$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/88a12b73-7ae2-31d5-a88a-10b2077aa4da.roa File: 88a12b73-7ae2-31d5-a88a-10b2077aa4da.roa (raw, json) Hash identifier: BI9e/coL3jyxDozc4KfnhQmxTkhdlrxTl4+Va8ZkYyU= Subject key identifier: 00:0B:0C:66:DA:87:C1:53:2B:24:90:D9:2C:7A:89:13:12:28:A6:D4 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F4328584D571F9F99320E249D829CBF80 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/88a12b73-7ae2-31d5-a88a-10b2077aa4da.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 52.129.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:9f:99:32:0e:24:9d:82:9c:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=bb09a76e-bbad-4032-8e92-0902825981cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:92:17:b0:f9:6e:66:9f:af:03:dd:7f:79: 82:2f:6a:9d:55:19:cc:0c:89:88:06:37:2b:6e:87: e6:de:3c:e9:36:60:e2:e4:ae:33:cd:f0:77:de:d8: 46:7d:69:86:42:e0:da:d9:da:76:ef:d0:71:c2:67: 32:9d:99:bc:f6:a5:72:2a:6d:ff:25:04:06:7b:92: e8:21:99:53:f3:b4:18:cf:af:df:fc:83:b6:c0:00: 9a:09:21:07:b1:ba:8d:39:ac:b8:85:d0:f9:89:06: 2d:58:e4:4b:d0:1a:fa:a7:4d:df:3e:32:3f:00:61: 36:5b:bc:05:60:e8:3c:1c:04:15:ad:da:76:2b:5e: 35:7e:64:33:64:e5:31:05:28:0b:5b:8f:27:f2:1f: 26:87:92:ff:39:73:7e:df:7b:1f:09:25:81:ea:a3: 21:f1:6c:7e:94:ec:7a:bd:07:35:e9:90:bb:6b:8c: f8:a1:e1:4d:bd:36:b5:17:9b:54:5e:24:ea:7c:81: 6b:ba:5f:34:59:d8:a6:85:cd:45:21:bb:78:ba:22: ed:bb:1f:5c:26:3b:6b:dc:17:74:9e:c7:1d:99:55: 24:14:82:e4:0f:e6:d2:03:35:45:1a:17:1f:74:20: 7a:53:55:77:7c:f1:ff:ce:60:fb:f3:50:dc:79:ff: 3b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0B:0C:66:DA:87:C1:53:2B:24:90:D9:2C:7A:89:13:12:28:A6:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/88a12b73-7ae2-31d5-a88a-10b2077aa4da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a9:3a:5c:96:40:c7:1a:3e:4a:14:fb:40:d7:31:a1:2b:71: 10:d6:d3:14:15:16:7b:d6:a7:e5:d6:f2:4a:65:78:34:92:c4: 97:3c:3a:74:53:0f:7f:5c:36:7a:4d:4f:37:d9:7a:c8:74:14: e9:3b:5f:89:d1:85:8a:06:c8:6e:fe:bb:d0:82:5a:db:91:94: 09:47:f8:6e:94:e1:bb:06:3c:9a:57:3a:d2:95:ac:a7:e5:e6: c9:32:fe:e6:c1:08:39:d5:d1:8b:c9:9b:37:6d:63:58:aa:ae: 75:ba:e7:05:12:62:cf:45:bd:01:f8:d3:57:70:b0:df:1f:30: ba:5a:18:dc:89:e2:ac:7a:ae:46:0b:33:f6:d8:63:ee:c9:fe: 8b:3b:92:5d:4b:49:25:c4:32:00:9d:a6:7e:45:da:2b:83:b6: e1:6e:2f:79:40:67:4d:41:82:f6:6d:49:0f:c8:e8:76:ef:bf: 44:0b:6e:42:72:32:5e:01:ff:ce:91:90:35:c2:a1:e4:1c:96: 85:fa:b1:46:34:51:21:90:1b:f7:88:f6:58:4b:ca:4b:94:bc: 28:71:41:e1:2b:a9:f2:ff:7d:2f:a2:69:8b:0f:10:04:bc:90: 60:8a:ae:af:da:b4:68:b0:d6:cd:a4:c8:b4:32:d7:ea:92:63: 36:87:9d:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH5+ZMg4knYKcv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YmIwOWE3NmUtYmJhZC00MDMyLThlOTItMDkwMjgyNTk4MWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIKSF7D5bmafrwPdf3mCL2qdVRnMDImIBjcr bofm3jzpNmDi5K4zzfB33thGfWmGQuDa2dp279BxwmcynZm89qVyKm3/JQQGe5Lo IZlT87QYz6/f/IO2wACaCSEHsbqNOay4hdD5iQYtWORL0Br6p03fPjI/AGE2W7wF YOg8HAQVrdp2K141fmQzZOUxBSgLW48n8h8mh5L/OXN+33sfCSWB6qMh8Wx+lOx6 vQc16ZC7a4z4oeFNvTa1F5tUXiTqfIFrul80Wdimhc1FIbt4uiLtux9cJjtr3Bd0 nscdmVUkFILkD+bSAzVFGhcfdCB6U1V3fPH/zmD781Dcef87bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAALDGbah8FTKySQ2Sx6iRMSKKbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvODhhMTJiNzMtN2FlMi0z MWQ1LWE4OGEtMTBiMjA3N2FhNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+pOlyWQMcaPkoU+0DXMaErcRDW0xQVFnvWp+XW8kpleDSSxJc8OnRT D39cNnpNTzfZesh0FOk7X4nRhYoGyG7+u9CCWtuRlAlH+G6U4bsGPJpXOtKVrKfl 5sky/ubBCDnV0YvJmzdtY1iqrnW65wUSYs9FvQH401dwsN8fMLpaGNyJ4qx6rkYL M/bYY+7J/os7kl1LSSXEMgCdpn5F2iuDtuFuL3lAZ01BgvZtSQ/I6Hbvv0QLbkJy Ml4B/86RkDXCoeQcloX6sUY0USGQG/eI9lhLykuUvChxQeErqfL/fS+iaYsPEAS8 kGCKrq/atGiw1s2kyLQy1+qSYzaHnW4= -----END CERTIFICATE-----Generated at Tue Apr 7 13:32:00 2026 by rpki-client