$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa File: 9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa (raw, json) Hash identifier: /DW+XqAg3qYbPzw3y0ViMIcTsw97gnM1hl/lnx41Pz4= Subject key identifier: 8B:52:A0:F6:E0:25:7E:17:D1:B8:30:A9:A6:8E:91:7C:A0:43:D2:2B Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584F480D3DC105A7100801DD8D20 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 26967 IP address blocks: 52.144.124.0/24 maxlen: 24 52.144.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3d:c1:05:a7:10:08:01:dd:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=c83762bb-c71f-451e-9a10-bb7269855b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:47:0a:29:27:aa:a2:a4:7c:a7:24:69:a6: e4:18:94:0f:e2:5c:b0:69:0b:41:b5:33:17:b8:9c: 18:4c:b2:c2:a7:33:10:8e:63:d0:6e:b2:ff:4b:ca: 2e:c9:c1:02:f1:92:9a:d6:ef:5c:bf:c8:10:16:d1: 8d:fa:c3:29:44:ea:4a:c8:48:34:14:28:f3:05:1e: 0a:73:cd:9a:41:b0:8d:fc:77:56:f1:f9:fa:98:0a: 52:2f:a7:b3:46:7a:13:7d:fb:e4:d4:90:2b:7d:d7: 11:ce:8c:b1:10:0c:05:ce:53:4c:b6:3d:68:09:b2: ac:6f:cf:bb:ac:56:36:ab:61:ed:5b:41:9f:38:dd: 3e:31:52:31:82:18:1d:88:b3:a0:37:34:bb:8a:1b: f7:78:25:cd:e5:f0:95:66:6f:1f:77:01:a9:e1:4d: 5b:3d:f8:d4:95:ea:e3:c8:44:19:e1:0c:ba:f0:dc: 98:dd:18:69:7c:66:f2:eb:fe:71:57:91:9b:65:f8: fc:f3:5f:61:6a:3e:4f:dc:63:76:56:be:cb:f9:87: f6:1f:fb:4e:27:35:9c:9b:9c:65:8e:6f:5c:4b:3d: d9:46:a4:bd:0b:cd:08:6e:62:a0:1c:c8:da:a1:97: 4c:33:3e:8e:a9:c3:ea:52:7e:e1:71:7f:07:dc:f4: 06:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:52:A0:F6:E0:25:7E:17:D1:B8:30:A9:A6:8E:91:7C:A0:43:D2:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:3a:9b:87:08:ee:b0:43:34:7e:79:cb:54:cc:15:30:15:fd: 74:fc:e0:e2:f0:31:16:0a:99:e5:00:3c:74:73:78:26:02:87: be:82:f8:d3:09:58:f3:77:93:87:b1:66:73:ea:a3:19:9e:5f: d6:89:0e:fb:e7:02:3f:b0:9f:5c:10:c3:7b:ee:c8:be:3c:8f: 08:18:8c:bb:0f:bc:49:34:32:48:5b:37:da:85:8e:a9:d5:03: 70:c0:a3:4e:c5:ef:53:ca:8a:82:b8:cb:06:2c:ef:ac:7c:6d: 3d:14:0e:70:36:f0:d2:7d:6b:49:77:98:0e:ef:c3:5c:de:64: 80:f5:50:7f:1e:c5:6f:52:47:8f:e6:06:85:77:e9:f3:5b:90: 7b:cd:37:a5:b8:b0:07:90:35:e6:d0:86:28:d1:6b:e3:9f:0c: 37:22:a7:89:0e:28:64:94:df:32:e8:a2:85:01:8c:64:36:3d: a3:c1:e6:6e:9b:a0:c9:e0:4a:af:cd:44:05:36:41:de:4e:b1: 6b:02:75:89:f8:54:fc:bc:4f:b0:3b:ce:32:4d:17:ec:19:3b: 5d:17:de:b2:73:5f:03:c1:a1:42:7b:75:d6:5a:84:26:f1:85: 74:cc:25:50:7d:b6:6f:10:f5:6a:68:94:4d:6c:44:03:4f:57: a6:bd:be:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDT3BBacQCAHdjSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YzgzNzYyYmItYzcxZi00NTFlLTlhMTAtYmI3MjY5ODU1YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYJHCiknqqKkfKckaabkGJQP4lywaQtBtTMX uJwYTLLCpzMQjmPQbrL/S8ouycEC8ZKa1u9cv8gQFtGN+sMpROpKyEg0FCjzBR4K c82aQbCN/HdW8fn6mApSL6ezRnoTffvk1JArfdcRzoyxEAwFzlNMtj1oCbKsb8+7 rFY2q2HtW0GfON0+MVIxghgdiLOgNzS7ihv3eCXN5fCVZm8fdwGp4U1bPfjUlerj yEQZ4Qy68NyY3RhpfGby6/5xV5GbZfj8819haj5P3GN2Vr7L+Yf2H/tOJzWcm5xl jm9cSz3ZRqS9C80IbmKgHMjaoZdMMz6OqcPqUn7hcX8H3PQGHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItSoPbgJX4X0bgwqaaOkXygQ9IrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOWQ4ZTExZmMtN2NmZS0z MmJkLTk3MDEtOGRkMjUyOGZhOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM6m4cI7rBDNH55y1TMFTAV/XT84OLwMRYKmeUAPHRzeCYCh76C+NMJ WPN3k4exZnPqoxmeX9aJDvvnAj+wn1wQw3vuyL48jwgYjLsPvEk0MkhbN9qFjqnV A3DAo07F71PKioK4ywYs76x8bT0UDnA28NJ9a0l3mA7vw1zeZID1UH8exW9SR4/m BoV36fNbkHvNN6W4sAeQNebQhijRa+OfDDcip4kOKGSU3zLoooUBjGQ2PaPB5m6b oMngSq/NRAU2Qd5OsWsCdYn4VPy8T7A7zjJNF+wZO10X3rJzXwPBoUJ7ddZahCbx hXTMJVB9tm8Q9WpolE1sRANPV6a9vuo= -----END CERTIFICATE-----Generated at Sat Oct 10 21:25:44 2026 by rpki-client