$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa File: 57255afb-e05f-3ef2-8797-83efde89cf68.roa (raw, json) Hash identifier: QaKFDqj7sNKZ/SDKzxccf5okoULmxBNGFGFmVUON1EA= Subject key identifier: 68:A3:D5:0C:6E:B7:C5:AF:10:C3:9D:32:89:A1:74:C8:03:4D:E2:D0 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584DD1F5BDB14D2C7FA274D2D790 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa Signing time: Wed 13 May 2026 13:00:31 +0000 ROA not before: Wed 13 May 2026 13:00:31 +0000 ROA not after: Tue 11 Aug 2026 13:00:31 +0000 asID: 400745 IP address blocks: 52.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 20 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:f5:bd:b1:4d:2c:7f:a2:74:d2:d7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: May 13 13:00:31 2026 GMT Not After : Aug 11 13:00:31 2026 GMT Subject: CN=aace55a0-9e68-4e49-b7a2-5541910827db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bf:99:70:6b:87:84:a6:61:88:44:27:0f:ce: d7:38:cb:9a:01:91:0f:55:5c:20:77:37:d9:a9:52: 81:c1:02:8b:5c:5c:7b:56:bc:84:f0:07:96:12:1c: 53:65:a8:0b:66:57:77:3b:8e:1e:7b:fb:83:12:dd: df:54:77:8e:e7:bd:42:8a:2f:1a:0b:9f:9c:d9:af: 6c:ac:51:20:39:aa:ab:96:69:9f:f5:24:95:92:2d: 41:30:74:16:a4:06:c7:a6:e9:a8:cf:46:05:f4:2e: 8b:5f:5a:14:9b:ae:76:22:4e:2c:3b:de:ea:7c:e7: af:6c:50:27:11:e8:7c:48:a5:06:ae:30:ca:4c:bd: 7c:d0:ee:ed:ae:35:da:bb:f7:f3:f8:56:ea:2c:e1: 9e:22:1e:31:2c:3c:65:9a:ba:e4:19:53:bf:96:06: 21:b5:94:e9:f9:d9:aa:8a:cc:c3:a0:6b:8f:90:cc: b5:5c:0f:c1:e0:58:b0:af:13:21:b9:9e:84:9b:90: df:b4:2e:5d:38:23:1f:1a:57:b6:dc:30:52:d0:0c: be:0a:4b:43:d6:ff:2c:e0:56:7a:54:dd:20:f9:2a: 01:fb:21:7b:92:ed:8c:02:83:66:9f:7f:d3:ba:51: f3:1e:f3:17:ff:02:d4:ce:15:8f:16:61:91:7b:da: 27:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A3:D5:0C:6E:B7:C5:AF:10:C3:9D:32:89:A1:74:C8:03:4D:E2:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:92:cf:9c:02:c3:84:25:0c:21:a5:93:40:dd:81:44:df:3d: 8d:c7:c3:bc:2f:c4:8b:21:a8:ca:1a:b4:28:19:2d:95:25:db: 2d:c0:e1:ba:30:87:22:95:66:79:e0:29:c0:76:96:ca:55:eb: d4:11:95:39:34:c0:7a:a0:29:fa:b1:b6:15:1a:9d:e6:dc:f5: 58:43:80:7c:7b:c5:41:19:77:54:29:5b:20:81:e3:64:c2:03: 5d:f0:c0:3e:d9:ee:2c:b1:bf:c5:c6:ea:f4:6e:85:e1:ad:1e: cc:8c:14:d8:c9:8c:dc:99:ae:c2:8f:c4:40:cc:a6:f7:ea:63: 8a:24:b4:27:c4:88:20:2f:11:ef:b7:d5:37:42:54:4e:0e:53: 22:a7:da:ae:59:b8:98:30:65:6c:f9:f1:15:b2:f4:7e:85:75: bb:58:db:98:e7:bd:28:61:ca:f0:24:14:f4:04:bb:41:0a:c9: bf:1b:1f:d0:9e:e2:05:2e:6f:62:04:52:a2:0e:1f:32:0f:61: 8e:91:da:4e:2b:cb:a2:30:08:97:1a:a1:13:bd:aa:72:ee:0e: e3:a0:fa:89:79:3a:ab:7f:68:ae:d9:a5:9f:39:3c:fc:22:2e: aa:c5:7f:a3:84:0b:ce:ff:38:b0:76:9c:6c:50:dd:35:66:be: a6:c3:32:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3R9b2xTSx/onTS15AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI2MDUxMzEzMDAzMVoXDTI2MDgxMTEzMDAzMVowLzEtMCsGA1UEAxMk YWFjZTU1YTAtOWU2OC00ZTQ5LWI3YTItNTU0MTkxMDgyN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib+ZcGuHhKZhiEQnD87XOMuaAZEPVVwgdzfZ qVKBwQKLXFx7VryE8AeWEhxTZagLZld3O44ee/uDEt3fVHeO571Cii8aC5+c2a9s rFEgOaqrlmmf9SSVki1BMHQWpAbHpumoz0YF9C6LX1oUm652Ik4sO97qfOevbFAn Eeh8SKUGrjDKTL180O7trjXau/fz+FbqLOGeIh4xLDxlmrrkGVO/lgYhtZTp+dmq iszDoGuPkMy1XA/B4FiwrxMhuZ6Em5DftC5dOCMfGle23DBS0Ay+CktD1v8s4FZ6 VN0g+SoB+yF7ku2MAoNmn3/TulHzHvMX/wLUzhWPFmGRe9onNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGij1Qxut8WvEMOdMomhdMgDTeLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvNTcyNTVhZmItZTA1Zi0z ZWYyLTg3OTctODNlZmRlODljZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmSz5wCw4QlDCGlk0DdgUTfPY3Hw7wvxIshqMoatCgZLZUl2y3A4bow hyKVZnngKcB2lspV69QRlTk0wHqgKfqxthUanebc9VhDgHx7xUEZd1QpWyCB42TC A13wwD7Z7iyxv8XG6vRuheGtHsyMFNjJjNyZrsKPxEDMpvfqY4oktCfEiCAvEe+3 1TdCVE4OUyKn2q5ZuJgwZWz58RWy9H6FdbtY25jnvShhyvAkFPQEu0EKyb8bH9Ce 4gUub2IEUqIOHzIPYY6R2k4ry6IwCJcaoRO9qnLuDuOg+ol5Oqt/aK7ZpZ85PPwi LqrFf6OEC87/OLB2nGxQ3TVmvqbDMrE= -----END CERTIFICATE-----Generated at Tue May 19 07:52:47 2026 by rpki-client