$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa File: b8ae9718-f55e-3239-a6dd-058166da4e45.roa (raw, json) Hash identifier: CtnsY7Pf4g6JZTF16GxcnYDPz2ERShl9b9DDxCAMec4= Subject key identifier: D9:ED:C4:09:84:E5:71:36:C7:95:8A:1F:9D:A7:80:C9:31:CE:1F:13 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E885A4F652933BF8BFEE08340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 52.122.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4f:65:29:33:bf:8b:fe:e0:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=b034ef43-9cf4-41f2-9230-d5131fd38c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:05:14:18:d1:3b:bd:94:3d:ad:d2:af:f4: 50:c3:18:6f:fb:e8:d4:3d:70:d0:b8:14:57:bf:86: 49:37:40:a3:8b:f3:73:9b:d7:9e:80:b4:46:12:19: 5b:15:c8:2f:f4:42:2d:fd:61:d1:c0:c5:2e:61:af: 76:c7:ab:41:63:41:b7:f6:aa:e9:0e:92:73:77:e3: c8:e5:51:ea:da:99:2f:3d:34:81:89:ed:ad:50:d2: 9e:fc:e1:d3:28:a0:af:56:d5:b6:64:c8:66:dd:ba: 46:d4:45:f2:1e:d6:06:23:2e:58:00:d7:bf:9c:42: 35:a2:72:59:15:c8:a9:3b:d8:e1:cc:0b:25:7c:b4: 5a:dd:f8:4f:4c:52:b3:1b:bc:23:93:a0:82:c8:ad: 94:10:c8:bb:ca:c0:42:e7:3f:fa:7f:07:70:a3:c6: 30:85:42:e7:52:23:cb:1c:31:d5:de:74:8c:b2:e6: 2a:3c:75:b3:a6:08:35:08:70:70:ea:ec:db:5f:8a: 6e:4c:b8:f7:99:0a:03:92:52:1b:1a:1c:c3:cf:f6: 39:57:eb:f6:8e:11:cb:d5:b1:cc:67:9c:74:e5:9d: fa:93:10:a9:c4:af:ae:e4:d6:10:91:5a:8a:f2:e3: 7c:fc:8e:1e:de:c0:55:b6:35:9d:19:87:17:cf:4d: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:ED:C4:09:84:E5:71:36:C7:95:8A:1F:9D:A7:80:C9:31:CE:1F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:78:04:a9:60:20:00:0e:94:19:0a:c5:a2:12:1c:63:47:92: 06:74:e1:4d:cd:0b:3d:4b:a8:65:9e:c4:12:fd:22:85:b4:28: 1f:a1:3c:30:e6:7e:26:38:15:5e:09:eb:33:90:13:97:6f:76: 99:88:15:80:79:6d:d9:50:17:20:43:ca:7c:78:ec:f6:1a:38: 05:a3:fe:7a:aa:80:d5:cf:20:42:43:ed:76:41:6e:83:8e:ce: ca:87:65:4a:65:2b:85:18:70:36:73:e1:e9:86:c8:d6:1c:93: 40:0c:98:50:2b:ee:93:38:32:19:94:25:92:b9:79:f2:4a:dc: 35:03:b5:3a:52:eb:7d:88:66:ed:a0:4e:b4:60:1a:58:17:56: c2:64:dc:ab:ce:74:48:0e:df:a2:77:71:e3:af:6b:a8:86:ff: ee:5c:ab:0b:1c:fc:78:32:de:14:25:a6:15:59:0a:cc:67:15: c7:ea:c3:5e:61:8f:df:81:22:f3:47:66:8c:ad:1d:5c:5b:5d: cd:24:e2:6e:97:05:7d:3d:64:d4:e2:9a:6d:6b:9b:5b:12:4e: 7c:e0:d8:d7:a7:fb:af:a9:a8:d9:6e:3a:46:a3:35:99:dd:3f: 1a:32:a1:f6:d5:4e:8a:06:bf:7b:02:cb:21:23:7a:f9:4b:56: 29:51:fe:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWk9lKTO/i/7gg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk YjAzNGVmNDMtOWNmNC00MWYyLTkyMzAtZDUxMzFmZDM4Yzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0wFFBjRO72UPa3Sr/RQwxhv++jUPXDQuBRX v4ZJN0Cji/Nzm9eegLRGEhlbFcgv9EIt/WHRwMUuYa92x6tBY0G39qrpDpJzd+PI 5VHq2pkvPTSBie2tUNKe/OHTKKCvVtW2ZMhm3bpG1EXyHtYGIy5YANe/nEI1onJZ FcipO9jhzAslfLRa3fhPTFKzG7wjk6CCyK2UEMi7ysBC5z/6fwdwo8YwhULnUiPL HDHV3nSMsuYqPHWzpgg1CHBw6uzbX4puTLj3mQoDklIbGhzDz/Y5V+v2jhHL1bHM Z5x05Z36kxCpxK+u5NYQkVqK8uN8/I4e3sBVtjWdGYcXz01HBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNntxAmE5XE2x5WKH52ngMkxzh8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjhhZTk3MTgtZjU1ZS0z MjM5LWE2ZGQtMDU4MTY2ZGE0ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx4BKlgIAAOlBkKxaISHGNHkgZ04U3NCz1LqGWexBL9IoW0KB+hPDDm fiY4FV4J6zOQE5dvdpmIFYB5bdlQFyBDynx47PYaOAWj/nqqgNXPIEJD7XZBboOO zsqHZUplK4UYcDZz4emGyNYck0AMmFAr7pM4MhmUJZK5efJK3DUDtTpS632IZu2g TrRgGlgXVsJk3KvOdEgO36J3ceOva6iG/+5cqwsc/Hgy3hQlphVZCsxnFcfqw15h j9+BIvNHZoytHVxbXc0k4m6XBX09ZNTimm1rm1sSTnzg2Nen+6+pqNluOkajNZnd PxoyofbVTooGv3sCyyEjevlLVilR/gk= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:59 2026 by rpki-client