$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa File: dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa (raw, json) Hash identifier: 7B1DZW8tC+eqkf88n4/D2W2PWGilCLlxQPb1mZkCWlA= Subject key identifier: 11:4F:E0:C8:68:7A:C9:9A:8C:8B:00:AB:18:C7:E4:7F:4D:F3:67:B2 Certificate issuer: /CN=2627756a-b322-49e6-941e-ed30e9ab9eae Certificate serial: 010D0C9F4328584ED431EDAEC800DE4DAFE63540 Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 16509 IP address blocks: 52.129.152.0/21 maxlen: 24 52.129.160.0/19 maxlen: 24 52.129.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:ed:ae:c8:00:de:4d:af:e6:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=8b493667-4e9c-47cb-8147-20c24e58edb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:bc:79:f6:9b:57:4c:cd:22:bb:99:57:8c: cc:e6:f7:dd:24:cf:51:fa:d1:3b:08:0f:4a:a7:44: 59:a3:c1:ef:b9:73:80:13:b7:91:67:85:19:1d:04: ce:e1:d0:37:dc:71:a0:22:56:4a:de:19:d9:55:15: ad:c4:79:f1:36:fa:a1:7b:0c:34:7f:44:4a:af:18: b9:7a:f3:cd:bc:9f:3c:e3:b5:c5:e8:0b:d2:f6:96: 65:e8:41:d7:f1:ec:91:0e:af:b9:74:34:08:19:df: cf:f4:26:ab:cd:1b:31:21:1a:43:17:c7:b2:9b:14: d9:65:2e:3c:28:6d:59:af:93:3c:82:02:48:f2:2a: b8:99:5b:db:a0:30:02:6b:18:e5:29:72:fa:2d:73: 76:c2:ad:a7:c8:b7:31:21:d0:ab:e3:a0:c5:11:eb: e9:4f:30:49:29:31:b5:0e:1a:36:55:25:37:49:5d: 22:67:9e:36:a7:f1:2f:54:df:fe:4e:4b:79:1d:3d: 45:5c:f4:c9:13:c0:d1:35:0d:e1:e5:c0:4a:31:77: f0:50:5e:71:bc:69:18:dd:b3:d4:07:a3:ca:7d:d2: d8:dc:b5:be:7a:da:83:56:a0:dc:26:e4:4c:63:82: db:14:69:4b:a8:80:75:d4:f1:c4:bb:42:57:c0:5c: 8d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4F:E0:C8:68:7A:C9:9A:8C:8B:00:AB:18:C7:E4:7F:4D:F3:67:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/dbff6ad2-6859-39ae-a74a-3a6affaa805f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl X509v3 Authority Key Identifier: keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer sbgp-ipAddrBlock: critical IPv4: 52.129.152.0-52.129.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:eb:33:57:57:33:b3:05:b2:60:b2:5f:19:04:c3:f6:1b:92: e2:ac:73:c6:20:de:7a:e4:0e:5d:c0:8a:de:b9:fc:f6:e6:f8: 3d:95:09:8e:97:bf:bc:a1:e7:09:0a:af:3f:bb:66:25:95:0f: 93:78:ea:fb:7e:e1:f4:0b:fe:d8:28:e6:7d:f1:55:06:04:17: 0e:4b:fa:dc:1a:3f:dc:07:cd:ed:ed:41:c1:17:b8:74:ee:61: 00:d5:fa:4f:f2:e1:5e:71:6f:67:0a:7b:79:ed:16:26:83:7a: e6:c9:7c:97:b3:d1:c7:8d:40:a6:12:d8:e8:c2:87:87:95:7f: 37:ce:a3:c6:9a:68:51:97:3f:14:fa:0f:04:05:9d:9d:fd:60: a2:11:4d:13:d0:d6:45:b9:24:77:5a:8c:4d:b8:5f:67:f9:88: 9a:67:12:fc:bc:c3:f9:57:5d:5e:90:7d:19:bb:9f:1b:53:57: b9:6a:f1:0c:6d:00:0b:7d:a3:dd:a1:3e:8c:68:87:9d:22:43: 78:37:7d:0f:40:6b:05:46:46:54:37:b3:62:77:20:66:bc:77: 09:e5:ef:56:f9:9a:d1:c8:97:a6:9b:4b:2e:cf:a1:74:ab:17: e4:5e:57:01:89:c4:4f:71:27:be:0a:94:95:6f:f6:e9:dd:e0: 84:b7:6f:c0 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE7UMe2uyADeTa/mNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjYyNzc1NmEtYjMyMi00OWU2LTk0MWUtZWQzMGU5YWI5 ZWFlMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk OGI0OTM2NjctNGU5Yy00N2NiLTgxNDctMjBjMjRlNThlZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3K8efabV0zNIruZV4zM5vfdJM9R+tE7CA9K p0RZo8HvuXOAE7eRZ4UZHQTO4dA33HGgIlZK3hnZVRWtxHnxNvqheww0f0RKrxi5 evPNvJ8847XF6AvS9pZl6EHX8eyRDq+5dDQIGd/P9CarzRsxIRpDF8eymxTZZS48 KG1Zr5M8ggJI8iq4mVvboDACaxjlKXL6LXN2wq2nyLcxIdCr46DFEevpTzBJKTG1 Dho2VSU3SV0iZ542p/EvVN/+Tkt5HT1FXPTJE8DRNQ3h5cBKMXfwUF5xvGkY3bPU B6PKfdLY3LW+etqDVqDcJuRMY4LbFGlLqIB11PHEu0JXwFyN/wIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFBFP4MhoesmajIsAqxjH5H9N82eyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjI3 NzU2YS1iMzIyLTQ5ZTYtOTQxZS1lZDMwZTlhYjllYWUvZGJmZjZhZDItNjg1OS0z OWFlLWE3NGEtM2E2YWZmYWE4MDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjYyNzc1NmEtYjMyMi00OWU2LTk0 MWUtZWQzMGU5YWI5ZWFlLzI2Mjc3NTZhLWIzMjItNDllNi05NDFlLWVkMzBlOWFi OWVhZS5jcmwwHwYDVR0jBBgwFoAUhEDJBl4qqtMfJnCblEkUz3KanGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjI3NzU2YS1iMzIyLTQ5ZTYtOTQxZS1lZDMw ZTlhYjllYWUuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAM0gZgD AwE0gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBx6zNXVzOzBbJgsl8ZBMP2G5LirHPGIN565A5dwIreufz2 5vg9lQmOl7+8oecJCq8/u2YllQ+TeOr7fuH0C/7YKOZ98VUGBBcOS/rcGj/cB83t 7UHBF7h07mEA1fpP8uFecW9nCnt57RYmg3rmyXyXs9HHjUCmEtjowoeHlX83zqPG mmhRlz8U+g8EBZ2d/WCiEU0T0NZFuSR3WoxNuF9n+YiaZxL8vMP5V11ekH0Zu58b U1e5avEMbQALfaPdoT6MaIedIkN4N30PQGsFRkZUN7NidyBmvHcJ5e9W+ZrRyJem m0suz6F0qxfkXlcBicRPcSe+CpSVb/bp3eCEt2/A -----END CERTIFICATE-----Generated at Fri Aug 21 01:14:29 2026 by rpki-client