$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa File: 9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa (raw, json) Hash identifier: SMX8ZSu7/TgXbsl5v97ireE7RBjwgyNLRAAT8aPsaUU= Subject key identifier: F8:CD:28:87:61:05:3D:CB:E3:6D:43:E5:5D:0C:5E:24:8F:9F:71:7B Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584EA5AA709E24D75C820C399400 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 26967 IP address blocks: 52.144.124.0/24 maxlen: 24 52.144.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:70:9e:24:d7:5c:82:0c:39:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=a0ac49c2-79aa-4c15-a0be-0771441e5206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:93:e2:44:e3:e2:ad:b7:90:71:fc:61:51: 20:f6:36:73:2e:cf:d0:6c:9d:1a:dc:ba:f6:21:35: df:fc:8d:53:84:7c:bd:44:52:d7:67:f3:1b:49:76: e7:ad:8b:aa:bd:86:8c:c5:71:78:25:52:ba:94:54: 9a:a6:bf:7b:0b:09:27:76:35:c5:4b:9a:37:b0:f8: 05:1b:5a:7e:cb:18:8e:ad:14:46:50:2c:a6:4c:fb: 60:d1:5f:ca:5f:76:fa:81:ca:5e:2f:29:80:be:5c: 13:46:b5:c0:20:bf:7e:a8:50:8d:d4:23:73:35:08: 88:32:5f:65:09:8d:b5:84:2a:4e:f8:3b:f3:13:f3: 91:c3:c4:29:92:ae:6b:80:23:9f:31:7d:5b:8a:11: 0f:d1:73:7c:cc:cd:08:f8:5f:d3:75:c7:8c:51:22: 46:17:d5:e0:8b:6a:69:6f:e5:92:00:05:9a:3f:c7: 11:53:8d:96:d0:7e:8e:95:ea:1c:8d:b4:d0:9f:e0: be:bd:d4:cc:8a:8b:83:f9:98:ea:5f:86:15:20:36: 9d:40:1a:51:5e:f0:a7:6d:a1:95:23:12:7c:df:1e: 39:2e:8d:39:ca:f7:97:6e:29:6b:08:e7:de:24:11: 47:7c:0c:da:f0:87:07:6c:ec:a3:8b:b5:d6:37:dc: a3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CD:28:87:61:05:3D:CB:E3:6D:43:E5:5D:0C:5E:24:8F:9F:71:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:11:d2:1b:e9:60:ce:3f:ce:17:dd:aa:42:a8:2c:4e:42:4c: 16:71:8c:d6:b3:90:fc:ba:09:be:21:91:d7:e4:dc:25:f9:c8: 69:7e:87:2f:07:e9:f6:50:31:9e:05:46:3b:29:b9:9d:52:03: e7:87:29:5d:81:96:fc:c6:86:84:59:27:0e:20:34:42:92:31: a4:2c:e2:f1:17:3b:44:7b:81:2d:14:8e:85:96:cd:e7:52:f6: 11:f5:34:98:fb:af:c5:6f:68:8f:dd:29:f5:83:e3:63:57:8b: 87:d0:75:04:47:af:16:68:e4:29:9a:6a:eb:cb:95:23:61:bd: ff:e5:0c:f5:6b:3e:a3:42:b0:77:2e:23:63:37:00:4b:24:82: 87:dd:ae:06:ff:f3:ea:26:f4:ad:b2:e8:70:ae:34:a1:0d:ce: eb:94:7d:a0:e0:af:e1:04:27:72:45:6c:b8:09:5f:80:c8:2a: 55:6e:27:2e:3d:19:05:b5:d5:98:18:bc:eb:d0:29:f8:73:1d: 91:b8:b7:21:61:60:e1:61:cc:1a:a1:dd:9c:58:78:41:9d:22: da:71:b7:ce:d9:ce:47:9a:d5:59:c7:37:f8:f8:44:1b:02:a3: 7e:e9:cd:0e:f8:a1:0c:ef:5d:b2:d8:68:c8:72:f8:0a:ee:1d: f3:bc:78:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqnCeJNdcggw5lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk YTBhYzQ5YzItNzlhYS00YzE1LWEwYmUtMDc3MTQ0MWU1MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8mT4kTj4q23kHH8YVEg9jZzLs/QbJ0a3Lr2 ITXf/I1ThHy9RFLXZ/MbSXbnrYuqvYaMxXF4JVK6lFSapr97CwkndjXFS5o3sPgF G1p+yxiOrRRGUCymTPtg0V/KX3b6gcpeLymAvlwTRrXAIL9+qFCN1CNzNQiIMl9l CY21hCpO+DvzE/ORw8Qpkq5rgCOfMX1bihEP0XN8zM0I+F/TdceMUSJGF9Xgi2pp b+WSAAWaP8cRU42W0H6OleocjbTQn+C+vdTMiouD+ZjqX4YVIDadQBpRXvCnbaGV IxJ83x45Lo05yveXbilrCOfeJBFHfAza8IcHbOyji7XWN9yjNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjNKIdhBT3L421D5V0MXiSPn3F7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOWQ4ZTExZmMtN2NmZS0z MmJkLTk3MDEtOGRkMjUyOGZhOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcR0hvpYM4/zhfdqkKoLE5CTBZxjNazkPy6Cb4hkdfk3CX5yGl+hy8H 6fZQMZ4FRjspuZ1SA+eHKV2BlvzGhoRZJw4gNEKSMaQs4vEXO0R7gS0UjoWWzedS 9hH1NJj7r8VvaI/dKfWD42NXi4fQdQRHrxZo5CmaauvLlSNhvf/lDPVrPqNCsHcu I2M3AEskgofdrgb/8+om9K2y6HCuNKENzuuUfaDgr+EEJ3JFbLgJX4DIKlVuJy49 GQW11ZgYvOvQKfhzHZG4tyFhYOFhzBqh3ZxYeEGdItpxt87Zzkea1VnHN/j4RBsC o37pzQ74oQzvXbLYaMhy+AruHfO8eIc= -----END CERTIFICATE-----Generated at Thu Aug 20 23:38:58 2026 by rpki-client