$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fafb4ce-dd0b-3be7-8570-cc1d244a1ba5.roa File: 1fafb4ce-dd0b-3be7-8570-cc1d244a1ba5.roa (raw, json) Hash identifier: m+GAf2ojbzn2X2NcXQv+Ttsw2T0hxy8xHT8dRjijWXc= Subject key identifier: E8:B5:0B:76:E9:3C:E1:4C:57:6D:91:B3:A9:F0:F3:77:10:5E:61:98 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235E523D8374729C250CC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fafb4ce-dd0b-3be7-8570-cc1d244a1ba5.roa Signing time: Wed 19 Aug 2026 18:04:05 +0000 ROA not before: Wed 19 Aug 2026 18:04:05 +0000 ROA not after: Sat 30 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 52.104.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5e:52:3d:83:74:72:9c:25:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:05 2026 GMT Not After : Mar 30 04:00:00 2030 GMT Subject: CN=c7b69a9d-8865-4e6e-b30c-cf7bd15b1ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:0c:ad:e4:26:0e:1b:e8:7d:16:a3:09:1c: 0f:7f:57:8e:92:97:84:74:3c:8d:8d:a3:1e:98:d6: a3:7b:0e:84:ac:12:e9:04:56:47:4c:8d:9a:86:4b: 71:34:d9:43:60:e3:b1:47:db:23:5a:dc:b2:5d:9a: 02:d4:99:28:60:df:cc:f6:6f:01:c8:fb:3f:2c:30: f8:e1:07:04:16:73:66:ea:4f:66:db:8c:96:85:81: 40:58:d0:10:9d:15:b3:d4:5f:60:35:43:ad:29:63: f9:00:05:1d:3e:0a:15:11:cc:a4:01:61:1d:d6:11: 1c:ab:d7:12:43:d3:90:d6:ea:9c:f8:1f:65:7b:bb: 9b:ad:bd:4c:c9:18:57:3e:d2:08:98:81:51:8d:19: 43:6e:04:13:c5:cb:5c:a5:1e:22:9b:ab:db:fc:78: bc:8b:4e:d5:c3:3d:df:4a:be:b0:cf:6b:1a:c6:2b: e1:cb:07:ae:65:fc:ea:8e:69:37:57:15:50:d5:88: 6f:f8:f5:c7:0e:e3:82:5d:31:2c:bd:8a:5d:b3:45: 0e:73:06:9f:84:8b:cc:ae:31:11:0d:f5:1a:1d:23: c1:2e:9f:6c:90:21:81:e4:9f:3a:52:f8:8a:b6:b5: 1f:c1:3b:21:43:a3:50:46:b8:3a:1a:89:77:fe:9f: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B5:0B:76:E9:3C:E1:4C:57:6D:91:B3:A9:F0:F3:77:10:5E:61:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fafb4ce-dd0b-3be7-8570-cc1d244a1ba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.104.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0d:7e:ae:a0:e4:8d:b8:91:ac:a7:fa:88:1b:6b:39:49:35: 13:c5:81:eb:a2:ab:f0:53:76:7c:3b:f1:ef:ae:d4:4a:54:92: 08:fa:23:5a:5c:dc:c7:79:07:c4:ba:4f:26:e8:ab:c9:02:13: 24:b0:57:59:a1:07:ee:22:7f:d8:5a:44:ef:b5:d8:3f:8a:cc: 00:e6:81:91:94:41:a2:fc:ca:71:56:30:82:de:f2:d4:39:0a: a9:b4:ea:77:27:53:a6:bf:19:5b:83:f1:a9:e2:41:ef:5a:7f: a2:f0:a3:dc:9c:65:69:e3:9f:08:f0:db:7d:ff:aa:5d:3b:aa: 69:a5:a6:09:da:57:04:a5:52:15:8d:c9:f9:16:8c:4f:b9:90: d3:d2:24:8a:58:1b:09:bd:43:4d:73:b8:68:ed:95:5a:12:da: af:34:19:ac:19:db:87:e8:83:94:5b:66:7b:0f:5e:ec:b4:d8: 6d:98:e6:22:8a:32:e4:bf:10:0e:78:b8:f7:83:a9:6d:5d:e4: 5a:c9:c0:fb:3a:98:9e:57:61:c3:de:b6:ac:93:7b:30:c3:29: c4:a4:1c:00:61:9b:52:2e:88:80:89:b9:ff:07:de:27:eb:ed: 3c:1b:41:6d:7c:50:1b:1d:5d:17:b6:3c:ff:d9:ac:2b:a2:85: ac:0c:29:7a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI15SPYN0cpwlDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwNVoXDTMwMDMzMDA0MDAwMFowLzEtMCsGA1UEAxMk YzdiNjlhOWQtODg2NS00ZTZlLWIzMGMtY2Y3YmQxNWIxZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvIMreQmDhvofRajCRwPf1eOkpeEdDyNjaMe mNajew6ErBLpBFZHTI2ahktxNNlDYOOxR9sjWtyyXZoC1JkoYN/M9m8ByPs/LDD4 4QcEFnNm6k9m24yWhYFAWNAQnRWz1F9gNUOtKWP5AAUdPgoVEcykAWEd1hEcq9cS Q9OQ1uqc+B9le7ubrb1MyRhXPtIImIFRjRlDbgQTxctcpR4im6vb/Hi8i07Vwz3f Sr6wz2saxivhyweuZfzqjmk3VxVQ1Yhv+PXHDuOCXTEsvYpds0UOcwafhIvMrjER DfUaHSPBLp9skCGB5J86UviKtrUfwTshQ6NQRrg6Gol3/p9KCwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOi1C3bpPOFMV22Rs6nw83cQXmGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWZhZmI0Y2UtZGQwYi0z YmU3LTg1NzAtY2MxZDI0NGExYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCNGgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGQ1+rqDkjbiRrKf6iBtrOUk1E8WB66Kr8FN2fDvx767USlSSCPojWlzc x3kHxLpPJuiryQITJLBXWaEH7iJ/2FpE77XYP4rMAOaBkZRBovzKcVYwgt7y1DkK qbTqdydTpr8ZW4PxqeJB71p/ovCj3JxlaeOfCPDbff+qXTuqaaWmCdpXBKVSFY3J +RaMT7mQ09IkilgbCb1DTXO4aO2VWhLarzQZrBnbh+iDlFtmew9e7LTYbZjmIooy 5L8QDni494OpbV3kWsnA+zqYnldhw962rJN7MMMpxKQcAGGbUi6IgIm5/wfeJ+vt PBtBbXxQGx1dF7Y8/9msK6KFrAwpeg== -----END CERTIFICATE-----Generated at Fri Sep 4 23:04:50 2026 by rpki-client