$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa File: 949b9c71-af76-3dca-bf92-77173f62a9a6.roa (raw, json) Hash identifier: wREQiWb75O6VGc5y+1oNNLiROGt+hvSp1MtsDiLrIaU= Subject key identifier: 63:EE:67:08:7F:7F:7F:01:D8:C9:3F:39:FE:AB:26:38:0A:35:82:1B Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584F20F7ADC0D3B91BB567E27480 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 26967 IP address blocks: 52.144.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ad:c0:d3:b9:1b:b5:67:e2:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=d256bc55-6b78-4208-94b5-c59c7387e276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:e8:8c:6a:9e:e4:c4:e2:3d:b6:3b:19:5b: 0a:d7:33:3c:e1:1d:34:47:81:75:a4:84:63:4e:12: 7c:44:f1:05:f1:46:1a:bb:09:9a:3e:b5:a8:e8:5c: 4f:1f:14:66:7f:03:a5:fc:60:0b:eb:b5:fb:59:7d: 2e:31:55:83:3f:84:e8:5b:d8:6a:5a:f5:48:71:21: 2d:ca:66:99:d1:c1:34:6a:5e:97:3a:3b:fa:1c:f6: d4:f1:94:ea:2d:92:bc:b2:43:80:f2:21:2b:b9:c0: c5:07:c9:1c:45:c2:e6:56:58:31:26:7d:ce:cb:92: 07:75:26:41:e7:9a:cf:7b:43:d6:a2:99:c9:8f:54: af:2a:07:79:2c:9e:05:f0:a9:a1:ed:c0:8e:9d:e6: 3f:05:7e:7b:5d:59:94:eb:5a:aa:14:ef:4a:1b:10: ef:30:c9:40:b1:5b:40:4b:9f:b2:db:c8:13:be:4b: 02:18:32:44:20:60:d9:37:b7:f7:85:1f:b0:65:d7: 41:ff:bf:d1:67:ec:a6:2f:05:08:bb:4f:76:8f:b6: 3d:74:a4:70:65:2f:de:88:3d:1a:12:f3:ca:25:ca: c3:3b:54:eb:98:7a:cd:54:66:7b:b7:2a:08:df:5b: 1a:ab:a5:3a:84:5e:39:e6:55:53:f1:76:3a:dd:7d: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EE:67:08:7F:7F:7F:01:D8:C9:3F:39:FE:AB:26:38:0A:35:82:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:90:55:58:84:33:93:33:58:32:29:bb:60:e3:72:f0:90:32: 4a:a9:6a:17:8b:38:30:41:dc:41:14:50:ec:3b:53:bc:35:0f: e8:72:fd:57:c9:4e:df:b1:b3:35:88:37:5b:25:97:78:0a:2a: a9:87:cd:49:7a:6a:43:30:df:6e:c4:c4:26:14:45:88:04:4b: f6:6f:9f:82:aa:30:34:89:9a:56:21:b7:e4:7d:28:e9:10:34: c0:90:29:d5:97:11:82:67:d2:14:23:bb:34:32:fb:8e:41:56: f4:f2:7e:01:97:d4:ff:f1:54:05:13:42:6d:96:31:b3:a9:89: 22:68:b8:2d:3b:1c:9e:42:b8:1e:8d:56:5c:0a:35:67:7a:00: f9:5d:20:07:60:91:09:3a:22:6b:6a:d6:74:95:7f:22:b1:e2: fd:12:35:7f:0e:78:35:32:26:bc:f3:09:9f:c6:01:be:f9:c3: 35:8c:a4:33:24:0d:c2:66:2d:a4:24:63:73:8c:39:e4:0d:94: 3b:ff:8c:c5:b8:ea:ad:15:e9:4a:b2:9f:b3:ea:26:97:52:f5: 3e:44:a2:ac:4a:21:d1:ba:89:56:64:2d:de:7e:e9:87:76:45: 57:d5:44:f4:b8:6f:06:3d:a5:df:4b:68:9c:9f:2b:32:9d:6e: ca:6f:f3:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g963A07kbtWfidIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZDI1NmJjNTUtNmI3OC00MjA4LTk0YjUtYzU5YzczODdlMjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPPojGqe5MTiPbY7GVsK1zM84R00R4F1pIRj ThJ8RPEF8UYauwmaPrWo6FxPHxRmfwOl/GAL67X7WX0uMVWDP4ToW9hqWvVIcSEt ymaZ0cE0al6XOjv6HPbU8ZTqLZK8skOA8iErucDFB8kcRcLmVlgxJn3Oy5IHdSZB 55rPe0PWopnJj1SvKgd5LJ4F8Kmh7cCOneY/BX57XVmU61qqFO9KGxDvMMlAsVtA S5+y28gTvksCGDJEIGDZN7f3hR+wZddB/7/RZ+ymLwUIu092j7Y9dKRwZS/eiD0a EvPKJcrDO1TrmHrNVGZ7tyoI31saq6U6hF455lVT8XY63X3yJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPuZwh/f38B2Mk/Of6rJjgKNYIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOTQ5YjljNzEtYWY3Ni0z ZGNhLWJmOTItNzcxNzNmNjJhOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2QVViEM5MzWDIpu2DjcvCQMkqpaheLODBB3EEUUOw7U7w1D+hy/VfJ Tt+xszWIN1sll3gKKqmHzUl6akMw327ExCYURYgES/Zvn4KqMDSJmlYht+R9KOkQ NMCQKdWXEYJn0hQjuzQy+45BVvTyfgGX1P/xVAUTQm2WMbOpiSJouC07HJ5CuB6N VlwKNWd6APldIAdgkQk6Imtq1nSVfyKx4v0SNX8OeDUyJrzzCZ/GAb75wzWMpDMk DcJmLaQkY3OMOeQNlDv/jMW46q0V6Uqyn7PqJpdS9T5EoqxKIdG6iVZkLd5+6Yd2 RVfVRPS4bwY9pd9LaJyfKzKdbspv89s= -----END CERTIFICATE-----Generated at Thu Oct 8 16:35:24 2026 by rpki-client