2b:5b:c5:f4:7a:ac:e8:9d:f0:9d:87:42:fd:b6: 8d:17:e0:e4:42:e5:ba:f5:02:85:95:83:60:94:59:3f:d3:a2: 64:57:70:3c:10:64:ad:21:00:43:56:20:05:cc:45:7f:0a:78: e0:c3:3a:2e:67:d2:49:fe:02:90:88:fb:5f:f6:52:29:87:82: 97:0c:63:d8:33:b3:af:d8:ca:ac:8e:08:30:48:f2:c3:95:06: d6:57:b9:59:00:83:21:b5:44:88:12:bf:77:5e:ec:82:bd:de: 89:48:ee:59:0d:76:55:98:2a:cb:76:cd:cd:fd:b1:b0:d2:ac: 43:0f:54:fb:a3:7a:62:c7:ae:44:42:56:f6:ea:a9:38:56:56: c7:0c:8b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl69WK8XCpvageMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk OTNkYTZiOGQtMWY5YS00NzQ1LWFmOTEtMjc3NWQxMWM3OTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8upq46NNAtSpyfGQZ+mfqRleEa0WDCJGlE+r APaI88g6qQnjV5gPnPJl26QMP6DTEJCUC11hRKQgUCVZ85Uv697mKEIB1xHBEN30 k72pSIOVQTIKkldyRqhR9Vy0irf3FNo95mKBgCnGLr2EM6cDVKAQwwDSY2emB5Io ZKamvF704zbMPepQJhN/9TvT6tLHo8hIQ9FMdCnTEhlfQZ5GdDvuBCVdMl+GRp+d lHzY828gn3WSwCsN/m+Mq4HVNVCJBLdLIzhaKIeUe7nX1BsxcqFEVs/duy6hxARQ 9yjMbGt9hseewW0qP0lUa/dLN5wQoulbmjTTU5x2XMfNLcdr9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsKQFJPakEYhxC5NF53GieX/HwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjVlMTQ2MzgtMDJkMS0z NTI5LWJkYzYtYWZhNGM3Mzg2ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8ia3FhFP1ZWOOEoNLuxqalhiPcQ0NeQ+KG7tGVbw7rSIRsbPP6F5Xc Hefjy8mGcPaolx/49zyTefgfm1FH4efJA6Cv4xLIzHBrhlkKrqHOk23luDqBIpW7 QX41xBjWmNkjOv2kSf6SjxJECHKgSoUrW8X0eqzonfCdh0L9to0X4ORC5br1AoWV g2CUWT/TomRXcDwQZK0hAENWIAXMRX8KeODDOi5n0kn+ApCI+1/2UimHgpcMY9gz s6/YyqyOCDBI8sOVBtZXuVkAgyG1RIgSv3de7IK93olI7lkNdlWYKst2zc39sbDS rEMPVPujemLHrkRCVvbqqThWVscMixI= -----END CERTIFICATE-----Generated at Sat Oct 10 14:30:14 2026 by rpki-client