$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa File: e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa (raw, json) Hash identifier: ols4OUcNOh8s6SVpohU+8OSn9p+JOaEhzimDNeDXI+M= Subject key identifier: 5E:91:AA:F4:C3:E5:98:85:7A:50:DF:66:43:69:61:62:47:E1:AC:D7 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584DD1F5BDBFF9A230DAB097D600 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa Signing time: Wed 13 May 2026 13:00:31 +0000 ROA not before: Wed 13 May 2026 13:00:31 +0000 ROA not after: Tue 11 Aug 2026 13:00:31 +0000 asID: 400745 IP address blocks: 52.129.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 20 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:f5:bd:bf:f9:a2:30:da:b0:97:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: May 13 13:00:31 2026 GMT Not After : Aug 11 13:00:31 2026 GMT Subject: CN=655f6c1e-2525-46c0-89f2-68e7c803d97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:48:b2:cf:c2:ab:62:03:c4:49:e7:10:79: fa:f3:23:b7:b2:8b:d2:73:92:b9:fa:4f:df:16:43: 26:5e:a9:ad:1c:4f:45:e8:c5:69:dc:1f:ac:19:77: 14:9e:e1:1c:55:f9:59:fb:45:77:6b:c9:8a:99:fa: 46:62:3d:fd:cc:2b:bb:35:c7:f2:dc:af:e7:7b:0e: b7:40:53:28:66:e1:6f:c1:89:c9:78:88:24:d5:7f: 96:4a:a8:a7:7c:b5:50:3a:3c:17:f7:f2:87:3e:88: f0:06:ed:a7:04:32:17:a4:fc:eb:c2:ee:91:d8:98: c8:e8:ac:88:cc:55:ab:fe:87:6c:b4:20:43:02:90: b3:47:3c:a9:67:9d:f5:0a:c1:ee:8f:65:ac:75:d4: 18:89:a9:54:f3:02:96:b7:ac:b9:ea:c8:c1:fc:39: 26:66:76:46:a3:73:a3:4b:d0:5d:ac:9e:5a:6e:95: e5:a9:2a:15:e1:ba:79:92:1b:44:d7:1f:4c:e3:9e: db:74:8f:fb:8c:c6:e9:93:bb:be:4f:4b:51:7c:9f: 91:ef:59:74:b6:de:f3:78:e4:5a:8c:95:f5:08:61: ea:de:23:a6:8a:9a:7e:b7:6e:55:0f:40:28:9f:1c: e3:71:f2:91:ba:29:dc:61:f9:aa:3e:50:50:3a:7a: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:91:AA:F4:C3:E5:98:85:7A:50:DF:66:43:69:61:62:47:E1:AC:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:11:b7:ea:ce:74:e4:ee:68:3d:58:e3:d2:63:ac:a9:25:06: 84:c4:86:70:f4:44:a4:76:7d:f9:9f:21:70:3a:e1:ae:b1:b1: f8:3e:36:0e:41:c9:2e:ef:a7:5d:81:22:12:07:9d:f2:1b:4f: c3:c1:90:86:2d:67:80:b8:9b:4c:68:a9:09:3a:7a:db:98:45: 82:ec:06:d9:6d:a3:ff:36:68:2d:20:80:80:99:37:2c:ec:65: 76:ff:11:a4:a4:44:83:c8:44:41:5f:92:00:a2:b7:3d:f4:99: c8:80:57:96:ed:c0:47:4f:1a:43:56:a1:de:81:03:c1:e7:5a: b0:2e:ea:be:1d:81:14:43:7c:65:b4:d4:7e:cd:75:9e:f2:f7: 99:71:2b:35:8d:61:37:e8:0a:62:d7:92:be:d9:32:2d:e5:36: 5b:fd:ce:a9:da:10:ff:6f:3f:cb:69:8b:75:19:b2:ec:92:24: b1:de:2c:c8:4e:54:3d:ef:60:2e:fb:52:7d:58:bc:ef:c8:26: d8:90:eb:4f:32:b7:d9:0c:1f:2a:63:c1:cc:1b:35:b9:43:42: d9:eb:13:a9:8e:03:7b:5c:53:8b:8a:c0:0b:42:d9:06:33:9c: 75:fa:48:b8:69:bb:1b:ad:70:e8:7a:cf:05:c4:a4:36:56:6d: 4f:6f:7c:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3R9b2/+aIw2rCX1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI2MDUxMzEzMDAzMVoXDTI2MDgxMTEzMDAzMVowLzEtMCsGA1UEAxMk NjU1ZjZjMWUtMjUyNS00NmMwLTg5ZjItNjhlN2M4MDNkOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwNIss/Cq2IDxEnnEHn68yO3sovSc5K5+k/f FkMmXqmtHE9F6MVp3B+sGXcUnuEcVflZ+0V3a8mKmfpGYj39zCu7Ncfy3K/new63 QFMoZuFvwYnJeIgk1X+WSqinfLVQOjwX9/KHPojwBu2nBDIXpPzrwu6R2JjI6KyI zFWr/odstCBDApCzRzypZ531CsHuj2WsddQYialU8wKWt6y56sjB/DkmZnZGo3Oj S9BdrJ5abpXlqSoV4bp5khtE1x9M457bdI/7jMbpk7u+T0tRfJ+R71l0tt7zeORa jJX1CGHq3iOmipp+t25VD0AonxzjcfKRuincYfmqPlBQOnpPWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6RqvTD5ZiFelDfZkNpYWJH4azXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZTNlMjg4MTktOTQ4Ny0z ZmVhLWI1ZWEtYjRmM2RiYjRmOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIERt+rOdOTuaD1Y49JjrKklBoTEhnD0RKR2ffmfIXA64a6xsfg+Ng5B yS7vp12BIhIHnfIbT8PBkIYtZ4C4m0xoqQk6etuYRYLsBtlto/82aC0ggICZNyzs ZXb/EaSkRIPIREFfkgCitz30mciAV5btwEdPGkNWod6BA8HnWrAu6r4dgRRDfGW0 1H7NdZ7y95lxKzWNYTfoCmLXkr7ZMi3lNlv9zqnaEP9vP8tpi3UZsuySJLHeLMhO VD3vYC77Un1YvO/IJtiQ608yt9kMHypjwcwbNblDQtnrE6mOA3tcU4uKwAtC2QYz nHX6SLhpuxutcOh6zwXEpDZWbU9vfKo= -----END CERTIFICATE-----Generated at Tue May 19 07:52:44 2026 by rpki-client