$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f69f5c59-1458-383b-9b14-330d83b3699f.roa File: f69f5c59-1458-383b-9b14-330d83b3699f.roa (raw, json) Hash identifier: 2WaPdj03ip7bzYvH2UpWLV5iKJ6OXmlP2F9oBxSi7ks= Subject key identifier: D1:5A:14:FC:E3:DC:70:E6:A2:0A:65:12:1C:36:2F:17:E9:E0:50:71 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CDC678EEFE52182A8CDD89E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f69f5c59-1458-383b-9b14-330d83b3699f.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 8069 IP address blocks: 52.122.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:8e:ef:e5:21:82:a8:cd:d8:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=c67c7251-47e5-4d96-ace2-61c71a4a325f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a5:87:ec:a5:09:b2:d1:72:14:d1:a8:91:0d: 99:e3:86:19:de:d6:0b:10:ad:b1:c3:f1:ad:57:91: 24:bb:ed:2e:78:44:45:3b:8b:bd:07:07:ad:54:a7: 00:c6:e3:6d:75:65:0f:ce:fb:df:f9:9f:7f:71:b4: f2:e9:c8:c2:2e:3f:b3:2e:58:bc:ae:f8:16:e0:c6: 2b:56:63:a7:04:0d:1e:f3:9e:e0:56:da:95:eb:e3: 55:da:1d:64:e4:14:21:c8:04:bf:4e:fc:c4:3c:03: 96:49:a0:8a:a8:79:fa:b3:eb:95:b5:c0:f5:ef:28: 7b:ee:40:49:26:9b:98:80:4c:c8:ad:c7:57:dd:80: 08:cc:03:ce:3e:94:74:30:16:00:31:84:b8:e9:5d: 64:65:c9:e3:b8:c6:b5:ca:59:15:93:89:8d:31:38: ca:9a:8f:66:6b:0a:95:55:ef:65:81:86:1c:04:53: ee:40:ae:09:a9:70:b8:3d:98:b8:f2:56:c7:fd:22: c5:59:19:b2:2a:8e:24:84:6d:f5:55:3d:e4:d3:27: 11:b9:7f:b1:9d:db:ec:50:ca:64:00:e8:d2:7a:a4: b9:c5:65:0c:40:09:e8:8b:5c:b5:a8:ea:ab:8b:3e: e5:eb:32:ca:fd:bc:c4:1f:e6:30:a3:f7:90:cc:36: 5b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5A:14:FC:E3:DC:70:E6:A2:0A:65:12:1C:36:2F:17:E9:E0:50:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f69f5c59-1458-383b-9b14-330d83b3699f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:46:95:da:f6:3a:87:49:0f:fd:0e:4c:c1:1b:31:4c:f6:e6: 0a:fa:26:af:e1:4a:31:6b:a8:d8:8a:89:23:8d:c0:a4:59:0b: 9b:e8:c5:35:ac:a7:83:8f:f5:95:d0:f9:32:2a:47:51:2a:df: fc:a1:8c:f1:d4:c3:77:3e:15:8e:d9:ea:5d:2e:80:7f:55:fd: 12:6d:18:64:33:a5:26:71:a9:97:68:c0:87:5a:94:4e:d7:2c: 0e:e8:c3:6d:89:9c:60:07:cc:12:57:e6:9f:a4:c4:e9:bd:60: c1:cb:03:03:56:c2:6f:97:62:70:4b:1b:83:38:3a:c6:cd:91: 15:3e:06:b6:99:eb:56:3e:04:ca:0e:a0:06:3b:17:3b:08:1a: ed:b8:c6:ae:38:d4:3e:31:77:a3:11:aa:ab:28:c7:00:f7:f3: 90:68:e0:a0:16:57:43:34:32:a8:7c:3f:00:b1:85:0b:e8:8c: 00:e6:22:84:be:f2:5c:d4:e7:1a:02:af:c5:cf:ef:ac:ea:57: 72:44:71:c4:4b:46:39:64:db:3a:35:2d:7a:c1:1e:97:20:89: 2c:22:fe:3a:a7:16:e5:77:55:80:34:a8:85:f3:9b:f4:74:41: 8b:b4:43:2e:c5:30:a5:0f:d8:14:be:92:1e:39:0b:f8:d9:45: 92:d9:af:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ47v5SGCqM3YngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk YzY3YzcyNTEtNDdlNS00ZDk2LWFjZTItNjFjNzFhNGEzMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKWH7KUJstFyFNGokQ2Z44YZ3tYLEK2xw/Gt V5Eku+0ueERFO4u9BwetVKcAxuNtdWUPzvvf+Z9/cbTy6cjCLj+zLli8rvgW4MYr VmOnBA0e857gVtqV6+NV2h1k5BQhyAS/TvzEPAOWSaCKqHn6s+uVtcD17yh77kBJ JpuYgEzIrcdX3YAIzAPOPpR0MBYAMYS46V1kZcnjuMa1ylkVk4mNMTjKmo9mawqV Ve9lgYYcBFPuQK4JqXC4PZi48lbH/SLFWRmyKo4khG31VT3k0ycRuX+xndvsUMpk AOjSeqS5xWUMQAnoi1y1qOqriz7l6zLK/bzEH+Ywo/eQzDZbWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFaFPzj3HDmogplEhw2Lxfp4FBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjY5ZjVjNTktMTQ1OC0z ODNiLTliMTQtMzMwZDgzYjM2OTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9Gldr2OodJD/0OTMEbMUz25gr6Jq/hSjFrqNiKiSONwKRZC5voxTWs p4OP9ZXQ+TIqR1Eq3/yhjPHUw3c+FY7Z6l0ugH9V/RJtGGQzpSZxqZdowIdalE7X LA7ow22JnGAHzBJX5p+kxOm9YMHLAwNWwm+XYnBLG4M4OsbNkRU+BraZ61Y+BMoO oAY7FzsIGu24xq441D4xd6MRqqsoxwD385Bo4KAWV0M0Mqh8PwCxhQvojADmIoS+ 8lzU5xoCr8XP76zqV3JEccRLRjlk2zo1LXrBHpcgiSwi/jqnFuV3VYA0qIXzm/R0 QYu0Qy7FMKUP2BS+kh45C/jZRZLZr7Y= -----END CERTIFICATE-----Generated at Tue Mar 3 02:43:15 2026 by rpki-client