$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05b73228-c57e-3698-868a-0c439bffc8a8.roa File: 05b73228-c57e-3698-868a-0c439bffc8a8.roa (raw, json) Hash identifier: 3l9RmhDqUQoikuA3By1XCWZpdmYJYi+NtkPbHcXzNSQ= Subject key identifier: D3:73:41:56:BC:43:66:EA:F6:82:66:1F:37:07:2E:2F:5F:15:DE:DF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB551F890FFB2C0BF831ADEA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05b73228-c57e-3698-868a-0c439bffc8a8.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 8069 IP address blocks: 52.122.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f8:90:ff:b2:c0:bf:83:1a:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=c21cb271-30b4-4a8c-80ea-54597fd21f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b5:77:30:e9:52:66:fd:58:8d:fd:7d:99:21: 90:49:2a:43:fb:08:82:95:a8:6c:71:a3:ea:11:cd: e9:37:cb:55:c3:00:c6:87:7f:2c:27:32:51:da:f3: c3:59:b3:25:74:d8:53:0a:1f:a4:cd:9b:ce:c6:d7: ea:60:a7:3a:44:c8:59:2f:88:26:66:64:a2:24:b2: 9d:1a:0d:24:71:fb:f5:ca:f1:57:09:19:c1:1b:98: 00:b6:d9:5a:3f:5f:35:c3:87:3d:8c:c0:6c:0f:cb: b1:12:ee:81:37:8c:25:a2:f3:f0:6b:7c:48:b4:73: 52:93:f0:da:1a:f6:80:a2:85:27:d6:06:cb:c5:23: 46:a8:e2:5f:e6:8d:c7:55:d4:b9:77:54:34:62:f1: df:c9:c8:b2:f9:1d:34:6b:91:fb:8d:99:0e:3a:d6: f1:31:e5:58:b0:79:1b:10:15:5a:d7:02:d9:30:86: ff:a2:fa:2f:f8:73:9e:11:cf:01:af:18:5b:49:2b: c3:f2:d5:8f:42:97:7b:38:7d:cf:6b:18:b9:82:b7: 99:b6:09:f5:bf:68:11:69:49:9e:d6:27:b8:1b:c0: 2b:f5:e4:9b:0d:78:27:c4:d0:ce:3c:d6:6b:b4:6a: 0a:5d:5a:ba:20:c1:e4:0f:ef:a5:78:9d:6a:d1:04: 60:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:73:41:56:BC:43:66:EA:F6:82:66:1F:37:07:2E:2F:5F:15:DE:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05b73228-c57e-3698-868a-0c439bffc8a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:cf:92:7c:a2:56:6a:2c:f0:ee:d4:13:42:61:f1:bf:c0:f9: f5:db:36:a4:6e:4b:b9:38:95:95:96:e1:dd:71:54:b4:a1:14: ff:f5:8f:a5:2a:5a:04:bc:f1:c1:c9:6a:6c:86:31:34:50:95: 78:e2:08:c3:75:a6:3d:4d:ce:6b:0e:d6:e5:48:3e:bf:a9:de: de:51:19:78:4a:7b:28:0a:1a:5a:76:7e:73:38:63:c3:62:65: 19:6c:c8:d7:1c:82:00:05:ba:02:ea:6e:51:6d:e8:4f:0c:8b: 1d:8a:58:2a:8b:d1:cc:0c:09:f5:22:d5:33:bd:73:c5:cc:9e: ae:7c:a3:05:62:9c:b7:0c:2f:ba:c2:8c:ca:35:4a:f8:cf:d9: fb:8d:13:a7:8a:1a:19:b2:27:f9:fb:86:5f:58:ac:36:ff:bf: f1:09:a1:ff:8a:56:0c:e7:60:b7:d6:f8:6f:04:3e:a1:2e:66: 92:c5:c3:5d:b3:2a:95:91:ef:ee:cb:71:0e:75:da:95:11:4c: 63:db:9d:25:db:61:0e:ab:f3:42:22:1f:e6:a2:5e:3a:80:d8: f2:b7:ea:25:cd:68:04:fb:b5:a3:8d:c3:1a:41:6f:fa:75:18: 80:83:dd:28:3a:12:00:d8:d4:48:2e:6d:7b:98:39:b6:93:12: 31:48:f4:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UfiQ/7LAv4Ma3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk YzIxY2IyNzEtMzBiNC00YThjLTgwZWEtNTQ1OTdmZDIxZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLV3MOlSZv1Yjf19mSGQSSpD+wiClahscaPq Ec3pN8tVwwDGh38sJzJR2vPDWbMldNhTCh+kzZvOxtfqYKc6RMhZL4gmZmSiJLKd Gg0kcfv1yvFXCRnBG5gAttlaP181w4c9jMBsD8uxEu6BN4wlovPwa3xItHNSk/Da GvaAooUn1gbLxSNGqOJf5o3HVdS5d1Q0YvHfyciy+R00a5H7jZkOOtbxMeVYsHkb EBVa1wLZMIb/ovov+HOeEc8BrxhbSSvD8tWPQpd7OH3Paxi5greZtgn1v2gRaUme 1ie4G8Ar9eSbDXgnxNDOPNZrtGoKXVq6IMHkD++leJ1q0QRg2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNzQVa8Q2bq9oJmHzcHLi9fFd7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDViNzMyMjgtYzU3ZS0z Njk4LTg2OGEtMGM0MzliZmZjOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzPknyiVmos8O7UE0Jh8b/A+fXbNqRuS7k4lZWW4d1xVLShFP/1j6Uq WgS88cHJamyGMTRQlXjiCMN1pj1NzmsO1uVIPr+p3t5RGXhKeygKGlp2fnM4Y8Ni ZRlsyNccggAFugLqblFt6E8Mix2KWCqL0cwMCfUi1TO9c8XMnq58owVinLcML7rC jMo1SvjP2fuNE6eKGhmyJ/n7hl9YrDb/v/EJof+KVgznYLfW+G8EPqEuZpLFw12z KpWR7+7LcQ512pURTGPbnSXbYQ6r80IiH+aiXjqA2PK36iXNaAT7taONwxpBb/p1 GICD3Sg6EgDY1EgubXuYObaTEjFI9C0= -----END CERTIFICATE-----Generated at Mon Mar 2 21:55:33 2026 by rpki-client