$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a3fd03ab-1c2d-335e-9810-63d45c898f11.roa File: a3fd03ab-1c2d-335e-9810-63d45c898f11.roa (raw, json) Hash identifier: 2m481zCb/2a7WdqhEFTt1ZyvrU5z49Q2uw0JU+YT2UU= Subject key identifier: 2E:A3:B4:93:1C:75:B2:72:8C:6D:CF:6C:14:A9:B4:D7:6B:94:B3:99 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42357F6D9373F223E038380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a3fd03ab-1c2d-335e-9810-63d45c898f11.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Thu 07 Mar 2030 05:00:00 +0000 asID: 8070 IP address blocks: 52.126.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:57:f6:d9:37:3f:22:3e:03:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Mar 7 05:00:00 2030 GMT Subject: CN=35bcddbe-aed0-4b14-964d-83b420391b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:80:7f:e7:22:b8:79:85:2d:b8:4d:0b:d2: 10:17:00:eb:85:a9:f1:a8:ca:ef:60:71:a4:98:f8: 12:cf:db:67:ab:20:1a:5b:57:3d:f6:3d:ee:58:49: a4:b1:1a:f4:b7:58:1c:e7:a5:75:0a:95:c3:3b:b9: 57:c2:a3:f6:0b:60:50:64:5c:6e:1f:0a:af:10:75: 0d:6e:51:f9:71:9b:59:a0:df:60:9a:a7:31:67:9a: b9:41:1e:a4:9d:9b:c6:2a:5e:c1:a7:54:d6:85:0f: 09:94:d4:47:eb:f6:92:61:63:1f:e8:7d:b8:50:cb: c5:c1:90:3b:34:d1:8d:d4:17:38:dd:3c:6d:b2:82: 9d:81:48:e6:96:c3:a7:0b:01:a6:cc:ff:78:b0:b6: 04:a5:ba:6a:0b:f5:16:3c:3b:67:95:3f:49:17:cc: fa:99:24:40:31:a6:b2:81:3a:1b:6f:d9:e7:0e:48: 3b:78:38:81:8f:00:6c:b0:36:d0:0a:d3:1c:7b:87: ed:20:de:57:5d:57:df:59:4c:7f:1a:40:e0:5e:9f: f1:d4:9c:b1:b0:b2:60:22:46:c7:07:0d:eb:0c:07: 06:a3:80:91:8c:2f:eb:44:0f:38:7e:0d:3b:82:c3: e0:52:ce:d9:0c:dc:ab:23:76:17:d9:da:02:44:bc: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A3:B4:93:1C:75:B2:72:8C:6D:CF:6C:14:A9:B4:D7:6B:94:B3:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a3fd03ab-1c2d-335e-9810-63d45c898f11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.126.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:32:8f:5a:83:f0:fb:2f:13:22:6c:d8:0e:63:ea:45:b7:0b: 94:f0:ae:da:16:62:fd:78:0a:23:de:9c:99:8d:8f:ca:9f:9b: 86:5a:7f:b7:e0:64:13:c0:d8:d4:b9:bc:9c:b7:37:9a:fd:d5: 3e:13:3c:99:ba:1e:01:b5:94:7d:8f:15:d8:6d:b0:59:75:28: 5f:4b:83:a5:7c:55:af:b8:4f:27:ba:41:3c:07:de:f0:2f:9b: f1:3f:8a:e8:6c:7e:14:95:c9:79:2b:db:25:71:51:f9:e9:6d: ed:76:57:d8:b3:10:15:5a:69:3a:d3:9d:62:f8:b4:73:67:b9: 6f:ca:38:76:49:2d:dc:38:d5:37:80:58:34:1f:93:c0:a1:78: 6b:5a:4c:89:bf:18:52:b3:3a:c2:6d:34:2c:fb:f6:0f:d7:65: c8:83:1e:31:bd:7b:a1:03:f6:a6:81:3b:c8:71:8f:2c:be:a5: 54:84:4b:00:b5:8a:3a:c4:63:69:77:ac:64:65:0d:c4:04:cd: fd:0d:4b:07:22:49:01:17:ba:76:47:e0:29:39:89:50:5e:a9: 81:bd:d8:9f:fe:99:3f:fd:b4:ee:87:7e:fc:49:de:49:e0:6b: 1b:7b:71:71:6f:83:8a:ec:c1:b4:fb:53:42:76:d6:49:b4:2e: bf:59:a8:85 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1f22Tc/Ij4Dg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk MzViY2RkYmUtYWVkMC00YjE0LTk2NGQtODNiNDIwMzkxYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWCAf+ciuHmFLbhNC9IQFwDrhanxqMrvYHGk mPgSz9tnqyAaW1c99j3uWEmksRr0t1gc56V1CpXDO7lXwqP2C2BQZFxuHwqvEHUN blH5cZtZoN9gmqcxZ5q5QR6knZvGKl7Bp1TWhQ8JlNRH6/aSYWMf6H24UMvFwZA7 NNGN1Bc43TxtsoKdgUjmlsOnCwGmzP94sLYEpbpqC/UWPDtnlT9JF8z6mSRAMaay gTobb9nnDkg7eDiBjwBssDbQCtMce4ftIN5XXVffWUx/GkDgXp/x1JyxsLJgIkbH Bw3rDAcGo4CRjC/rRA84fg07gsPgUs7ZDNyrI3YX2doCRLx7twIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFC6jtJMcdbJyjG3PbBSptNdrlLOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTNmZDAzYWItMWMyZC0z MzVlLTk4MTAtNjNkNDVjODk4ZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBNH4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkDKPWoPw+y8TImzYDmPqRbcLlPCu2hZi/XgKI96cmY2Pyp+bhlp/t+Bk E8DY1Lm8nLc3mv3VPhM8mboeAbWUfY8V2G2wWXUoX0uDpXxVr7hPJ7pBPAfe8C+b 8T+K6Gx+FJXJeSvbJXFR+elt7XZX2LMQFVppOtOdYvi0c2e5b8o4dkkt3DjVN4BY NB+TwKF4a1pMib8YUrM6wm00LPv2D9dlyIMeMb17oQP2poE7yHGPLL6lVIRLALWK OsRjaXesZGUNxATN/Q1LByJJARe6dkfgKTmJUF6pgb3Yn/6ZP/207od+/EneSeBr G3txcW+DiuzBtPtTQnbWSbQuv1mohQ== -----END CERTIFICATE-----Generated at Sun Sep 13 12:56:13 2026 by rpki-client