$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa File: 10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa (raw, json) Hash identifier: 6GlKZXYBbijHwoh6PvzM3g6CI12tjpBvf+W62Sy3phc= Subject key identifier: 3A:8E:15:41:B8:4B:DB:D0:72:E2:C5:0C:FA:DC:58:E9:60:FA:94:06 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B92DD444CA77D0FBF80807760 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 52.122.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:44:4c:a7:7d:0f:bf:80:80:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=90efcb98-2238-4ef3-8351-cf2a8cc78e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:30:e3:44:89:12:43:58:d9:25:63:f9:55: a7:99:27:93:47:57:3e:39:31:15:d4:ab:ca:02:c0: 58:25:7c:1e:61:14:52:36:38:66:2c:c2:b5:03:74: 29:75:97:9e:fd:76:0b:59:f6:a0:98:e1:08:a7:3c: 0c:09:25:48:56:fc:e9:c0:4b:ee:4c:3d:5f:31:50: e7:7a:dc:8d:db:95:70:b7:fc:f3:12:7a:1d:45:e7: 40:31:38:59:c8:33:3c:69:84:07:64:58:03:1b:b1: 2c:7c:b8:12:18:a4:7c:06:25:bb:f8:a0:6f:3d:54: e7:f6:1c:48:e1:40:7e:3b:c0:ef:91:3b:a3:2a:8b: ac:84:a0:71:22:10:6e:6d:05:7b:af:23:ef:72:a2: 9c:e0:1e:35:5e:8e:2d:62:ca:93:d9:01:e4:35:ee: e8:e3:05:cc:f1:ce:60:a3:62:97:89:82:4a:c9:55: d0:5f:30:5a:65:b5:93:9f:77:f6:aa:83:fe:be:fc: 79:fa:a9:4c:cc:64:e4:c0:1b:43:aa:09:7c:11:a7: df:8c:46:47:0b:08:82:72:88:d6:cc:be:f5:56:fb: b3:d3:93:7d:8a:d2:40:96:39:da:ce:37:46:d1:45: 4a:06:23:dc:41:33:e3:ca:a1:ae:f3:ed:62:7f:39: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8E:15:41:B8:4B:DB:D0:72:E2:C5:0C:FA:DC:58:E9:60:FA:94:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:55:8b:3c:12:ae:d0:99:70:4f:4f:8d:34:cd:5a:8a:00:84: 31:d1:d8:29:e4:de:76:c2:a9:04:7c:87:bb:5e:cf:68:5a:90: 68:3e:e9:04:f7:c2:25:75:ff:e9:87:0c:ec:7f:11:3c:12:9e: 7c:1d:01:06:53:55:78:b7:4a:b1:62:ac:c3:00:c8:2c:83:98: dc:77:86:32:0d:7c:17:21:6b:d2:7c:2a:e8:97:05:88:7d:97: 08:c2:3a:d9:62:08:13:81:eb:71:bc:39:1a:bb:6b:b6:ce:a2: f1:68:4d:91:08:f2:f7:b1:00:ce:91:c8:dc:f1:53:f4:35:49: a7:71:c6:ea:da:4e:9a:dd:bc:02:44:7b:20:65:42:38:09:f9: 4a:14:7c:c5:7a:99:3b:c0:a9:de:e1:c1:54:d2:40:b4:8c:01: e2:7d:68:6e:bf:74:dc:68:14:5f:2a:47:ec:52:ca:3a:97:bc: 2e:81:b7:e0:db:4c:51:00:79:17:8c:71:f4:5a:e7:a9:f3:6f: ce:5f:cb:b9:a6:c0:b5:bd:e9:c6:cc:d6:0b:f0:dc:ba:b8:cd: 38:62:b0:54:3e:b2:f3:35:96:f6:3c:ae:0e:3c:c6:b6:57:c7: 5d:33:7c:10:46:be:f6:65:7c:de:66:e7:70:7c:00:05:e1:44: 44:2f:9f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3URMp30Pv4CAd2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OTBlZmNiOTgtMjIzOC00ZWYzLTgzNTEtY2YyYThjYzc4ZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaAw40SJEkNY2SVj+VWnmSeTR1c+OTEV1KvK AsBYJXweYRRSNjhmLMK1A3QpdZee/XYLWfagmOEIpzwMCSVIVvzpwEvuTD1fMVDn etyN25Vwt/zzEnodRedAMThZyDM8aYQHZFgDG7EsfLgSGKR8BiW7+KBvPVTn9hxI 4UB+O8DvkTujKoushKBxIhBubQV7ryPvcqKc4B41Xo4tYsqT2QHkNe7o4wXM8c5g o2KXiYJKyVXQXzBaZbWTn3f2qoP+vvx5+qlMzGTkwBtDqgl8EaffjEZHCwiCcojW zL71Vvuz05N9itJAljnazjdG0UVKBiPcQTPjyqGu8+1ifzlG/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqOFUG4S9vQcuLFDPrcWOlg+pQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTBiZjNkNTQtMzgzZi0z MTI3LWJjNGUtMWJiOTNiOGY4YjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdVizwSrtCZcE9PjTTNWooAhDHR2Cnk3nbCqQR8h7tez2hakGg+6QT3 wiV1/+mHDOx/ETwSnnwdAQZTVXi3SrFirMMAyCyDmNx3hjINfBcha9J8KuiXBYh9 lwjCOtliCBOB63G8ORq7a7bOovFoTZEI8vexAM6RyNzxU/Q1SadxxuraTprdvAJE eyBlQjgJ+UoUfMV6mTvAqd7hwVTSQLSMAeJ9aG6/dNxoFF8qR+xSyjqXvC6Bt+Db TFEAeReMcfRa56nzb85fy7mmwLW96cbM1gvw3Lq4zThisFQ+svM1lvY8rg48xrZX x10zfBBGvvZlfN5m53B8AAXhREQvn1M= -----END CERTIFICATE-----Generated at Mon Oct 20 18:39:50 2025 by rpki-client