$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c3b81b8f-1ad3-3d72-b5a8-0a6410958a07.roa File: c3b81b8f-1ad3-3d72-b5a8-0a6410958a07.roa (raw, json) Hash identifier: WJsXB1CSHPWX+RZbo28CF9U7TG883awTBIc4CyEjff8= Subject key identifier: 3C:9D:21:7E:35:F5:E2:4E:4A:0A:B8:F5:E6:1E:CA:4A:C6:B3:54:B7 Certificate issuer: /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e Certificate serial: 010D0C9F4328584D29B779AC8F71D8DE69A65500 Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c3b81b8f-1ad3-3d72-b5a8-0a6410958a07.roa Signing time: Sat 14 Mar 2026 06:39:24 +0000 ROA not before: Sat 14 Mar 2026 06:39:24 +0000 ROA not after: Fri 12 Jun 2026 06:39:24 +0000 asID: 26077 IP address blocks: 52.144.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:29:b7:79:ac:8f:71:d8:de:69:a6:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e Validity Not Before: Mar 14 06:39:24 2026 GMT Not After : Jun 12 06:39:24 2026 GMT Subject: CN=ac1ed1e5-7e1c-499e-a5da-a6620beab71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:5f:36:36:e3:3d:41:3d:34:fd:7d:83:e3: f2:54:71:99:b2:71:b0:89:e5:59:38:f8:84:0e:cf: b0:2c:7b:b0:da:24:a3:ab:3b:26:fb:57:94:5b:7a: 2c:07:36:a9:10:dc:8f:73:e1:8b:ec:99:07:33:56: bd:81:ef:59:b8:17:82:cf:81:88:d8:11:39:98:e4: a5:73:18:43:36:01:78:24:04:27:d0:c9:96:80:58: f3:07:c0:e5:dc:4f:03:e7:6c:8a:28:b0:03:4d:d0: 02:ce:9f:91:3d:ce:a2:bd:2e:60:9a:e0:29:6a:05: 05:0e:72:43:7b:76:e0:5d:c9:57:e5:81:14:d3:df: c1:d8:06:b5:27:46:8c:a8:51:4d:7f:cb:56:91:46: 87:3c:10:f4:3e:dc:de:5e:09:ab:5e:79:fa:b3:a9: 64:0f:4d:b7:56:78:68:e6:db:dd:fb:ff:ba:ef:e9: ab:46:64:3d:cb:89:ae:81:17:93:2d:99:9c:2b:bd: 04:1f:d0:9d:a9:d6:1d:bc:73:16:7c:51:71:68:14: a3:a7:a9:12:6b:1d:40:ff:75:6d:2c:ed:e3:79:ad: f1:7f:4a:ed:dd:b7:2b:0a:b0:86:73:d4:8a:5c:6d: 95:7d:cc:5a:ca:ff:8a:63:fb:01:4c:f0:bb:d7:63: ed:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:21:7E:35:F5:E2:4E:4A:0A:B8:F5:E6:1E:CA:4A:C6:B3:54:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c3b81b8f-1ad3-3d72-b5a8-0a6410958a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl X509v3 Authority Key Identifier: keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer sbgp-ipAddrBlock: critical IPv4: 52.144.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:bc:e5:e6:83:34:00:a3:f4:d2:f1:56:fd:7f:6b:7b:75:e7: fb:0f:74:dd:75:7b:6c:96:81:af:d6:cc:eb:c4:61:3b:d7:f2: 6b:4e:b9:27:8f:2f:38:d5:a3:97:12:04:eb:1b:5a:4b:e9:f0: 85:22:5a:b3:95:c6:27:aa:a4:97:1b:f1:1d:b0:5b:53:52:38: 2d:08:e5:af:4f:93:a5:55:e2:68:f2:2a:7d:8f:58:c8:4e:17: 7b:e9:73:d8:33:2e:da:1b:81:d1:be:f1:30:41:91:af:5e:59: 04:85:27:eb:c5:f2:33:08:cb:0a:3f:3c:fd:7a:a8:fb:10:1e: 3d:82:06:e3:0b:2b:77:82:57:40:1f:a4:62:bf:0b:5a:6c:7d: 71:1d:5c:91:fb:fa:30:eb:64:9d:90:d7:59:c1:9d:cc:69:8f: 4c:bb:e5:c1:e1:c3:42:c0:5e:0e:5f:e0:ab:4c:6d:91:53:e7: a1:32:0e:f8:aa:f5:0c:a3:92:11:b9:c0:53:48:48:2d:20:77: 3a:ad:74:03:85:f9:23:5c:bd:f7:3d:80:d3:8f:f9:ff:78:0f: f1:96:a6:de:ef:34:13:52:ee:5f:9f:47:ae:4e:c5:6c:e2:db: aa:11:e0:6e:49:c7:fc:8a:7a:a7:7e:d8:01:9b:0f:9c:64:e6: 4d:37:e5:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0pt3msj3HY3mmmVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4ZDQ2ZmQtM2IxYy00NmE3LWIzNjktMzViNzUzZTZj NjBlMB4XDTI2MDMxNDA2MzkyNFoXDTI2MDYxMjA2MzkyNFowLzEtMCsGA1UEAxMk YWMxZWQxZTUtN2UxYy00OTllLWE1ZGEtYTY2MjBiZWFiNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZtfNjbjPUE9NP19g+PyVHGZsnGwieVZOPiE Ds+wLHuw2iSjqzsm+1eUW3osBzapENyPc+GL7JkHM1a9ge9ZuBeCz4GI2BE5mOSl cxhDNgF4JAQn0MmWgFjzB8Dl3E8D52yKKLADTdACzp+RPc6ivS5gmuApagUFDnJD e3bgXclX5YEU09/B2Aa1J0aMqFFNf8tWkUaHPBD0PtzeXgmrXnn6s6lkD023Vnho 5tvd+/+67+mrRmQ9y4mugReTLZmcK70EH9CdqdYdvHMWfFFxaBSjp6kSax1A/3Vt LO3jea3xf0rt3bcrCrCGc9SKXG2Vfcxayv+KY/sBTPC712Pt4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDydIX419eJOSgq49eYeykrGs1S3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jOThk NDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3NTNlNmM2MGUvYzNiODFiOGYtMWFkMy0z ZDcyLWI1YTgtMGE2NDEwOTU4YTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzk4ZDQ2ZmQtM2IxYy00NmE3LWIz NjktMzViNzUzZTZjNjBlL2M5OGQ0NmZkLTNiMWMtNDZhNy1iMzY5LTM1Yjc1M2U2 YzYwZS5jcmwwHwYDVR0jBBgwFoAUGjV+Z895QlcO2thDy7EV6h3WAw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jOThkNDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3 NTNlNmM2MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQENJBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu85eaDNACj9NLxVv1/a3t15/sPdN11e2yWga/WzOvEYTvX8mtOuSeP LzjVo5cSBOsbWkvp8IUiWrOVxieqpJcb8R2wW1NSOC0I5a9Pk6VV4mjyKn2PWMhO F3vpc9gzLtobgdG+8TBBka9eWQSFJ+vF8jMIywo/PP16qPsQHj2CBuMLK3eCV0Af pGK/C1psfXEdXJH7+jDrZJ2Q11nBncxpj0y75cHhw0LAXg5f4KtMbZFT56EyDviq 9QyjkhG5wFNISC0gdzqtdAOF+SNcvfc9gNOP+f94D/GWpt7vNBNS7l+fR65OxWzi 26oR4G5Jx/yKeqd+2AGbD5xk5k035dc= -----END CERTIFICATE-----Generated at Sat Mar 14 17:59:04 2026 by rpki-client