$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa File: 288fc8dd-efe9-316a-a798-5d9657553ed5.roa (raw, json) Hash identifier: UOGFHHH0QrrQtVcan1A/8hH3UJTaNKhjJRxDufWtzwg= Subject key identifier: E0:AF:FC:9F:4B:23:95:77:DA:6B:80:F1:7B:44:9F:41:D6:80:C8:F8 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584EA79A5FEC7079F85F5AD38D00 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22241 IP address blocks: 52.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:5f:ec:70:79:f8:5f:5a:d3:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a0e3297b-bd01-4d4f-b846-439f32f2df15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:14:32:4f:fc:17:dd:15:f3:cf:f7:bc:fe:57: 2e:af:b3:56:14:75:37:ba:42:b5:79:ff:06:27:63: 6d:5f:1c:da:1e:d8:a6:95:7c:60:89:6a:a6:af:42: a5:02:9f:9a:49:58:5c:ab:c4:69:ef:91:75:f0:bc: 2e:48:b0:fe:75:cf:61:ea:3b:f1:c7:88:c9:20:07: db:44:c7:4f:ff:7a:96:df:54:86:c9:ae:01:74:08: 22:d1:21:a3:8e:19:6b:fd:a6:ed:3b:80:40:b9:c2: 90:d6:59:89:58:33:3e:7d:17:7c:fe:17:9f:65:fe: 91:b8:51:37:35:a9:57:f4:15:a0:25:af:fd:11:d9: ac:14:a2:35:68:a2:e2:b5:de:2b:42:72:f2:8e:4b: b9:b1:2b:24:e1:ad:7c:12:87:ce:8b:86:0d:32:ef: 7d:94:c3:c0:38:3a:e0:c1:6b:41:04:97:b9:a3:18: 98:4f:ec:08:8f:43:b6:1a:de:fc:da:b3:90:53:cf: 42:e0:91:7d:54:bd:f7:86:8e:84:9b:cd:c5:4a:c1: c5:45:a5:fb:18:bd:09:d7:c0:df:be:73:6d:67:dd: 79:64:11:03:c9:79:04:1d:d6:9d:43:1d:6a:ad:25: 5e:b9:10:65:04:f0:6e:5f:82:54:14:1a:18:bc:b9: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AF:FC:9F:4B:23:95:77:DA:6B:80:F1:7B:44:9F:41:D6:80:C8:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a4:20:bf:2b:af:7e:08:c8:51:bc:12:56:d4:85:f1:57:ca: 70:7e:39:5c:73:20:28:0b:7a:39:5a:b3:1a:38:04:b8:b5:fd: f9:02:da:3c:58:79:db:bd:be:fe:16:e0:b3:3b:40:2f:af:2c: 85:c9:9a:26:cf:c7:a2:78:72:48:97:2b:0f:1b:75:fa:ce:3a: b8:2a:e7:69:cb:37:52:17:f6:16:ba:69:3a:6c:37:52:21:2b: 95:7e:06:b5:c0:cc:ae:8e:80:9b:57:4a:81:83:1a:2c:15:54: ad:4a:48:e5:e5:4d:95:3d:09:2b:33:7d:2f:be:80:82:1f:59: de:55:5c:5f:05:15:f4:52:2f:ab:dd:df:00:ab:dc:3e:8f:ea: cd:a7:19:fd:7e:1b:7a:e2:34:2e:30:f5:a8:d8:f0:39:34:c2: 86:7e:87:c5:74:6a:2d:fd:7b:16:82:20:87:fa:ba:9d:c8:18: 7c:80:4b:78:bf:34:67:e9:a5:ac:c5:d8:8e:56:c7:d0:5f:da: 3c:e5:16:51:3d:24:b8:f0:eb:ba:9a:16:7c:56:9b:8e:fb:0f: 46:6e:10:33:fd:9e:7d:48:a0:99:56:77:b6:aa:71:9a:fe:cc: 62:d1:77:18:49:e4:5e:ff:b2:2f:db:ff:d6:b4:99:d8:da:5e: bd:86:d8:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nml/scHn4X1rTjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTBlMzI5N2ItYmQwMS00ZDRmLWI4NDYtNDM5ZjMyZjJkZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBQyT/wX3RXzz/e8/lcur7NWFHU3ukK1ef8G J2NtXxzaHtimlXxgiWqmr0KlAp+aSVhcq8Rp75F18LwuSLD+dc9h6jvxx4jJIAfb RMdP/3qW31SGya4BdAgi0SGjjhlr/abtO4BAucKQ1lmJWDM+fRd8/hefZf6RuFE3 NalX9BWgJa/9EdmsFKI1aKLitd4rQnLyjku5sSsk4a18EofOi4YNMu99lMPAODrg wWtBBJe5oxiYT+wIj0O2Gt782rOQU89C4JF9VL33ho6Em83FSsHFRaX7GL0J18Df vnNtZ915ZBEDyXkEHdadQx1qrSVeuRBlBPBuX4JUFBoYvLn6YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCv/J9LI5V32muA8XtEn0HWgMj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvMjg4ZmM4ZGQtZWZlOS0z MTZhLWE3OTgtNWQ5NjU3NTUzZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2kIL8rr34IyFG8ElbUhfFXynB+OVxzICgLejlasxo4BLi1/fkC2jxY edu9vv4W4LM7QC+vLIXJmibPx6J4ckiXKw8bdfrOOrgq52nLN1IX9ha6aTpsN1Ih K5V+BrXAzK6OgJtXSoGDGiwVVK1KSOXlTZU9CSszfS++gIIfWd5VXF8FFfRSL6vd 3wCr3D6P6s2nGf1+G3riNC4w9ajY8Dk0woZ+h8V0ai39exaCIIf6up3IGHyAS3i/ NGfppazF2I5Wx9Bf2jzlFlE9JLjw67qaFnxWm477D0ZuEDP9nn1IoJlWd7aqcZr+ zGLRdxhJ5F7/si/b/9a0mdjaXr2G2Eo= -----END CERTIFICATE-----Generated at Sat Aug 1 11:42:36 2026 by rpki-client