$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa File: c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa (raw, json) Hash identifier: SXe/ymKepW9bVyPjPlV75Ktd6J9smzvMoTLeCXI2cUg= Subject key identifier: 84:15:57:2A:62:75:B8:EB:D8:A7:F3:D5:4F:6A:C2:C1:0E:5B:61:0D Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F4328584EF2D0839F1D1EC342ADB34E80 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa Signing time: Tue 25 Aug 2026 00:14:16 +0000 ROA not before: Tue 25 Aug 2026 00:14:16 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 7018 IP address blocks: 52.128.192.0/22 maxlen: 24 52.128.204.0/22 maxlen: 24 52.128.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:d0:83:9f:1d:1e:c3:42:ad:b3:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: Aug 25 00:14:16 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=685065bb-4223-4a2e-8b93-8aace7201ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:74:fd:60:48:ad:dc:55:94:0c:7e:31:cf: f3:99:aa:12:de:5e:f4:23:6f:48:80:37:79:e1:bd: 3f:ef:08:e0:35:7e:6e:b5:e3:5a:a2:13:c0:94:9b: c8:ab:70:dd:70:94:4e:99:dd:a4:be:28:39:7f:ab: ac:28:37:b0:e9:1c:53:6d:82:8d:73:42:78:8c:03: b5:66:2f:58:fc:f0:9f:dd:91:6e:2f:dd:58:21:da: e2:a4:e0:a5:e9:17:e4:77:a0:2b:c8:9a:8d:79:5a: fa:4e:d4:2a:a4:97:de:8a:88:b5:3d:91:f5:3c:a6: 75:3b:45:61:13:60:01:d7:e4:eb:bf:44:90:2c:19: 71:9f:3d:7c:07:55:5e:1c:34:e1:ae:12:d2:e2:bd: af:bd:1f:52:84:b9:64:3e:89:a0:59:92:3e:52:b0: aa:08:4d:1c:c5:f0:9a:1e:87:32:6e:e1:28:81:dc: ad:4a:d1:3c:0f:f3:d5:0b:68:07:63:42:f4:f1:42: dd:15:fe:9e:f2:13:a3:06:9c:80:34:8f:c4:32:d7: 91:b1:35:5c:37:f2:3f:1c:5c:8a:5b:9a:83:25:5e: f2:2c:cb:7b:1a:4d:09:07:81:a4:39:40:ff:9a:61: 0d:fc:f0:c6:42:d1:fb:f9:b7:7a:fd:f4:6b:83:86: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:15:57:2A:62:75:B8:EB:D8:A7:F3:D5:4F:6A:C2:C1:0E:5B:61:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/c8d249f0-d60a-3ff8-80a8-ba9f8cfe81be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.192.0/22 52.128.204.0/22 52.128.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:a6:3b:c8:66:29:65:a8:ef:c2:28:f6:be:3c:1a:6f:22:60: 23:01:ff:e4:5c:3c:af:a0:99:b4:71:04:e9:dd:84:da:69:53: dd:23:71:71:67:07:2d:ab:2f:1c:d2:2a:28:d2:72:32:ce:cf: 51:be:17:1d:ab:7b:fc:5c:ab:6c:5c:93:39:a9:4a:94:f3:19: 50:d1:be:2d:b6:14:42:5e:77:f6:80:fd:21:1f:2b:5b:85:99: ba:07:55:20:0c:25:be:54:4a:ab:d0:fb:5f:d8:ae:ca:70:25: 0d:02:c1:ba:18:99:44:25:c8:f2:37:e9:a1:b1:c1:ee:05:bd: a8:6a:5f:cd:9f:74:59:64:2e:87:83:db:cb:dc:81:f0:7c:36: 61:d5:00:3d:60:e3:40:05:aa:02:15:d8:37:f2:68:cd:ba:d3: 0f:78:77:56:f6:53:b9:7f:3a:ad:a0:d3:51:72:93:de:44:cc: 64:90:c2:99:de:50:c8:1f:ff:95:4d:e5:da:2b:1b:b2:bf:08: 2f:9c:d3:70:aa:f9:78:3d:a1:ef:77:4e:3a:7f:e0:ad:9a:b7: e9:91:53:ed:82:16:72:66:2e:c8:29:07:1b:a2:ef:93:f6:eb: ed:9f:00:8f:6f:95:a4:d4:90:ea:15:81:c1:71:6f:07:49:40: fb:b4:a8:1b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7y0IOfHR7DQq2zToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI2MDgyNTAwMTQxNloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk Njg1MDY1YmItNDIyMy00YTJlLThiOTMtOGFhY2U3MjAxZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/J0/WBIrdxVlAx+Mc/zmaoS3l70I29IgDd5 4b0/7wjgNX5uteNaohPAlJvIq3DdcJROmd2kvig5f6usKDew6RxTbYKNc0J4jAO1 Zi9Y/PCf3ZFuL91YIdripOCl6Rfkd6AryJqNeVr6TtQqpJfeioi1PZH1PKZ1O0Vh E2AB1+Trv0SQLBlxnz18B1VeHDThrhLS4r2vvR9ShLlkPomgWZI+UrCqCE0cxfCa HocybuEogdytStE8D/PVC2gHY0L08ULdFf6e8hOjBpyANI/EMteRsTVcN/I/HFyK W5qDJV7yLMt7Gk0JB4GkOUD/mmEN/PDGQtH7+bd6/fRrg4bqzwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIQVVypidbjr2Kfz1U9qwsEOW2ENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvYzhkMjQ5ZjAtZDYwYS0z ZmY4LTgwYTgtYmE5ZjhjZmU4MWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCNIDAAwQC NIDMAwQCNIDcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKCmO8hmKWWo78Io9r48Gm8iYCMB/+RcPK+gmbRx BOndhNppU90jcXFnBy2rLxzSKijScjLOz1G+Fx2re/xcq2xckzmpSpTzGVDRvi22 FEJed/aA/SEfK1uFmboHVSAMJb5USqvQ+1/YrspwJQ0CwboYmUQlyPI36aGxwe4F vahqX82fdFlkLoeD28vcgfB8NmHVAD1g40AFqgIV2DfyaM260w94d1b2U7l/Oq2g 01Fyk95EzGSQwpneUMgf/5VN5dorG7K/CC+c03Cq+Xg9oe93Tjp/4K2at+mRU+2C FnJmLsgpBxui75P26+2fAI9vlaTUkOoVgcFxbwdJQPu0qBs= -----END CERTIFICATE-----Generated at Tue Sep 1 03:04:05 2026 by rpki-client