$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34aaae68-01c3-30c3-ab7c-723a6dbb308a.roa File: 34aaae68-01c3-30c3-ab7c-723a6dbb308a.roa (raw, json) Hash identifier: RvMI6MGqQPzsJHLWpuJMZiL/60ooXONXAouRw1nUPRg= Subject key identifier: F5:52:F4:A0:F3:0F:63:93:26:5F:C3:0D:57:23:23:55:55:2A:63:91 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235AB67D0B1CA11DA21660 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34aaae68-01c3-30c3-ab7c-723a6dbb308a.roa Signing time: Wed 19 Aug 2026 18:04:03 +0000 ROA not before: Wed 19 Aug 2026 18:04:03 +0000 ROA not after: Sun 10 Mar 2030 05:00:00 +0000 asID: 8075 IP address blocks: 52.98.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5a:b6:7d:0b:1c:a1:1d:a2:16:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:03 2026 GMT Not After : Mar 10 05:00:00 2030 GMT Subject: CN=7d7dda13-86bf-4501-b63e-7e7338a889a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:94:c1:30:a5:f8:24:cf:83:f2:eb:da:21: 11:ad:c6:0b:ca:7c:11:36:df:b2:00:28:13:20:f6: 19:d7:71:eb:b3:ac:7c:d4:d0:60:3a:5d:b0:f8:bf: 29:70:ee:fa:86:c5:42:18:b6:a3:8d:78:10:63:1e: 0f:ce:7c:69:39:4b:cc:fe:a1:c0:1d:3b:0f:af:42: bd:d3:84:e6:bc:f8:9f:87:ba:63:21:f1:f9:95:df: c7:56:58:8c:1a:ad:49:eb:a0:01:57:92:d8:4c:70: 8f:59:64:e7:2e:2d:44:71:be:ac:6f:d2:48:40:07: 0f:0a:25:0a:fb:b9:90:6e:0f:40:7d:a5:6e:4d:68: 90:bb:69:60:cc:07:5e:34:b2:c2:a4:8e:4b:77:af: d2:36:b9:e5:c3:93:0d:0e:a5:af:e5:dc:ca:20:3b: 0f:0e:66:37:dc:11:44:1b:c3:e7:14:8d:03:4c:12: 45:0b:8b:04:5b:eb:a8:1e:f0:32:08:ba:96:54:38: 62:02:9e:48:df:f6:a9:d7:7c:af:de:22:db:6e:f0: 46:30:21:65:d5:20:02:fe:df:a9:d7:6f:ac:5c:35: 15:29:ca:b6:5d:80:64:c0:a8:29:c9:3e:2c:01:53: fc:73:8b:63:81:44:5b:40:0e:92:79:9b:8f:28:49: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:52:F4:A0:F3:0F:63:93:26:5F:C3:0D:57:23:23:55:55:2A:63:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34aaae68-01c3-30c3-ab7c-723a6dbb308a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.98.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f1:c6:fc:05:3c:8b:c1:31:aa:af:9f:57:96:a8:a2:da:20: 89:49:28:18:16:88:26:87:c0:a0:47:28:fb:25:12:b8:2e:0c: cf:36:94:19:41:c9:c2:6a:9d:8c:57:78:a2:34:6d:29:42:4f: 77:46:ff:ad:f5:94:1d:0d:44:cf:bb:c3:80:38:b7:a6:0e:21: de:67:31:16:7e:23:4f:f4:c6:36:00:ea:38:70:e9:e4:09:10: 89:43:7c:2a:45:d3:c8:a8:de:aa:3e:4f:24:f6:28:0f:de:96: 99:77:29:2d:e2:0b:85:fc:88:d7:1d:11:88:fc:b5:21:8c:34: e8:9c:0c:93:cc:bd:41:78:82:cb:af:f3:64:bc:d8:ea:b3:0b: 92:47:e4:cf:34:88:19:2b:58:50:67:b6:93:f5:d2:fc:ca:4e: c0:9b:a2:13:f3:eb:8e:f3:44:22:db:66:e7:c4:83:04:62:21: d4:dc:81:5d:e3:74:8a:52:9f:3c:8f:1d:a7:9c:94:94:ef:d0: 8d:6a:37:14:fc:72:ff:8b:7e:b7:f3:2f:8e:86:0e:0a:0e:11: 75:fa:d5:19:67:67:65:15:9d:27:ff:a1:27:1a:34:77:45:a0: dc:95:b2:20:48:0f:cc:54:4f:b6:7f:2d:ab:ee:29:48:0b:58: 5e:68:ce:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1q2fQscoR2iFmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwM1oXDTMwMDMxMDA1MDAwMFowLzEtMCsGA1UEAxMk N2Q3ZGRhMTMtODZiZi00NTAxLWI2M2UtN2U3MzM4YTg4OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZiUwTCl+CTPg/Lr2iERrcYLynwRNt+yACgT IPYZ13Hrs6x81NBgOl2w+L8pcO76hsVCGLajjXgQYx4PznxpOUvM/qHAHTsPr0K9 04TmvPifh7pjIfH5ld/HVliMGq1J66ABV5LYTHCPWWTnLi1Ecb6sb9JIQAcPCiUK +7mQbg9AfaVuTWiQu2lgzAdeNLLCpI5Ld6/SNrnlw5MNDqWv5dzKIDsPDmY33BFE G8PnFI0DTBJFC4sEW+uoHvAyCLqWVDhiAp5I3/ap13yv3iLbbvBGMCFl1SAC/t+p 12+sXDUVKcq2XYBkwKgpyT4sAVP8c4tjgURbQA6SeZuPKEl57wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVS9KDzD2OTJl/DDVcjI1VVKmORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRhYWFlNjgtMDFjMy0z MGMzLWFiN2MtNzIzYTZkYmIzMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNGIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHxxvwFPIvBMaqvn1eWqKLaIIlJKBgWiCaHwKBHKPslErguDM82lBlB ycJqnYxXeKI0bSlCT3dG/631lB0NRM+7w4A4t6YOId5nMRZ+I0/0xjYA6jhw6eQJ EIlDfCpF08io3qo+TyT2KA/elpl3KS3iC4X8iNcdEYj8tSGMNOicDJPMvUF4gsuv 82S82OqzC5JH5M80iBkrWFBntpP10vzKTsCbohPz647zRCLbZufEgwRiIdTcgV3j dIpSnzyPHaeclJTv0I1qNxT8cv+LfrfzL46GDgoOEXX61RlnZ2UVnSf/oScaNHdF oNyVsiBID8xUT7Z/LavuKUgLWF5oztA= -----END CERTIFICATE-----Generated at Sat Sep 5 03:23:57 2026 by rpki-client