$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ad15309-aa15-30a7-bb0d-726d2d725d06.roa File: 2ad15309-aa15-30a7-bb0d-726d2d725d06.roa (raw, json) Hash identifier: IqQ+7TBkA4E+kAOwt2z+N0Wbs77DgTD8zgQ32tXaZHI= Subject key identifier: 20:4E:25:41:E1:19:B5:64:B8:6B:65:55:D0:07:27:34:92:BE:52:AD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42358C4D5DD1F7ECEC6D0C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ad15309-aa15-30a7-bb0d-726d2d725d06.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Wed 03 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 52.120.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:58:c4:d5:dd:1f:7e:ce:c6:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Apr 3 04:00:00 2030 GMT Subject: CN=041ac2f8-88c8-4a7c-bdcc-0ca1af8cfeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:ad:21:b6:07:7e:b8:66:96:2f:36:d1:39: 28:4a:ef:32:5a:b4:11:af:c3:ec:b8:b1:97:43:93: d0:c0:37:ac:96:e9:84:08:2f:a6:2f:b9:b0:86:bb: 38:47:5e:9c:e5:66:dd:b5:b0:6a:50:6d:3f:58:38: 02:28:bb:ca:1d:ee:a9:68:93:29:f1:9d:41:47:86: 77:5f:87:83:2a:8e:35:bc:05:10:c3:b3:33:c0:80: 3b:49:6e:27:11:5f:0d:95:4f:54:c0:4c:fb:f7:83: 9a:e7:10:18:0f:a6:4b:95:ee:be:64:dd:8a:48:45: f2:75:92:55:f9:2b:6d:15:4c:79:6e:3d:d5:59:6c: 23:fa:ff:59:dd:6c:24:28:30:df:3b:8d:15:65:3d: 0c:ad:7c:c1:8d:24:f1:f7:9c:0d:75:19:6c:75:76: be:d9:d3:fc:26:20:97:46:9b:6c:d7:65:c3:f3:00: a7:1a:64:ff:c0:02:9a:c5:a9:ad:a2:1f:c5:53:fa: eb:5c:d1:7a:77:23:b3:0f:b9:d7:49:ef:90:7d:78: 8b:e9:f6:bf:52:8d:b3:f8:f5:ce:87:84:fe:d9:9f: c8:c6:94:33:9b:32:cd:58:ca:3e:1b:44:22:1c:60: 62:65:c7:12:3c:15:e7:84:1e:71:e4:d3:65:dc:ba: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4E:25:41:E1:19:B5:64:B8:6B:65:55:D0:07:27:34:92:BE:52:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ad15309-aa15-30a7-bb0d-726d2d725d06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.120.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ab:0e:43:13:8f:c5:d4:4b:01:f6:41:6e:77:50:de:af:ea: 04:34:2b:5f:3e:95:3e:5f:0b:64:e2:47:e3:2e:99:20:fa:db: 8c:3e:75:3f:c0:00:b2:a3:e4:f4:9e:2d:08:49:6f:21:0f:f4: 41:a9:5b:8f:0f:2f:cb:ad:45:93:38:d9:78:1b:9a:c9:18:d3: d8:37:9f:66:9f:12:fa:5e:06:1c:16:7e:de:26:a3:05:1d:4c: 1a:b4:c3:6d:a9:ea:60:3c:85:1e:04:6c:27:22:90:80:2c:25: 97:a2:5e:0f:3d:af:e9:5f:b5:10:b0:de:c6:1f:ac:18:17:9d: 30:f6:3e:0c:ec:21:3b:ad:32:fa:d4:47:11:dd:e3:38:16:94: 82:3b:44:6f:c0:c0:53:c4:ad:a7:bc:f8:46:af:2d:a1:41:61: b7:f4:a7:1b:a3:87:b4:d9:ea:ea:91:ce:c6:f1:dc:37:ab:88: 49:e9:94:61:e7:84:d9:d4:cf:ee:e3:c5:8e:8a:37:ce:91:86: 40:6d:29:a3:72:b0:22:01:00:e1:a6:62:4d:e1:b8:fe:e7:63: b9:86:38:f1:b6:ba:91:01:0c:7b:af:a5:5f:78:45:dd:92:0e: 2e:8d:37:f9:11:f7:4f:2a:27:70:95:d5:2f:f8:b9:27:60:f7: 00:50:30:a2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1jE1d0ffs7G0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDQwMzA0MDAwMFowLzEtMCsGA1UEAxMk MDQxYWMyZjgtODhjOC00YTdjLWJkY2MtMGNhMWFmOGNmZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWatIbYHfrhmli820TkoSu8yWrQRr8PsuLGX Q5PQwDeslumECC+mL7mwhrs4R16c5WbdtbBqUG0/WDgCKLvKHe6paJMp8Z1BR4Z3 X4eDKo41vAUQw7MzwIA7SW4nEV8NlU9UwEz794Oa5xAYD6ZLle6+ZN2KSEXydZJV +SttFUx5bj3VWWwj+v9Z3WwkKDDfO40VZT0MrXzBjSTx95wNdRlsdXa+2dP8JiCX Rpts12XD8wCnGmT/wAKaxamtoh/FU/rrXNF6dyOzD7nXSe+QfXiL6fa/Uo2z+PXO h4T+2Z/IxpQzmzLNWMo+G0QiHGBiZccSPBXnhB5x5NNl3LpRywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCBOJUHhGbVkuGtlVdAHJzSSvlKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmFkMTUzMDktYWExNS0z MGE3LWJiMGQtNzI2ZDJkNzI1ZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCNHgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaKsOQxOPxdRLAfZBbndQ3q/qBDQrXz6VPl8LZOJH4y6ZIPrbjD51P8AA sqPk9J4tCElvIQ/0Qalbjw8vy61FkzjZeBuayRjT2DefZp8S+l4GHBZ+3iajBR1M GrTDbanqYDyFHgRsJyKQgCwll6JeDz2v6V+1ELDexh+sGBedMPY+DOwhO60y+tRH Ed3jOBaUgjtEb8DAU8Stp7z4Rq8toUFht/SnG6OHtNnq6pHOxvHcN6uISemUYeeE 2dTP7uPFjoo3zpGGQG0po3KwIgEA4aZiTeG4/udjuYY48ba6kQEMe6+lX3hF3ZIO Lo03+RH3TyoncJXVL/i5J2D3AFAwog== -----END CERTIFICATE-----Generated at Fri Sep 4 22:29:15 2026 by rpki-client