$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/67aa11e0-08b1-3729-8732-afed74543a62.roa File: 67aa11e0-08b1-3729-8732-afed74543a62.roa (raw, json) Hash identifier: nQSMNZpN3rAO6Bc04HdXj+uxEaxxA9R2H1NMNw28/rc= Subject key identifier: 90:9A:91:AD:40:A9:1C:D0:1F:84:43:C2:AD:6B:94:1C:EF:04:18:39 Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584CAE571288C931EDD7C8E39DC0 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/67aa11e0-08b1-3729-8732-afed74543a62.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 27217 IP address blocks: 52.119.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:12:88:c9:31:ed:d7:c8:e3:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=bc85715a-de5e-4954-b755-915a5814da59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:16:6f:d5:65:98:b3:c9:02:4f:3f:f7:34: 03:2c:64:5f:f7:a7:28:7a:14:4b:cd:73:5e:0a:50: 9a:c5:00:ab:a4:91:9c:99:87:2e:bd:26:cc:27:ba: 62:fb:75:97:f6:ee:d7:12:18:fc:4f:b6:2c:98:84: 8d:ee:62:c4:d0:ec:45:cf:29:5e:bc:f3:d1:52:31: 34:e2:a9:26:59:30:da:a0:f8:99:2d:24:03:ce:be: 08:73:f9:9f:b9:e7:0b:f2:2c:34:f2:be:06:ad:4e: e8:60:c6:2e:65:e3:ed:42:f9:9f:a7:a2:20:55:08: 5b:9d:0a:46:38:66:91:5e:16:b7:58:bf:13:16:a8: 6e:74:8d:fb:3a:6e:91:63:ec:7c:59:ac:64:5f:94: 6b:b3:6c:14:40:fa:d2:1d:82:85:f8:b5:46:c7:7c: 42:74:ed:4b:ee:46:ae:b6:9e:10:fe:3f:85:14:05: 01:79:1a:b7:35:81:8d:9e:89:91:c2:79:70:a6:54: ca:70:c5:67:6e:18:82:ad:92:22:88:e2:e7:c2:fa: c9:90:30:bf:2a:8b:4e:c0:aa:ba:9f:1e:39:28:f7: 46:82:e5:79:f9:93:13:18:b6:e6:fb:53:da:87:c2: 3d:ea:73:f0:20:c0:77:75:bc:44:c2:9a:7c:88:e6: 7d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9A:91:AD:40:A9:1C:D0:1F:84:43:C2:AD:6B:94:1C:EF:04:18:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/67aa11e0-08b1-3729-8732-afed74543a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv4: 52.119.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1b:51:0a:3e:28:14:dc:b4:77:a7:0a:91:0b:f0:49:32:84: b0:a5:cf:78:af:f7:6d:16:51:44:ef:be:62:a6:83:07:85:89: c8:dc:8f:db:2e:3d:41:52:12:2a:f5:e6:f4:2f:3e:98:57:8f: 72:48:de:cc:a6:b4:da:66:3f:66:a1:b9:07:b0:49:41:83:8a: 51:61:87:ac:ba:bb:5b:bd:3f:77:66:6b:e0:ef:7f:0a:5b:76: 13:97:13:9d:7e:7f:bf:50:5b:ef:f3:70:57:5b:0f:6f:76:51: cb:9b:e7:76:28:d3:a4:e0:b7:7f:d8:ba:71:b7:45:53:d7:2a: 84:28:ef:80:2c:76:2c:02:ea:03:17:7c:35:5e:c4:4c:e5:36: 97:60:86:8f:69:7e:65:b5:77:7e:2b:3c:e6:fc:78:2b:da:3e: ac:d4:8a:ee:75:b3:5d:c2:9d:c4:2b:a7:9c:b2:29:7c:18:f2: 68:26:23:0b:89:f7:35:bd:40:e4:bf:74:2a:46:f0:2a:d6:6e: e0:02:c9:ab:43:26:a8:d1:be:14:eb:1a:2c:30:dd:99:53:2e: fe:39:78:90:21:1a:ec:d9:03:ee:c7:ca:26:77:b8:d7:41:0f: 81:b0:ae:d4:b8:69:af:54:fb:1b:9f:37:8c:1d:bf:ee:aa:7d: c5:d7:68:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxKIyTHt18jjncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmM4NTcxNWEtZGU1ZS00OTU0LWI3NTUtOTE1YTU4MTRkYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIoWb9VlmLPJAk8/9zQDLGRf96coehRLzXNe ClCaxQCrpJGcmYcuvSbMJ7pi+3WX9u7XEhj8T7YsmISN7mLE0OxFzylevPPRUjE0 4qkmWTDaoPiZLSQDzr4Ic/mfuecL8iw08r4GrU7oYMYuZePtQvmfp6IgVQhbnQpG OGaRXha3WL8TFqhudI37Om6RY+x8WaxkX5Rrs2wUQPrSHYKF+LVGx3xCdO1L7kau tp4Q/j+FFAUBeRq3NYGNnomRwnlwplTKcMVnbhiCrZIiiOLnwvrJkDC/KotOwKq6 nx45KPdGguV5+ZMTGLbm+1Pah8I96nPwIMB3dbxEwpp8iOZ9GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCaka1AqRzQH4RDwq1rlBzvBBg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvNjdhYTExZTAtMDhiMS0z NzI5LTg3MzItYWZlZDc0NTQzYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUbUQo+KBTctHenCpEL8EkyhLClz3iv920WUUTvvmKmgweFicjcj9su PUFSEir15vQvPphXj3JI3symtNpmP2ahuQewSUGDilFhh6y6u1u9P3dma+Dvfwpb dhOXE51+f79QW+/zcFdbD292Ucub53Yo06Tgt3/YunG3RVPXKoQo74AsdiwC6gMX fDVexEzlNpdgho9pfmW1d34rPOb8eCvaPqzUiu51s13CncQrp5yyKXwY8mgmIwuJ 9zW9QOS/dCpG8CrWbuACyatDJqjRvhTrGiww3ZlTLv45eJAhGuzZA+7HyiZ3uNdB D4GwrtS4aa9U+xufN4wdv+6qfcXXaJA= -----END CERTIFICATE-----Generated at Thu Feb 26 09:15:12 2026 by rpki-client