$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa File: 7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa (raw, json) Hash identifier: ++j6O8pzRCt13frSyS+bECOTIoYrx3ZiZSLqzT5K8TU= Subject key identifier: CA:AE:95:BD:53:A3:A1:9B:59:BD:ED:E8:77:A2:8E:85:AB:00:1E:EA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CFC8237FDA9C69EF1AF7FC240 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 52.122.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:37:fd:a9:c6:9e:f1:af:7f:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=2551dbc3-e53b-420b-8f6c-5533d68ae5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:f9:b1:10:a1:d9:d1:bc:b9:7f:aa:84:b2: 6a:3b:03:c1:55:8b:fc:c6:4e:1d:8c:4a:83:fb:27: 7b:76:91:b9:05:89:bf:fb:09:41:96:6d:72:a4:f6: 09:50:6a:ef:6c:38:b1:18:4a:07:47:bf:0f:15:71: 43:61:cb:bc:05:ae:c6:2b:a7:9a:c8:94:d0:ef:e1: c3:c7:b5:e3:90:32:82:53:eb:79:6a:1b:f6:90:2e: ac:96:59:f3:52:1d:1d:93:b8:42:2b:33:45:86:79: a8:2d:c2:50:7f:bf:13:f9:01:27:45:a3:d2:79:ad: 42:8e:3b:df:88:38:4b:9e:b7:5c:cc:88:4f:9b:a3: 34:4d:0b:5f:0d:3c:e5:b0:6c:c4:c2:a0:54:05:5a: f9:b3:09:b0:03:7a:7b:76:a6:d4:bc:44:b3:58:05: f8:52:e3:3d:bd:5a:c3:80:dd:04:15:aa:56:25:b6: 16:60:ad:1c:f4:6f:58:de:55:47:87:48:7e:e6:af: 2f:24:07:4a:43:24:c0:71:dc:dd:76:9d:96:da:75: 6c:64:ba:44:5c:41:e7:5a:f4:1d:75:59:af:06:da: fb:ed:d6:51:f3:54:65:0b:0a:28:0a:3f:e9:78:08: 8f:f0:ed:bd:79:8f:86:7b:ef:c5:9c:00:64:e1:86: d5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:95:BD:53:A3:A1:9B:59:BD:ED:E8:77:A2:8E:85:AB:00:1E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b4:0e:04:ee:86:5c:5b:55:2f:50:15:15:7b:6a:dd:0c:9b: fe:b8:f4:cb:bf:b3:cb:de:76:30:65:03:75:ee:02:b5:53:5c: 3d:f5:c4:3f:5f:b9:a7:18:5a:1c:0f:35:9e:92:b3:34:5a:e2: 0a:88:ea:75:34:96:f5:7b:0e:e6:51:a3:d7:cb:78:3e:71:98: 7d:9a:ce:08:08:63:04:01:52:a8:03:c2:d3:bc:c2:79:dc:34: 33:eb:9b:31:81:ad:a2:ad:43:13:ca:a0:2e:bd:1f:16:84:df: d9:cf:e8:59:38:a6:48:7e:c6:24:fa:fd:8a:a1:00:05:42:6c: e5:05:33:58:7e:bc:29:fb:fa:aa:b7:f0:04:20:b8:39:15:f2: 65:67:ad:66:37:9a:2d:59:5f:bc:54:99:49:a2:e4:af:da:50: 3b:23:eb:86:75:76:97:90:a2:ea:5e:65:96:a5:08:34:69:4f: 8c:79:d4:63:74:3e:3f:58:2c:e0:0b:bf:86:e9:55:b6:02:70: c3:cf:90:81:f8:bb:f6:13:8d:75:b9:53:d2:91:17:4d:60:d7: 49:25:b8:01:9b:e3:49:ff:5b:2e:95:c0:02:a7:46:8e:26:9d: 83:e7:cf:0c:61:b6:69:07:a7:34:25:79:6d:40:c7:46:48:ab: 02:a7:f6:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjf9qcae8a9/wkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk MjU1MWRiYzMtZTUzYi00MjBiLThmNmMtNTUzM2Q2OGFlNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5H5sRCh2dG8uX+qhLJqOwPBVYv8xk4djEqD +yd7dpG5BYm/+wlBlm1ypPYJUGrvbDixGEoHR78PFXFDYcu8Ba7GK6eayJTQ7+HD x7XjkDKCU+t5ahv2kC6sllnzUh0dk7hCKzNFhnmoLcJQf78T+QEnRaPSea1Cjjvf iDhLnrdczIhPm6M0TQtfDTzlsGzEwqBUBVr5swmwA3p7dqbUvESzWAX4UuM9vVrD gN0EFapWJbYWYK0c9G9Y3lVHh0h+5q8vJAdKQyTAcdzddp2W2nVsZLpEXEHnWvQd dVmvBtr77dZR81RlCwooCj/peAiP8O29eY+Ge+/FnABk4YbVtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqulb1To6GbWb3t6HeijoWrAB7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2JiYzlmNDItNzkwMC0z NjIzLWE2ZjUtODVjZGYyN2ExN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK0DgTuhlxbVS9QFRV7at0Mm/649Mu/s8vedjBlA3XuArVTXD31xD9f uacYWhwPNZ6SszRa4gqI6nU0lvV7DuZRo9fLeD5xmH2azggIYwQBUqgDwtO8wnnc NDPrmzGBraKtQxPKoC69HxaE39nP6Fk4pkh+xiT6/YqhAAVCbOUFM1h+vCn7+qq3 8AQguDkV8mVnrWY3mi1ZX7xUmUmi5K/aUDsj64Z1dpeQoupeZZalCDRpT4x51GN0 Pj9YLOALv4bpVbYCcMPPkIH4u/YTjXW5U9KRF01g10kluAGb40n/Wy6VwAKnRo4m nYPnzwxhtmkHpzQleW1Ax0ZIqwKn9qA= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:16 2026 by rpki-client