$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa File: db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa (raw, json) Hash identifier: qn5N0sYPhflgqN3j5v0IvXtOhK22QYLpNiMZSUoYitc= Subject key identifier: 67:5B:7F:51:AC:9D:97:33:28:1D:11:A9:44:B0:B9:A4:61:87:A8:13 Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F4328584FA5932E9DEF4A3721C266FF40 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 399150 IP address blocks: 52.128.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:2e:9d:ef:4a:37:21:c2:66:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=24c4205a-9e19-4cd9-9fdc-a7e1f479ede5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c7:4d:b1:b8:22:8d:50:11:bc:e2:60:d3:c8: cb:8c:68:4b:e3:2f:c3:ee:91:81:5c:dd:e6:73:fa: 04:0a:3a:79:ee:16:e2:e5:79:98:f2:f8:4d:56:3c: 13:41:4e:94:8e:aa:cc:f6:6a:7c:6c:79:a0:f8:3b: 73:dc:a5:df:75:b3:2e:91:98:ae:5b:96:d1:63:00: 0d:e5:ea:ae:9f:55:18:9d:e5:89:e2:e2:ad:d6:b6: 3f:bb:f0:d9:3c:c3:77:63:70:24:88:d4:0b:ac:4a: 4e:77:1c:2d:26:27:b4:c7:a5:be:5e:e9:c0:8d:ad: 92:bc:d9:d0:3b:a7:56:7c:f0:ab:2b:17:80:42:e6: 15:c8:65:5a:71:00:b0:63:07:58:e0:7a:51:56:34: f4:67:06:09:86:a3:c6:36:fd:35:b9:1b:0f:67:73: 8c:8e:b0:6d:32:0c:0b:0d:d9:29:fa:37:a4:63:a5: 24:87:e6:76:c3:72:af:20:83:36:eb:70:83:30:42: 39:03:0b:e4:36:e6:e6:17:8e:05:ec:46:dd:47:14: 53:41:20:95:66:cd:98:58:bf:45:e2:4f:97:e2:00: 6b:6f:f6:a0:f1:b8:ca:55:7a:bb:e2:3a:66:9c:c5: 58:80:d3:1e:63:ae:48:b0:78:9d:84:86:45:14:2f: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5B:7F:51:AC:9D:97:33:28:1D:11:A9:44:B0:B9:A4:61:87:A8:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:1f:34:fa:70:93:2c:d6:b5:df:35:7f:92:67:e9:50:98:4b: d3:ee:d7:ec:f7:e6:7e:29:00:80:9b:51:1f:cd:86:b4:35:f7: 7c:f2:7a:40:db:34:c3:a5:4e:bb:7e:a9:fd:19:e3:8d:75:3c: e9:b2:f3:81:a4:74:25:1c:f3:86:df:a7:15:c1:58:80:18:34: 8f:89:e9:1a:65:28:43:49:30:7d:a4:d3:0d:7d:cc:52:42:c2: ec:ef:2b:06:5d:68:db:15:18:05:d0:91:93:2d:80:f6:5e:66: 04:f3:bf:2c:ba:39:a0:80:8e:03:e9:be:90:0f:0e:25:5b:b5: 06:5a:18:5e:93:74:12:4c:42:08:02:64:2d:51:04:de:68:33: 2f:04:f3:53:4f:59:48:90:6b:8a:57:15:62:d4:ff:bb:c3:37: 6b:aa:20:b1:b0:a0:92:0e:84:c1:86:ac:92:91:40:0f:ad:0e: e3:31:a3:f3:ed:57:b5:9c:b9:e8:e2:55:d7:12:49:4f:7c:ee: 9f:2c:56:94:6b:f9:9a:26:92:ff:a6:31:03:91:25:e9:e2:9a: 06:1c:28:a1:bd:3c:a5:38:7b:e5:30:40:5e:ea:34:f8:22:4f: b0:b1:5f:02:96:b2:21:36:5a:fe:da:48:42:b3:55:4d:97:2a: 11:00:46:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lky6d70o3IcJm/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk MjRjNDIwNWEtOWUxOS00Y2Q5LTlmZGMtYTdlMWY0NzllZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8dNsbgijVARvOJg08jLjGhL4y/D7pGBXN3m c/oECjp57hbi5XmY8vhNVjwTQU6UjqrM9mp8bHmg+Dtz3KXfdbMukZiuW5bRYwAN 5equn1UYneWJ4uKt1rY/u/DZPMN3Y3AkiNQLrEpOdxwtJie0x6W+XunAja2SvNnQ O6dWfPCrKxeAQuYVyGVacQCwYwdY4HpRVjT0ZwYJhqPGNv01uRsPZ3OMjrBtMgwL Ddkp+jekY6Ukh+Z2w3KvIIM263CDMEI5AwvkNubmF44F7EbdRxRTQSCVZs2YWL9F 4k+X4gBrb/ag8bjKVXq74jpmnMVYgNMeY65IsHidhIZFFC+A+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdbf1GsnZczKB0RqUSwuaRhh6gTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvZGI3ZDZhZWItYmMyZC0z OTA4LTkwZmItZTM1ODkxOTZkYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8fNPpwkyzWtd81f5Jn6VCYS9Pu1+z35n4pAICbUR/NhrQ193zyekDb NMOlTrt+qf0Z4411POmy84GkdCUc84bfpxXBWIAYNI+J6RplKENJMH2k0w19zFJC wuzvKwZdaNsVGAXQkZMtgPZeZgTzvyy6OaCAjgPpvpAPDiVbtQZaGF6TdBJMQggC ZC1RBN5oMy8E81NPWUiQa4pXFWLU/7vDN2uqILGwoJIOhMGGrJKRQA+tDuMxo/Pt V7WcuejiVdcSSU987p8sVpRr+Zomkv+mMQORJenimgYcKKG9PKU4e+UwQF7qNPgi T7CxXwKWsiE2Wv7aSEKzVU2XKhEARok= -----END CERTIFICATE-----Generated at Wed Oct 28 16:34:16 2026 by rpki-client