$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa File: f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa (raw, json) Hash identifier: AlatQesO0RWQzLUcxcBwHqhP8jNWnyAQLs16JUzUuWc= Subject key identifier: 09:E9:DC:AB:48:77:F8:FF:EF:D1:FA:F3:DB:9C:1A:10:98:4D:D4:1D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D95F00D5B6A1E5DC4A184A880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 52.122.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0d:5b:6a:1e:5d:c4:a1:84:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=2c0eaa9e-1824-4285-9470-da79a214f0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0a:23:2e:60:6a:7e:b9:ef:4d:13:34:ef:f6: 53:bf:f9:64:d5:5b:39:da:29:3b:3c:8a:11:39:60: c4:61:e2:f0:94:3b:89:56:d6:28:2e:48:da:b8:ce: 2b:fb:7e:03:fa:7c:75:58:f2:37:5b:25:96:e8:9c: 0b:1c:ed:2d:50:f4:a0:1e:28:c4:1c:6b:fc:ec:93: 13:77:d9:a2:7c:d5:44:14:74:22:56:b1:e6:ee:a8: d2:ed:fb:3e:27:af:f2:97:c6:70:bc:e7:e3:dc:49: f2:9d:5d:3b:7d:2f:38:fa:64:dd:8e:8d:e2:af:14: 94:1b:a6:5a:5d:54:60:05:2a:3c:f7:52:50:ef:e3: ca:03:30:d2:5b:4a:26:7f:8a:b8:dc:0c:f6:a6:0b: f7:e5:f2:8f:8f:bd:9f:b3:a1:c6:7d:01:ce:08:bc: 9b:fd:05:a6:e6:cc:21:55:12:4d:1c:bf:dd:8f:a4: 6f:7b:e6:52:9d:ef:00:85:c2:ac:da:73:f7:38:c3: fd:cb:0f:0d:2a:a9:7b:41:dd:b1:45:a0:ad:18:d6: 4e:10:bd:e1:df:4d:76:84:e9:38:07:bc:5d:bb:ee: 40:64:d3:89:3b:98:03:a7:bd:96:2c:57:07:45:bf: 9d:9e:51:56:67:a9:bd:49:9c:59:da:d5:e6:f2:c2: 82:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E9:DC:AB:48:77:F8:FF:EF:D1:FA:F3:DB:9C:1A:10:98:4D:D4:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:67:43:cb:6c:d0:a8:c4:48:39:56:89:c0:93:ad:72:a8:39: 84:76:5d:cb:e5:4a:a0:39:92:e2:2e:0c:5d:75:2b:22:7a:72: 93:c5:f0:1c:3f:75:85:b2:33:9a:31:2f:fb:64:88:1c:84:7e: 87:b8:a3:29:b7:8e:07:a5:79:19:1d:6e:6f:71:5c:54:28:b7: 10:6d:33:7a:1c:d0:3d:96:4e:e5:27:4e:70:d3:36:16:2c:f5: 68:81:d2:af:ab:93:77:00:f0:3d:54:7b:ce:ea:c5:de:33:24: 17:05:4e:d8:2a:6b:a4:99:aa:35:b8:ed:a1:91:e2:95:d7:15: d2:ed:35:e6:4c:de:ef:1e:3d:6d:f2:89:87:5b:07:d3:8c:7a: 15:24:34:1f:ef:bf:30:7b:52:69:c1:1a:b0:a5:42:44:bd:4e: b5:b7:6c:86:cd:96:65:0c:07:2a:32:1a:ce:02:8a:32:aa:5a: 0a:89:ee:80:80:76:a4:1c:b1:23:47:6e:6c:35:62:a3:07:5b: 8f:13:2d:af:6d:83:37:ea:bd:e0:32:ae:c5:f1:35:95:21:ae: e1:5c:88:98:34:1b:55:6d:d5:31:fe:ab:0d:6b:56:ec:cf:db: 7b:02:f5:af:d9:9f:f9:44:a0:44:e9:66:1b:d9:57:4f:e1:3e: de:3e:80:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A1bah5dxKGEqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MmMwZWFhOWUtMTgyNC00Mjg1LTk0NzAtZGE3OWEyMTRmMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgojLmBqfrnvTRM07/ZTv/lk1Vs52ik7PIoR OWDEYeLwlDuJVtYoLkjauM4r+34D+nx1WPI3WyWW6JwLHO0tUPSgHijEHGv87JMT d9mifNVEFHQiVrHm7qjS7fs+J6/yl8ZwvOfj3EnynV07fS84+mTdjo3irxSUG6Za XVRgBSo891JQ7+PKAzDSW0omf4q43Az2pgv35fKPj72fs6HGfQHOCLyb/QWm5swh VRJNHL/dj6Rve+ZSne8AhcKs2nP3OMP9yw8NKql7Qd2xRaCtGNZOEL3h3012hOk4 B7xdu+5AZNOJO5gDp72WLFcHRb+dnlFWZ6m9SZxZ2tXm8sKC+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnp3KtId/j/79H689ucGhCYTdQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjVlMTQ2MzgtMDJkMS0z NTI5LWJkYzYtYWZhNGM3Mzg2ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9nQ8ts0KjESDlWicCTrXKoOYR2XcvlSqA5kuIuDF11KyJ6cpPF8Bw/ dYWyM5oxL/tkiByEfoe4oym3jgeleRkdbm9xXFQotxBtM3oc0D2WTuUnTnDTNhYs 9WiB0q+rk3cA8D1Ue87qxd4zJBcFTtgqa6SZqjW47aGR4pXXFdLtNeZM3u8ePW3y iYdbB9OMehUkNB/vvzB7UmnBGrClQkS9TrW3bIbNlmUMByoyGs4CijKqWgqJ7oCA dqQcsSNHbmw1YqMHW48TLa9tgzfqveAyrsXxNZUhruFciJg0G1Vt1TH+qw1rVuzP 23sC9a/Zn/lEoETpZhvZV0/hPt4+gBA= -----END CERTIFICATE-----Generated at Wed May 13 14:28:45 2026 by rpki-client