$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa File: 9d2235b7-541b-384f-9916-48c6dc43d957.roa (raw, json) Hash identifier: H/q3kw/7R9OVnWE2ZbJP2pDxSgbxw0Rn95zrUm2QA0k= Subject key identifier: 3C:22:48:12:52:7A:C7:D7:EE:0A:59:B8:CA:B2:96:7D:1A:D1:D8:01 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F4328584D571FA561A0F96F4B356BEA42 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 52.129.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a5:61:a0:f9:6f:4b:35:6b:ea:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=394f668e-723e-4ca5-a3c4-9ee0b1d79947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:2e:3c:46:b9:a2:27:91:0a:be:96:0a:ea: a4:90:4f:0f:ff:8a:c8:24:46:67:77:f0:2c:dc:bb: 72:24:02:b0:37:b1:a8:37:28:13:48:59:d3:8e:36: 80:33:bc:9b:0f:1c:94:50:fa:b2:42:e6:5b:44:99: 18:7e:63:8b:bc:4d:05:6f:2d:5e:3f:12:59:e9:da: 1e:88:d6:c1:5b:fb:6a:7f:98:aa:1e:be:6c:2e:73: c7:a2:4f:e2:e9:b3:e6:4c:f6:03:02:93:c3:cf:b0: 83:5d:8e:0e:36:d7:ad:7b:18:8f:db:82:6d:5f:da: 3a:12:41:a0:04:cb:d8:88:b1:12:57:f3:3b:3f:56: 7f:c1:b8:cf:b6:14:e8:30:3d:c5:12:09:8a:c2:9f: e5:0b:90:5d:8c:8e:b9:2b:b6:a7:af:8d:48:92:bc: 1e:52:4d:90:79:c9:12:cb:3d:8c:64:0a:17:77:2e: 11:d9:59:7f:4c:45:c9:55:f7:48:15:98:49:10:5e: 60:b1:bd:15:10:ce:72:c9:15:aa:cc:95:e4:9a:3b: 2c:3a:db:49:36:5b:e0:8e:49:37:c6:05:fc:fc:7b: bd:ad:e5:e5:6f:1b:c4:78:d6:28:fa:29:22:9d:22: 65:2f:d2:32:26:43:a3:84:6e:04:ba:70:12:c1:15: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:22:48:12:52:7A:C7:D7:EE:0A:59:B8:CA:B2:96:7D:1A:D1:D8:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8e:16:5f:e0:b4:27:d2:60:a2:17:60:54:61:e6:9b:45:60: d4:e3:7c:c2:c5:47:de:14:6c:6d:31:a0:08:98:4a:99:c7:a1: f5:3d:4f:d2:b9:ca:88:e5:04:61:c2:75:db:e1:64:cf:8a:f4: 3c:1b:0b:a2:c1:22:ce:ce:a8:6b:b8:f6:f4:3b:80:01:c1:1d: 79:1c:f9:90:39:6e:6c:0c:22:ca:8a:a5:02:06:40:18:04:ea: 86:0a:08:7c:bc:de:61:e8:9d:64:fa:b3:ad:65:7e:ec:bd:7d: 22:bf:1a:a6:5e:65:79:51:75:04:a7:1c:d1:30:4b:3c:5c:f3: 90:7e:85:f8:bf:56:8a:70:ad:3a:3a:1b:1f:c9:87:9a:51:4c: 32:b4:a4:7d:9b:b7:16:37:e7:f9:81:cc:9e:ae:32:3d:50:6d: 06:ca:01:fb:e8:71:e4:e8:4f:41:dc:f8:51:45:50:77:48:04: 32:04:1e:29:f8:f3:32:3f:6e:02:ce:ba:92:d0:13:28:49:83: a9:03:a5:4b:83:e6:1b:14:d8:34:aa:bb:e3:9b:e1:8d:21:26: 90:14:4a:b3:b4:8a:44:45:5f:5b:71:cd:9e:f1:82:17:33:d3: 4d:f1:93:8e:7d:92:5b:ca:bf:d0:8b:7c:cc:32:1a:9a:23:3b: 9e:b3:31:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6VhoPlvSzVr6kIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk Mzk0ZjY2OGUtNzIzZS00Y2E1LWEzYzQtOWVlMGIxZDc5OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zcuPEa5oieRCr6WCuqkkE8P/4rIJEZnd/As 3LtyJAKwN7GoNygTSFnTjjaAM7ybDxyUUPqyQuZbRJkYfmOLvE0Fby1ePxJZ6doe iNbBW/tqf5iqHr5sLnPHok/i6bPmTPYDApPDz7CDXY4ONtetexiP24JtX9o6EkGg BMvYiLESV/M7P1Z/wbjPthToMD3FEgmKwp/lC5BdjI65K7anr41IkrweUk2QeckS yz2MZAoXdy4R2Vl/TEXJVfdIFZhJEF5gsb0VEM5yyRWqzJXkmjssOttJNlvgjkk3 xgX8/Hu9reXlbxvEeNYo+ikinSJlL9IyJkOjhG4EunASwRVjPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwiSBJSesfX7gpZuMqyln0a0dgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvOWQyMjM1YjctNTQxYi0z ODRmLTk5MTYtNDhjNmRjNDNkOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2OFl/gtCfSYKIXYFRh5ptFYNTjfMLFR94UbG0xoAiYSpnHofU9T9K5 yojlBGHCddvhZM+K9DwbC6LBIs7OqGu49vQ7gAHBHXkc+ZA5bmwMIsqKpQIGQBgE 6oYKCHy83mHonWT6s61lfuy9fSK/GqZeZXlRdQSnHNEwSzxc85B+hfi/VopwrTo6 Gx/Jh5pRTDK0pH2btxY35/mBzJ6uMj1QbQbKAfvoceToT0Hc+FFFUHdIBDIEHin4 8zI/bgLOupLQEyhJg6kDpUuD5hsU2DSqu+Ob4Y0hJpAUSrO0ikRFX1txzZ7xghcz 003xk459klvKv9CLfMwyGpojO56zMVQ= -----END CERTIFICATE-----Generated at Tue Apr 7 13:31:14 2026 by rpki-client