$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa File: 10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa (raw, json) Hash identifier: BmNXmMzse2sg9qaUrW3fBIl4XtW2FgPz+qukWN/jz6s= Subject key identifier: 41:BF:16:D2:34:5F:04:A5:04:77:61:D7:F6:C0:DE:71:62:F8:2F:19 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D52438E62F4384F918E9FCD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 8069 IP address blocks: 52.122.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8e:62:f4:38:4f:91:8e:9f:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=1470e899-6b28-4359-992d-440ffc8f2eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:82:30:88:87:95:17:14:ac:96:8d:95:52: 76:2e:21:31:7c:92:de:71:35:36:eb:91:61:a1:b6: 8b:0a:8b:aa:08:16:d5:29:63:12:ef:94:f6:0d:de: e7:b7:1a:85:0e:4d:e1:fd:d4:f9:06:bb:ba:bb:67: eb:95:30:33:2a:06:e2:ef:89:41:53:05:12:3f:da: 86:8d:25:91:4f:46:7d:4b:52:91:6a:24:05:37:cf: 61:91:36:80:dc:cd:fd:65:2b:f0:68:7c:28:95:69: d1:8e:ac:31:ba:a0:c1:cd:b3:83:f7:98:76:12:9a: 12:66:03:f9:bf:80:fa:41:36:b7:28:d3:c4:15:5c: 34:b0:a3:36:f6:6b:d8:9e:65:6c:bd:f6:35:b7:25: 5d:b7:09:4b:fc:1a:12:af:92:ef:52:2e:cd:1e:d4: 03:3d:09:45:c5:bc:33:2b:d9:fe:e7:46:ce:00:a1: f1:74:a6:71:a5:04:d2:c9:61:5f:cd:40:19:0b:85: 35:a5:60:f2:01:c7:f4:25:98:33:25:d6:c2:60:10: ce:2a:2e:96:c3:52:48:e4:71:2e:3e:49:c6:5e:81: 6e:b5:b3:e4:99:1b:8a:69:62:59:5b:32:73:d4:7c: b0:28:21:99:e7:19:d3:92:c2:0e:d6:7e:52:ff:98: ac:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BF:16:D2:34:5F:04:A5:04:77:61:D7:F6:C0:DE:71:62:F8:2F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:7a:62:5c:99:3e:94:14:80:09:50:77:a0:a3:70:a3:38:f1: c2:ba:fc:9d:5a:f8:d5:78:7a:7f:c6:73:d1:b9:ee:c9:61:94: 1c:e7:b2:a8:03:04:76:3e:11:9d:f4:44:9c:22:0d:29:c7:60: a4:c7:36:7a:fc:07:dd:13:29:09:7e:c9:32:a2:6f:0b:c6:a5: 63:31:83:7c:3d:9b:da:cd:8c:da:cc:d4:93:a5:d1:35:88:e6: 3b:e9:57:e9:f7:20:7d:ba:6a:4a:55:b2:a7:9a:cb:35:d7:31: 2f:41:cc:0f:01:4d:c7:cc:93:1e:f0:9e:bf:20:9f:a9:fa:d9: 20:50:36:bc:1f:c3:d4:51:fb:e2:60:31:fb:3e:d0:31:9a:9e: 71:05:e4:13:5d:54:4a:32:39:fb:7a:0d:c9:59:92:81:e7:f6: 6b:f5:3a:24:9e:68:97:5b:c5:ee:00:03:1a:12:03:ea:35:2f: bc:36:40:db:23:ca:15:e3:38:d5:03:38:c4:b8:77:aa:4e:ed: 4e:1b:ea:e8:fc:eb:1f:f9:9c:7c:58:6d:3a:58:cd:58:8c:79: 64:a3:37:2c:15:85:bf:6c:1d:ad:d5:ed:d2:f4:a1:14:fa:bc: 9d:87:11:04:bb:89:60:8d:06:4c:7a:29:c4:a0:31:de:24:94: 7f:f5:b8:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ45i9DhPkY6fzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MTQ3MGU4OTktNmIyOC00MzU5LTk5MmQtNDQwZmZjOGYyZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CiCMIiHlRcUrJaNlVJ2LiExfJLecTU265Fh obaLCouqCBbVKWMS75T2Dd7ntxqFDk3h/dT5Bru6u2frlTAzKgbi74lBUwUSP9qG jSWRT0Z9S1KRaiQFN89hkTaA3M39ZSvwaHwolWnRjqwxuqDBzbOD95h2EpoSZgP5 v4D6QTa3KNPEFVw0sKM29mvYnmVsvfY1tyVdtwlL/BoSr5LvUi7NHtQDPQlFxbwz K9n+50bOAKHxdKZxpQTSyWFfzUAZC4U1pWDyAcf0JZgzJdbCYBDOKi6Ww1JI5HEu PknGXoFutbPkmRuKaWJZWzJz1HywKCGZ5xnTksIO1n5S/5isUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG/FtI0XwSlBHdh1/bA3nFi+C8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTBiZjNkNTQtMzgzZi0z MTI3LWJjNGUtMWJiOTNiOGY4YjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB96YlyZPpQUgAlQd6CjcKM48cK6/J1a+NV4en/Gc9G57slhlBznsqgD BHY+EZ30RJwiDSnHYKTHNnr8B90TKQl+yTKibwvGpWMxg3w9m9rNjNrM1JOl0TWI 5jvpV+n3IH26akpVsqeayzXXMS9BzA8BTcfMkx7wnr8gn6n62SBQNrwfw9RR++Jg Mfs+0DGannEF5BNdVEoyOft6DclZkoHn9mv1OiSeaJdbxe4AAxoSA+o1L7w2QNsj yhXjONUDOMS4d6pO7U4b6uj86x/5nHxYbTpYzViMeWSjNywVhb9sHa3V7dL0oRT6 vJ2HEQS7iWCNBkx6KcSgMd4klH/1uGg= -----END CERTIFICATE-----Generated at Fri Apr 17 22:17:35 2026 by rpki-client