$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa File: ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa (raw, json) Hash identifier: gEn65W5G2ACpTzIFCujMXy9zKY0SxxA9LAJESpu+Mq0= Subject key identifier: 17:12:54:DF:E7:87:2C:12:00:EF:2C:2D:60:B9:47:B5:10:58:3A:C3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E8DEFAE3820E956CE6E1EA880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 52.122.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:ae:38:20:e9:56:ce:6e:1e:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=cf85525a-80ea-41d9-a1a8-fd493d6dcccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:34:0d:0a:b2:35:2b:81:41:4d:4d:0a:43: a3:90:27:97:80:3d:5d:39:c0:80:7a:b8:8e:1f:73: 08:36:74:5f:a2:03:14:1b:f1:85:54:ee:2a:f5:b0: 11:6e:c7:28:04:3c:33:ae:ab:1a:77:8f:f9:7b:dc: 2a:ac:a0:4b:14:90:fe:33:64:a1:e8:6c:40:81:66: 1f:a8:46:ab:e0:de:b2:32:cb:b0:c1:86:56:a4:e4: c2:28:f8:60:f0:c3:6f:c2:76:85:42:9b:da:fb:50: 76:2c:a5:e1:9d:8a:11:e8:6b:4c:a2:3a:b2:30:4a: 93:ea:f1:e7:d7:34:31:e4:dc:89:87:ec:1d:3c:f9: c5:f1:02:5f:d6:e2:3b:8a:16:8c:dc:02:4e:ec:41: e5:95:c7:3f:cb:3e:d2:56:76:18:71:71:ff:4a:d2: 53:3f:30:85:c3:d6:47:5d:4b:3f:88:16:d0:b8:04: c8:26:8e:ec:6b:92:6e:fd:05:3f:18:60:d7:93:43: 8a:a1:65:6a:54:5e:61:0c:8d:e0:65:4e:58:14:98: 05:ea:d9:da:97:4e:38:c3:b5:da:40:b7:61:16:e0: e4:af:d5:42:43:d7:f6:31:3f:13:e6:30:7e:31:58: 42:2b:c3:ce:0a:c7:47:35:10:e7:21:2f:67:15:f7: 93:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:12:54:DF:E7:87:2C:12:00:EF:2C:2D:60:B9:47:B5:10:58:3A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:2c:bd:45:dc:0d:77:6e:58:ff:2c:2f:dc:0f:f2:87:3d:d0: b7:05:1b:e9:cb:0a:f0:c2:12:f9:db:57:f5:fa:a4:b8:26:f3: 77:f2:b6:96:98:0e:bd:b2:d6:69:ee:f0:c4:e9:76:04:a0:1c: b9:2d:d8:00:94:3c:81:58:4c:7d:35:e9:cd:f1:8d:21:96:3b: 13:86:1f:58:3a:2a:ec:31:63:d2:d9:54:75:5d:2f:5c:ff:aa: d3:94:19:51:ae:67:6e:8d:18:1b:eb:4a:e0:46:bc:57:bd:53: 3d:1d:cc:e8:32:4f:46:49:94:cd:58:db:24:37:9a:55:99:6b: 1e:33:ea:29:80:d6:46:0f:9e:a6:df:73:21:c2:e7:0b:cb:87: 53:63:5c:36:79:81:61:fd:54:ea:18:80:40:04:ec:3e:62:cc: ca:58:e3:83:5f:c3:16:39:32:74:50:4f:3e:bc:b7:63:fb:22: 55:cb:0e:72:0a:dc:b2:c1:a2:2a:c2:19:1c:5f:bf:23:34:4f: de:55:25:fd:6a:ea:d9:52:ab:a2:20:55:af:1a:39:3e:4c:2d: 01:0e:35:93:31:77:4f:0f:26:21:58:41:5a:3c:05:4b:16:65: 49:b0:14:0b:c1:16:e0:e8:5a:14:47:d5:2d:86:f7:c3:03:a2: 38:da:3e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N7644IOlWzm4eqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk Y2Y4NTUyNWEtODBlYS00MWQ5LWExYTgtZmQ0OTNkNmRjY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQI0DQqyNSuBQU1NCkOjkCeXgD1dOcCAeriO H3MINnRfogMUG/GFVO4q9bARbscoBDwzrqsad4/5e9wqrKBLFJD+M2Sh6GxAgWYf qEar4N6yMsuwwYZWpOTCKPhg8MNvwnaFQpva+1B2LKXhnYoR6GtMojqyMEqT6vHn 1zQx5NyJh+wdPPnF8QJf1uI7ihaM3AJO7EHllcc/yz7SVnYYcXH/StJTPzCFw9ZH XUs/iBbQuATIJo7sa5Ju/QU/GGDXk0OKoWVqVF5hDI3gZU5YFJgF6tnal044w7Xa QLdhFuDkr9VCQ9f2MT8T5jB+MVhCK8POCsdHNRDnIS9nFfeTZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcSVN/nhywSAO8sLWC5R7UQWDrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2U4MjE5Y2MtYzVkMi0z NWFmLTg0YTUtYWFhOGMxNzVmZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJosvUXcDXduWP8sL9wP8oc90LcFG+nLCvDCEvnbV/X6pLgm83fytpaY Dr2y1mnu8MTpdgSgHLkt2ACUPIFYTH016c3xjSGWOxOGH1g6KuwxY9LZVHVdL1z/ qtOUGVGuZ26NGBvrSuBGvFe9Uz0dzOgyT0ZJlM1Y2yQ3mlWZax4z6imA1kYPnqbf cyHC5wvLh1NjXDZ5gWH9VOoYgEAE7D5izMpY44NfwxY5MnRQTz68t2P7IlXLDnIK 3LLBoirCGRxfvyM0T95VJf1q6tlSq6IgVa8aOT5MLQEONZMxd08PJiFYQVo8BUsW ZUmwFAvBFuDoWhRH1S2G98MDojjaPmA= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:51 2026 by rpki-client