$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa File: 4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa (raw, json) Hash identifier: /67XRA70SWHW2Z+D64MpofsdchnJY1zOLGpjD7bFKz4= Subject key identifier: 41:81:04:A1:D0:FD:87:B0:52:E9:2D:A4:E0:21:88:25:8C:22:33:AC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B72514A8E57BB9A49AD600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 52.122.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:25:14:a8:e5:7b:b9:a4:9a:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=26d99ae2-7160-4f90-b11a-3c50d2b0e6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:13:2a:97:3c:b8:fc:ca:89:ef:ca:b8:7d:5f: 24:2f:59:19:99:33:24:a2:ed:e7:eb:76:58:09:c9: e4:99:4c:63:1c:b2:10:87:60:94:ac:21:61:17:fe: 61:bf:1d:d7:ac:e8:c9:62:fd:b6:28:b4:34:da:9e: 84:e2:de:4b:18:ad:b0:08:94:72:ec:73:fa:c6:05: 12:0c:4e:ae:40:0e:f9:14:61:bb:18:82:f6:39:9c: 56:15:f8:62:e8:dd:97:3b:da:67:aa:e0:86:c8:d7: 16:04:48:cc:62:11:1d:06:0e:b4:dc:3a:57:fd:0b: a2:36:bb:71:d7:f6:29:1f:52:33:0b:fd:5d:22:cc: e5:2d:67:90:52:93:59:26:b3:44:91:6d:3f:f9:42: 6d:0e:50:c6:21:b0:15:1a:ec:e1:62:e3:87:dd:fe: 6a:9a:6c:39:96:f6:d0:4d:25:5e:5f:ed:b5:25:fc: ed:68:14:3d:d9:cb:e8:67:17:2c:70:00:d6:80:c0: 1f:39:c6:56:ba:fb:40:c4:92:8f:d2:1f:9d:e7:e3: c1:5b:2b:30:95:45:0c:45:3a:8b:03:c8:46:f3:68: 27:e4:c5:02:54:f5:cb:42:7d:ed:54:53:76:fd:89: d6:08:c4:ae:bc:c2:d6:e2:90:1a:dc:23:3b:ba:84: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:04:A1:D0:FD:87:B0:52:E9:2D:A4:E0:21:88:25:8C:22:33:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:85:ec:0b:58:e3:32:51:2c:0e:e4:52:bd:cd:5d:79:25:fa: 12:ea:88:af:a5:ea:37:37:41:01:2c:06:ab:48:a8:bc:ea:00: 66:f8:24:82:79:93:95:36:75:3b:60:b5:eb:87:cc:ad:0c:e8: 8d:bf:83:9d:bc:fa:1f:2f:ab:bd:c5:3a:52:36:30:99:58:68: 32:6e:a9:b0:8a:49:20:47:c5:c9:8a:7c:a0:2c:0f:eb:a9:28: 3a:80:de:df:e2:01:a2:a7:d0:10:9b:27:7c:0b:b4:f0:5e:d8: 65:35:2c:f6:50:79:40:0c:de:b9:ce:01:0f:21:49:5c:39:fa: f9:de:fa:36:68:95:69:ca:79:05:a4:02:ff:e5:33:a7:62:ce: 68:88:3d:71:58:91:17:82:47:e7:93:61:24:29:78:24:8b:78: 99:4d:f4:7c:08:2d:3c:d8:35:e1:22:f1:3d:39:68:71:c9:e1: e3:98:82:0e:a2:14:3c:4f:b7:83:6f:8e:a1:09:1d:d0:fa:54: 19:86:88:b0:b5:1c:cc:4a:ac:5f:3a:98:ec:57:e5:c9:bd:60: 70:dd:4a:f0:ad:5b:f7:24:fe:a2:e5:03:c9:a1:a9:22:66:f3: df:8e:b7:3c:94:9e:50:79:28:40:64:29:3d:42:b9:cc:68:fd: ce:0e:2c:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyUUqOV7uaSa1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk MjZkOTlhZTItNzE2MC00ZjkwLWIxMWEtM2M1MGQyYjBlNmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxMqlzy4/MqJ78q4fV8kL1kZmTMkou3n63ZY CcnkmUxjHLIQh2CUrCFhF/5hvx3XrOjJYv22KLQ02p6E4t5LGK2wCJRy7HP6xgUS DE6uQA75FGG7GIL2OZxWFfhi6N2XO9pnquCGyNcWBEjMYhEdBg603DpX/QuiNrtx 1/YpH1IzC/1dIszlLWeQUpNZJrNEkW0/+UJtDlDGIbAVGuzhYuOH3f5qmmw5lvbQ TSVeX+21JfztaBQ92cvoZxcscADWgMAfOcZWuvtAxJKP0h+d5+PBWyswlUUMRTqL A8hG82gn5MUCVPXLQn3tVFN2/YnWCMSuvMLW4pAa3CM7uoQCiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGBBKHQ/YewUuktpOAhiCWMIjOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGVmZTc0NDEtMjRkZC0z Y2FhLThiYjktYTU4ZmM3ZmFiMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+F7AtY4zJRLA7kUr3NXXkl+hLqiK+l6jc3QQEsBqtIqLzqAGb4JIJ5 k5U2dTtgteuHzK0M6I2/g528+h8vq73FOlI2MJlYaDJuqbCKSSBHxcmKfKAsD+up KDqA3t/iAaKn0BCbJ3wLtPBe2GU1LPZQeUAM3rnOAQ8hSVw5+vne+jZolWnKeQWk Av/lM6dizmiIPXFYkReCR+eTYSQpeCSLeJlN9HwILTzYNeEi8T05aHHJ4eOYgg6i FDxPt4NvjqEJHdD6VBmGiLC1HMxKrF86mOxX5cm9YHDdSvCtW/ck/qLlA8mhqSJm 89+OtzyUnlB5KEBkKT1Cucxo/c4OLB4= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:08 2026 by rpki-client