$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa File: af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa (raw, json) Hash identifier: mJnf16bArrTDeav5kzb/7vzPgry/TfTTxW/9iO2I8Cw= Subject key identifier: A2:7F:E1:A0:76:90:E3:74:76:7D:76:B2:6B:6F:34:D3:83:C7:B6:C7 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F4328584B2CF6DBB994B7C5613E02C700 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 52.129.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:db:b9:94:b7:c5:61:3e:02:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=103e0002-d718-4544-b2e9-fb50adaf89a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:d7:96:2e:51:eb:d0:00:e7:36:f8:22:84: c0:71:6d:46:55:a7:4b:a6:09:cd:36:9f:a1:3b:b8: 80:c2:4f:75:dd:b1:0d:38:bc:c5:b3:2e:c6:88:91: 52:64:82:ec:ae:48:6a:19:af:1f:aa:90:44:d5:4d: 3c:b9:2f:5e:64:5c:33:49:09:39:3d:3f:45:74:8e: 47:ea:91:17:a6:7b:79:3e:16:31:79:94:90:e2:e1: a8:23:91:75:6a:41:1c:2f:9c:68:34:3a:90:dd:e6: f9:18:70:c8:c2:d6:ac:9e:ce:9c:af:29:a6:21:35: ef:96:68:2e:2e:91:da:ae:d6:eb:0c:dd:2d:96:23: 1f:fd:ce:bf:9a:e9:4b:f8:cc:0e:e1:38:63:e3:98: b4:44:9d:d6:7b:06:99:f8:a8:81:98:b9:ff:08:b3: 7f:c8:56:82:fe:ef:2e:df:9f:da:49:1d:4b:b9:c9: 9c:3d:07:bc:7d:bd:fc:4f:c1:ee:3f:37:18:f1:6d: a9:ff:c1:99:b3:22:66:4b:02:ee:bd:1f:ca:e2:93: ab:ad:45:f1:e3:3e:9a:81:b4:06:ef:a0:26:61:e9: 28:eb:e1:dd:9e:6f:0d:76:4d:99:fc:6a:ff:c7:2f: b2:a4:29:72:90:41:ad:43:9d:18:b6:98:3d:f1:ba: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7F:E1:A0:76:90:E3:74:76:7D:76:B2:6B:6F:34:D3:83:C7:B6:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:bf:0f:9b:09:15:aa:45:6b:ee:6d:8c:7a:f0:1f:d2:27:97: a8:a7:6b:91:af:f3:15:14:c1:4a:7a:a0:96:42:fa:0d:13:43: f0:4b:16:d3:28:42:56:0d:48:1f:8b:55:1c:e5:6d:82:75:fc: 05:0a:d5:89:91:fb:48:d8:68:02:10:0e:a7:8c:23:a0:09:a4: a9:65:42:86:67:41:62:e7:82:91:e0:59:1f:b7:42:f9:b5:18: b7:77:72:bf:ea:43:47:42:c7:62:27:94:38:2a:78:06:37:49: 6d:c7:39:7e:e8:e9:27:48:51:03:35:db:68:9b:5c:c9:3f:15: 75:6a:ad:b5:13:af:8b:34:05:d8:c8:d3:fb:f0:2f:5f:9f:94: 46:23:ed:31:c7:bb:67:68:ec:6c:0a:6c:02:14:dd:b6:84:6d: b0:e6:83:d0:a7:92:46:e2:98:cc:f2:24:30:b0:83:2f:8d:05: 44:73:c0:09:b3:17:bb:76:11:47:e0:3c:22:5a:7e:8c:c6:99: e1:29:8e:65:d1:12:06:b9:bb:24:94:1b:be:bf:54:61:d0:45: da:69:fc:4f:21:48:25:44:be:7b:81:73:ea:df:d9:d0:9a:c3: ec:15:b9:d1:f8:ad:50:e2:67:73:03:de:ad:50:c0:f0:83:73: d6:48:8d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tu5lLfFYT4CxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MTAzZTAwMDItZDcxOC00NTQ0LWIyZTktZmI1MGFkYWY4OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufHXli5R69AA5zb4IoTAcW1GVadLpgnNNp+h O7iAwk913bENOLzFsy7GiJFSZILsrkhqGa8fqpBE1U08uS9eZFwzSQk5PT9FdI5H 6pEXpnt5PhYxeZSQ4uGoI5F1akEcL5xoNDqQ3eb5GHDIwtasns6crymmITXvlmgu LpHartbrDN0tliMf/c6/mulL+MwO4Thj45i0RJ3WewaZ+KiBmLn/CLN/yFaC/u8u 35/aSR1LucmcPQe8fb38T8HuPzcY8W2p/8GZsyJmSwLuvR/K4pOrrUXx4z6agbQG 76AmYeko6+Hdnm8Ndk2Z/Gr/xy+ypClykEGtQ50Ytpg98brlpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ/4aB2kON0dn12smtvNNODx7bHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvYWY4YzY0ZWQtNmI4ZS0z Zjg1LWE1OTItZmFlNDE2Y2RiYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm/D5sJFapFa+5tjHrwH9Inl6ina5Gv8xUUwUp6oJZC+g0TQ/BLFtMo QlYNSB+LVRzlbYJ1/AUK1YmR+0jYaAIQDqeMI6AJpKllQoZnQWLngpHgWR+3Qvm1 GLd3cr/qQ0dCx2InlDgqeAY3SW3HOX7o6SdIUQM122ibXMk/FXVqrbUTr4s0BdjI 0/vwL1+flEYj7THHu2do7GwKbAIU3baEbbDmg9CnkkbimMzyJDCwgy+NBURzwAmz F7t2EUfgPCJafozGmeEpjmXREga5uySUG76/VGHQRdpp/E8hSCVEvnuBc+rf2dCa w+wVudH4rVDiZ3MD3q1QwPCDc9ZIjeM= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:28 2025 by rpki-client