$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa File: b8ae9718-f55e-3239-a6dd-058166da4e45.roa (raw, json) Hash identifier: S2NEZxVDiERpurXDFU69+jvkQtl6FIOpQ/6vNrkLPLQ= Subject key identifier: 0F:5D:A3:AC:26:F1:9E:B0:1E:12:92:F7:A4:27:7F:0A:8B:28:71:10 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0746C96DACA2D61DFE2765E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 52.122.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c9:6d:ac:a2:d6:1d:fe:27:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=796b6f09-655b-4444-a31c-bdfad12a0f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4c:09:08:76:df:6f:a3:cd:75:d7:ae:e7:3b: 1a:a0:17:5b:18:e4:df:92:2d:e8:a2:06:51:e9:71: 8b:8b:5f:7e:63:c3:32:c9:46:2f:de:91:f7:f2:84: 28:63:70:16:8f:11:f9:96:97:a4:59:a8:83:7c:53: 53:0c:3c:cc:69:1b:f3:d5:00:e0:f3:80:2b:22:ea: c4:69:3a:41:6e:99:64:00:ec:39:71:b5:5d:34:a0: e0:98:76:69:5b:30:27:48:74:01:55:0d:58:df:70: 07:7a:14:45:86:61:e8:de:b6:af:a9:1e:6a:49:5f: 0b:63:81:34:bc:76:2c:ee:4c:20:0e:ca:a4:0e:49: 28:86:2e:e2:d5:f8:76:97:cc:92:37:71:9d:81:67: 0b:97:a2:5f:25:e8:a2:52:03:44:19:bb:46:c6:3b: 5f:47:fe:5e:c5:df:56:fe:01:76:9e:2f:fd:45:e0: 1e:7d:1a:99:d8:1a:36:60:df:bc:52:f4:89:34:21: 36:bd:aa:e4:13:25:96:a6:9e:80:88:7f:41:20:c9: f7:9c:e4:f4:4b:55:e4:4e:a2:16:1b:f3:7d:17:54: f9:df:d2:61:dc:da:95:9d:8d:6d:1d:0f:dc:14:30: 2b:b0:3d:71:66:8e:d8:2c:39:4a:89:83:44:53:18: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5D:A3:AC:26:F1:9E:B0:1E:12:92:F7:A4:27:7F:0A:8B:28:71:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f1:9d:11:1a:89:35:3c:5a:fc:b7:3c:6d:ba:91:a9:40:7b: c0:b6:ee:8f:fd:ee:07:b4:b5:69:5a:20:f4:70:fb:98:16:80: 3f:86:a2:18:5e:3b:15:21:ad:97:82:c9:81:88:e5:98:0e:88: c5:ce:84:e7:50:ef:ee:fe:60:74:18:15:8c:a1:ac:2a:4c:d6: 54:50:0f:95:0c:8d:18:00:6a:29:a4:e7:36:7c:8b:75:a7:41: ee:56:d1:e6:53:6e:54:ff:c1:83:e4:bc:69:29:70:79:2a:b6: ab:cb:8d:e1:11:8a:e0:55:4c:34:8f:33:91:7b:ff:3c:55:ce: cc:97:d9:99:da:56:2e:2e:d6:04:93:df:05:40:9f:03:40:40: 2d:91:90:4a:13:d8:e4:ea:94:9b:3c:a8:8c:22:e2:ec:2e:ea: 59:69:08:52:fc:d4:92:0c:08:61:f9:05:d0:db:39:b6:54:90: 5d:eb:6d:b8:07:ab:2b:fc:4d:8b:17:35:64:b6:79:f5:13:55: 1d:2a:a3:36:58:55:e1:0e:70:ab:2f:9d:bf:fb:a9:ed:19:89: b9:e7:23:a5:38:35:9d:8e:49:2a:5d:f9:57:7b:a2:71:ad:4c: 55:39:5a:9b:6d:18:76:8d:12:cc:0f:21:dd:62:a9:15:00:7b: 4b:5e:df:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsltrKLWHf4nZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk Nzk2YjZmMDktNjU1Yi00NDQ0LWEzMWMtYmRmYWQxMmEwZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEwJCHbfb6PNddeu5zsaoBdbGOTfki3oogZR 6XGLi19+Y8MyyUYv3pH38oQoY3AWjxH5lpekWaiDfFNTDDzMaRvz1QDg84ArIurE aTpBbplkAOw5cbVdNKDgmHZpWzAnSHQBVQ1Y33AHehRFhmHo3ravqR5qSV8LY4E0 vHYs7kwgDsqkDkkohi7i1fh2l8ySN3GdgWcLl6JfJeiiUgNEGbtGxjtfR/5exd9W /gF2ni/9ReAefRqZ2Bo2YN+8UvSJNCE2varkEyWWpp6AiH9BIMn3nOT0S1XkTqIW G/N9F1T539Jh3NqVnY1tHQ/cFDArsD1xZo7YLDlKiYNEUxg6WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9do6wm8Z6wHhKS96QnfwqLKHEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjhhZTk3MTgtZjU1ZS0z MjM5LWE2ZGQtMDU4MTY2ZGE0ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzxnREaiTU8Wvy3PG26kalAe8C27o/97ge0tWlaIPRw+5gWgD+Gohhe OxUhrZeCyYGI5ZgOiMXOhOdQ7+7+YHQYFYyhrCpM1lRQD5UMjRgAaimk5zZ8i3Wn Qe5W0eZTblT/wYPkvGkpcHkqtqvLjeERiuBVTDSPM5F7/zxVzsyX2ZnaVi4u1gST 3wVAnwNAQC2RkEoT2OTqlJs8qIwi4uwu6llpCFL81JIMCGH5BdDbObZUkF3rbbgH qyv8TYsXNWS2efUTVR0qozZYVeEOcKsvnb/7qe0ZibnnI6U4NZ2OSSpd+Vd7onGt TFU5WpttGHaNEswPId1iqRUAe0te33g= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:28 2025 by rpki-client