$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa File: 094143c8-ff7f-3f51-8461-0fce2db8fe81.roa (raw, json) Hash identifier: ZKjoqpN5pGGCL92ccsvHtjN9kTLnpXpRQctBQKXCj78= Subject key identifier: 09:3A:4A:ED:A5:3F:77:E5:5D:80:1D:21:9A:E0:02:D0:63:35:54:56 Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F4328584E6144A7FE355970462C395E80 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 399150 IP address blocks: 52.128.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:a7:fe:35:59:70:46:2c:39:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=8aa189d7-7793-443c-9a5e-349d8ad7cd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8b:c4:47:b6:c1:e0:1e:b5:b7:61:b1:bf:2b: e1:57:b5:72:71:10:4f:83:31:46:20:c1:a0:3d:c6: 56:0e:92:fb:88:7b:ec:58:cd:f0:d2:5f:c0:a3:f0: 6d:2c:14:9e:b4:7f:30:a2:c9:6e:fe:fc:23:b3:cb: 48:7b:b6:32:d2:b0:07:9f:b5:f4:12:46:2f:c2:09: f6:ba:85:a0:ed:22:89:2f:65:6f:6f:b3:1d:02:b4: 32:88:cf:76:8c:a9:81:74:e7:6a:b9:59:02:91:37: 85:9a:b0:e6:e9:9c:6c:a0:c5:a9:c3:b1:32:66:03: 2d:42:38:45:dd:f3:4a:8c:c6:fb:dc:db:61:9b:42: 76:d5:a3:cf:96:52:f1:0c:a9:78:f7:a5:f3:12:79: c3:c9:38:ea:32:fa:74:1f:72:3e:05:78:e5:27:cc: 85:ba:ce:20:a2:0e:d2:7a:ba:e2:b0:ec:5e:3a:3e: 27:09:26:5f:66:e4:48:5d:f8:16:34:fb:25:02:25: 45:68:26:dc:19:c0:86:fa:64:d0:ee:3f:1f:9f:e8: 32:fe:2c:ef:46:a2:11:d5:8d:cb:8a:64:8b:2e:4f: 3d:5c:34:29:e4:67:69:a9:e5:af:3c:45:20:f6:e1: 70:53:d3:09:43:ab:eb:61:a9:1d:96:fd:5c:b6:cf: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3A:4A:ED:A5:3F:77:E5:5D:80:1D:21:9A:E0:02:D0:63:35:54:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/094143c8-ff7f-3f51-8461-0fce2db8fe81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ea:c6:4d:fe:51:af:4c:27:7c:82:80:bd:f4:7c:1b:d4:2c: 07:e4:bc:eb:1b:49:40:d2:23:79:08:b8:7b:7e:88:d0:3a:64: f5:df:3b:b3:87:7e:29:8d:f9:fa:7c:58:84:c3:b4:94:5c:be: f1:bc:50:a7:80:75:09:19:d3:e0:c5:55:4c:aa:3c:dd:29:4e: 19:81:62:f8:99:0a:66:8c:7b:94:02:44:99:5b:27:39:d4:06: c9:54:5c:ca:7f:37:64:7d:d5:1b:83:cd:bd:26:64:01:6d:d0: d4:84:72:fc:36:72:5f:13:4b:fd:89:ea:1a:2d:42:3a:96:e3: a0:02:6d:0d:a7:31:27:48:91:91:b7:2b:a0:9b:e6:8c:6c:8f: 49:86:07:f5:1e:a7:cc:0b:be:c8:b0:6d:ee:41:0c:6a:03:31: 8e:e9:ef:4c:b4:6f:64:7f:e3:fc:50:ce:da:81:80:ab:f1:8c: 16:54:ac:b2:3e:e0:c5:1b:2f:7a:51:5c:7b:d5:e3:cf:de:23: fc:b0:04:f8:76:70:25:2b:f0:89:f5:a2:b3:f1:0b:dd:47:03: 28:22:7a:27:56:ad:90:15:5b:63:38:c9:84:78:5b:00:64:5e: 28:9e:f9:67:77:1b:73:01:41:3e:b9:4b:fa:e4:4a:a9:c6:1f: 8c:63:8e:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRKf+NVlwRiw5XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk OGFhMTg5ZDctNzc5My00NDNjLTlhNWUtMzQ5ZDhhZDdjZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4vER7bB4B61t2GxvyvhV7VycRBPgzFGIMGg PcZWDpL7iHvsWM3w0l/Ao/BtLBSetH8woslu/vwjs8tIe7Yy0rAHn7X0EkYvwgn2 uoWg7SKJL2Vvb7MdArQyiM92jKmBdOdquVkCkTeFmrDm6ZxsoMWpw7EyZgMtQjhF 3fNKjMb73Nthm0J21aPPllLxDKl496XzEnnDyTjqMvp0H3I+BXjlJ8yFus4gog7S errisOxeOj4nCSZfZuRIXfgWNPslAiVFaCbcGcCG+mTQ7j8fn+gy/izvRqIR1Y3L imSLLk89XDQp5GdpqeWvPEUg9uFwU9MJQ6vrYakdlv1cts9z8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk6Su2lP3flXYAdIZrgAtBjNVRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvMDk0MTQzYzgtZmY3Zi0z ZjUxLTg0NjEtMGZjZTJkYjhmZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLqxk3+Ua9MJ3yCgL30fBvULAfkvOsbSUDSI3kIuHt+iNA6ZPXfO7OH fimN+fp8WITDtJRcvvG8UKeAdQkZ0+DFVUyqPN0pThmBYviZCmaMe5QCRJlbJznU BslUXMp/N2R91RuDzb0mZAFt0NSEcvw2cl8TS/2J6hotQjqW46ACbQ2nMSdIkZG3 K6Cb5oxsj0mGB/Uep8wLvsiwbe5BDGoDMY7p70y0b2R/4/xQztqBgKvxjBZUrLI+ 4MUbL3pRXHvV48/eI/ywBPh2cCUr8In1orPxC91HAygieidWrZAVW2M4yYR4WwBk Xiie+Wd3G3MBQT65S/rkSqnGH4xjjj0= -----END CERTIFICATE-----Generated at Tue Jul 21 22:26:32 2026 by rpki-client