$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/c71d335b-ec4c-399c-ac52-dedd9a3b6fc5.roa File: c71d335b-ec4c-399c-ac52-dedd9a3b6fc5.roa (raw, json) Hash identifier: UOBQ1nXdu+i9sBx5ziAIWjFAIfFDkcQLUfwQ29hx9JI= Subject key identifier: 82:08:3C:07:6C:AB:0E:89:84:EE:FB:3B:08:DF:D7:92:DD:BB:D3:71 Certificate issuer: /CN=e951b522-4f4b-4128-b8a6-8e3f69803993 Certificate serial: 010D0C9F4328584D27AA0875EF88B101DB795C80 Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/c71d335b-ec4c-399c-ac52-dedd9a3b6fc5.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 26658 IP address blocks: 52.129.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:08:75:ef:88:b1:01:db:79:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=038bad8f-e33c-470d-a26c-6d33f80af73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:52:86:80:81:cd:cf:ef:62:fd:ea:d7:c1: 85:40:26:8c:59:f8:40:08:5c:9e:e4:7e:88:71:36: e5:38:7c:d4:24:f4:30:51:ed:e3:69:2c:c5:9a:d6: 73:56:ef:f5:91:68:23:83:3e:a9:c6:fc:c5:db:32: 90:fb:4e:2b:1d:83:42:69:65:91:77:0e:82:45:3e: b7:e3:44:d4:ba:41:66:3b:c5:d7:2d:66:f3:04:0f: a0:63:e9:89:a2:a8:90:ee:61:97:c0:17:be:1c:20: 98:39:66:22:cd:a2:1a:88:71:13:dd:8e:ad:d5:48: 3b:cb:5d:01:c4:4d:c3:f3:cc:34:ce:d5:64:c3:92: 1e:f6:96:90:61:5d:f0:72:6d:4a:66:89:42:ed:2a: 3d:ea:8c:a5:24:61:0e:a2:a8:8e:cf:5a:e2:e6:db: 24:c4:12:b6:01:c6:97:e5:ff:51:e2:f0:f3:04:8f: 58:07:90:ed:93:6d:2c:e0:41:6b:4c:bc:cf:b0:9c: a9:23:8e:c2:ab:18:7b:90:16:0c:87:e4:29:1c:27: 21:5f:f2:ff:22:92:0b:8d:5a:09:ea:1d:88:2b:a9: 80:45:e9:c6:bf:41:0e:98:e6:8c:ca:3b:2b:cc:57: 3f:4e:63:5f:3a:9e:2f:aa:dc:70:95:6c:08:1f:eb: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:08:3C:07:6C:AB:0E:89:84:EE:FB:3B:08:DF:D7:92:DD:BB:D3:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/c71d335b-ec4c-399c-ac52-dedd9a3b6fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl X509v3 Authority Key Identifier: keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer sbgp-ipAddrBlock: critical IPv4: 52.129.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:62:de:dd:56:20:a2:a3:f4:36:11:fa:ab:df:d9:18:f0:c3: 8d:79:6e:ea:d5:0f:9c:a3:9e:6e:79:89:46:79:f2:2b:41:62: de:fe:e5:cc:d2:3f:48:fd:31:ad:bd:97:69:1b:a9:a0:88:6f: 1b:54:28:d9:7b:68:54:be:1c:09:62:b4:63:7b:27:00:a2:8a: 8c:0d:7d:50:a3:33:7d:94:63:55:41:17:8a:67:58:44:62:48: 99:f2:5e:38:23:a4:73:05:b8:4c:3c:33:07:a9:88:2c:1b:fe: 50:c1:d3:60:5b:4d:9f:4f:a8:52:80:b8:34:b3:e6:43:ca:e2: 9c:3c:be:1d:cc:69:eb:1a:0d:b0:4d:d3:83:d0:c1:2d:d8:a1: 45:f5:90:85:99:2d:55:39:b4:42:a3:42:09:50:a4:20:ed:6c: e4:fd:84:1e:3c:5c:9d:f3:b5:4b:c8:b2:8a:b9:0a:13:d9:c2: 78:dd:f8:c0:f2:c4:65:7c:ab:6d:f2:86:9f:ee:85:32:90:8a: b5:a3:b6:4e:87:73:06:23:47:a9:34:ee:bf:71:fc:8a:6d:8c: fd:90:4c:a8:79:ff:0f:7b:2f:12:0b:9b:17:14:57:5a:c1:80: 87:97:2e:10:c2:eb:c5:0d:74:b5:38:da:82:2e:2b:5d:23:e5: c3:aa:d7:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqgh174ixAdt5XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk1MWI1MjItNGY0Yi00MTI4LWI4YTYtOGUzZjY5ODAz OTkzMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDM4YmFkOGYtZTMzYy00NzBkLWEyNmMtNmQzM2Y4MGFmNzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQZShoCBzc/vYv3q18GFQCaMWfhACFye5H6I cTblOHzUJPQwUe3jaSzFmtZzVu/1kWgjgz6pxvzF2zKQ+04rHYNCaWWRdw6CRT63 40TUukFmO8XXLWbzBA+gY+mJoqiQ7mGXwBe+HCCYOWYizaIaiHET3Y6t1Ug7y10B xE3D88w0ztVkw5Ie9paQYV3wcm1KZolC7So96oylJGEOoqiOz1ri5tskxBK2AcaX 5f9R4vDzBI9YB5Dtk20s4EFrTLzPsJypI47Cqxh7kBYMh+QpHCchX/L/IpILjVoJ 6h2IK6mARenGv0EOmOaMyjsrzFc/TmNfOp4vqtxwlWwIH+sfowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIIPAdsqw6JhO77Owjf15Ldu9NxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lOTUx YjUyMi00ZjRiLTQxMjgtYjhhNi04ZTNmNjk4MDM5OTMvYzcxZDMzNWItZWM0Yy0z OTljLWFjNTItZGVkZDlhM2I2ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTk1MWI1MjItNGY0Yi00MTI4LWI4 YTYtOGUzZjY5ODAzOTkzL2U5NTFiNTIyLTRmNGItNDEyOC1iOGE2LThlM2Y2OTgw Mzk5My5jcmwwHwYDVR0jBBgwFoAUdmvp4jDX7D6teGqPZCeVmd0Wg2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lOTUxYjUyMi00ZjRiLTQxMjgtYjhhNi04ZTNm Njk4MDM5OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVi3t1WIKKj9DYR+qvf2Rjww415burVD5yjnm55iUZ58itBYt7+5czS P0j9Ma29l2kbqaCIbxtUKNl7aFS+HAlitGN7JwCiiowNfVCjM32UY1VBF4pnWERi SJnyXjgjpHMFuEw8MwepiCwb/lDB02BbTZ9PqFKAuDSz5kPK4pw8vh3MaesaDbBN 04PQwS3YoUX1kIWZLVU5tEKjQglQpCDtbOT9hB48XJ3ztUvIsoq5ChPZwnjd+MDy xGV8q23yhp/uhTKQirWjtk6HcwYjR6k07r9x/IptjP2QTKh5/w97LxILmxcUV1rB gIeXLhDC68UNdLU42oIuK10j5cOq1/Q= -----END CERTIFICATE-----Generated at Sun Mar 15 05:58:08 2026 by rpki-client