$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9ec08ae9-6d11-3ceb-a289-e2e78a418a23.roa File: 9ec08ae9-6d11-3ceb-a289-e2e78a418a23.roa (raw, json) Hash identifier: 9rUF2lIjpkztnp3IyOXgq9bnEYRCeT91AUpp0VK+Ce8= Subject key identifier: 65:C4:2F:1D:71:1A:C6:30:4E:85:25:02:45:DE:7B:83:B7:DC:F6:17 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235AABAB77ECFCD766C280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9ec08ae9-6d11-3ceb-a289-e2e78a418a23.roa Signing time: Wed 19 Aug 2026 18:04:03 +0000 ROA not before: Wed 19 Aug 2026 18:04:03 +0000 ROA not after: Fri 12 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 52.224.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5a:ab:ab:77:ec:fc:d7:66:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:03 2026 GMT Not After : Apr 12 04:00:00 2030 GMT Subject: CN=0e38085b-5db8-4e8f-9cae-fb77666a9bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:5d:2d:79:0a:3b:fa:a2:92:03:42:70:84: 26:5b:1d:6e:3a:f5:b0:be:e9:68:29:86:1b:8b:cc: 5c:2a:dc:f0:60:ea:e5:27:a9:46:bd:52:23:7f:91: e2:f6:40:6c:4e:b3:17:1a:ff:b3:66:8d:a5:df:ed: ac:2d:66:3c:9a:70:47:7a:e7:f7:5f:e6:d0:8f:6b: 20:83:76:ce:93:30:20:14:ac:09:4a:56:94:0e:55: d1:1b:35:67:54:1f:c3:d8:6e:33:86:c6:07:77:a9: 85:b7:8c:3f:d3:ed:ba:78:64:25:4d:98:6b:32:cb: d3:cf:58:98:4c:01:64:45:90:ab:4c:8a:08:15:9d: e8:72:29:75:c6:f0:44:b1:30:0b:1c:a9:52:f9:8c: 85:98:14:69:b8:a6:10:3e:0c:6e:b2:5d:42:74:a0: fe:aa:b2:13:4c:2f:ce:23:3b:9d:9f:38:68:e0:f0: 0b:88:b9:01:91:04:82:a0:be:6f:4e:f2:b6:46:f4: eb:0b:b7:b5:22:a1:27:49:51:79:c3:84:e2:7b:3d: 95:7d:9f:a7:68:f8:e0:17:4b:70:e0:a6:50:95:48: 94:4f:de:96:e5:3f:1d:b7:5a:f1:9f:8a:e0:15:2c: 5f:fb:e5:04:62:64:3a:70:ac:25:6a:07:63:45:d9: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C4:2F:1D:71:1A:C6:30:4E:85:25:02:45:DE:7B:83:B7:DC:F6:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9ec08ae9-6d11-3ceb-a289-e2e78a418a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.224.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1f:3f:4e:7d:4a:b9:11:e9:f4:1c:1a:e5:8e:64:85:6a:fc: a9:de:7d:50:5d:ba:67:15:d9:b2:34:88:43:fe:f1:3e:da:fa: b9:26:d1:27:ad:d1:0a:68:2e:3f:2c:9c:ce:33:26:91:9a:dd: 4e:06:f4:4f:bc:73:78:53:5e:db:75:75:2e:0c:bd:96:75:ec: e0:97:bc:d0:1c:a7:ba:f9:fb:d9:25:31:e9:bb:6d:52:4b:cb: 4a:06:1e:99:3f:59:fe:82:bf:a0:3e:4c:1c:24:2f:30:44:7e: b3:bd:80:80:ef:96:68:d3:02:ec:0a:cc:c9:c6:a9:8b:71:f1: a5:76:20:f9:72:47:2d:3a:02:85:bc:3e:e9:72:6c:9a:f0:1b: 09:2b:56:88:7b:59:aa:b9:32:ed:4f:4e:63:1a:04:32:64:1e: 0a:b2:83:d6:de:87:40:a8:8d:03:a1:fa:51:23:8b:41:6d:e7: 35:7a:12:3f:4c:1a:c6:0d:ef:8a:1a:5a:3e:ba:b9:7e:0e:10: 49:da:27:c1:a6:d7:ed:da:e4:89:3a:20:f1:3b:41:3f:42:cd: 1a:f2:f6:1b:74:38:30:fc:48:c7:8a:f4:0f:7d:2f:66:1a:2b: b3:63:ae:8d:db:4e:13:71:b1:c9:a7:af:6b:ce:74:84:98:35: 85:57:c0:73 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1qrq3fs/NdmwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwM1oXDTMwMDQxMjA0MDAwMFowLzEtMCsGA1UEAxMk MGUzODA4NWItNWRiOC00ZThmLTljYWUtZmI3NzY2NmE5YmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LRdLXkKO/qikgNCcIQmWx1uOvWwvuloKYYb i8xcKtzwYOrlJ6lGvVIjf5Hi9kBsTrMXGv+zZo2l3+2sLWY8mnBHeuf3X+bQj2sg g3bOkzAgFKwJSlaUDlXRGzVnVB/D2G4zhsYHd6mFt4w/0+26eGQlTZhrMsvTz1iY TAFkRZCrTIoIFZ3ocil1xvBEsTALHKlS+YyFmBRpuKYQPgxusl1CdKD+qrITTC/O Izudnzho4PALiLkBkQSCoL5vTvK2RvTrC7e1IqEnSVF5w4Tiez2VfZ+naPjgF0tw 4KZQlUiUT96W5T8dt1rxn4rgFSxf++UEYmQ6cKwlagdjRdmN7QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGXELx1xGsYwToUlAkXee4O33PYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWVjMDhhZTktNmQxMS0z Y2ViLWEyODktZTJlNzhhNDE4YTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFNOAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXB8/Tn1KuRHp9Bwa5Y5khWr8qd59UF26ZxXZsjSIQ/7xPtr6uSbRJ63R CmguPyyczjMmkZrdTgb0T7xzeFNe23V1Lgy9lnXs4Je80Bynuvn72SUx6bttUkvL SgYemT9Z/oK/oD5MHCQvMER+s72AgO+WaNMC7ArMycapi3HxpXYg+XJHLToChbw+ 6XJsmvAbCStWiHtZqrky7U9OYxoEMmQeCrKD1t6HQKiNA6H6USOLQW3nNXoSP0wa xg3vihpaPrq5fg4QSdonwabX7drkiTog8TtBP0LNGvL2G3Q4MPxIx4r0D30vZhor s2OujdtOE3Gxyaeva850hJg1hVfAcw== -----END CERTIFICATE-----Generated at Sat Sep 5 05:20:43 2026 by rpki-client