$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/5e5cb578-e028-3779-bde1-45133e9cc049.roa File: 5e5cb578-e028-3779-bde1-45133e9cc049.roa (raw, json) Hash identifier: pPLFeROuIIZFbmUbcKKIvF2C0zbS9tX9n+rogGbwJo4= Subject key identifier: A2:45:52:23:97:22:0F:46:C8:F5:40:CC:71:1F:7D:21:5B:08:90:E8 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584EE0C1ED9A6AB6BC2EB5824AC0 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/5e5cb578-e028-3779-bde1-45133e9cc049.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 36445 IP address blocks: 52.124.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c1:ed:9a:6a:b6:bc:2e:b5:82:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=3a8c2ae7-53bb-4a67-806d-e58f6fafa406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:00:26:57:ba:17:cc:82:b7:ca:40:32:7f: 6d:32:d2:62:4c:9b:ea:ce:fc:0c:4a:ec:3c:29:37: 2a:ad:22:7d:72:12:4c:60:b2:c0:e0:47:b7:e6:1c: 3c:bc:39:8b:01:8a:e8:65:e1:3a:7d:2d:ec:89:c0: 12:64:42:a0:93:01:1b:e8:4c:f1:aa:8c:43:ce:10: ce:d9:06:5a:f9:fc:68:51:f8:f4:a1:d2:01:41:c6: 3b:53:77:5d:1e:62:6a:87:59:c3:25:95:5f:22:90: 5c:4d:7d:6e:f4:af:57:55:1f:91:d3:2d:98:ee:16: 39:ff:5f:a9:7d:59:7d:96:90:d5:0b:92:88:8b:26: 0e:64:3f:de:12:32:b6:77:be:b2:b2:ec:8f:f5:94: 6a:64:61:74:64:a2:29:c2:72:bd:14:1e:3a:3b:90: 05:bc:ee:2b:8a:58:a6:5b:eb:07:bb:02:a5:98:80: 64:b9:cd:6e:66:6d:d0:15:3b:17:6e:35:3a:6a:d2: 0e:bd:d7:3a:73:c5:ea:09:3a:1b:ce:1d:47:6c:0d: 99:d5:94:1a:1c:cd:28:61:94:b9:91:21:77:d5:c2: f5:ab:5c:25:25:31:86:86:15:2b:cb:d6:39:32:f3: 5b:c8:37:95:f9:04:50:43:57:f9:88:7a:87:ad:7b: 5c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:45:52:23:97:22:0F:46:C8:F5:40:CC:71:1F:7D:21:5B:08:90:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/5e5cb578-e028-3779-bde1-45133e9cc049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 52.124.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:81:58:07:0b:ba:99:25:e2:a6:1f:0a:b0:c4:a4:9a:bb:e8: 41:51:7f:0d:ae:8e:48:66:03:84:78:71:92:ff:96:9a:f1:e7: d9:71:60:c9:ef:61:9f:4e:0e:e2:d3:c7:56:87:74:e2:5b:71: 5c:7f:30:db:48:e3:f5:d3:65:e8:16:34:6b:50:65:22:0a:4b: 41:3f:8e:6e:0c:b3:ba:49:b8:f6:63:4a:94:3c:c1:d8:e9:bd: 64:b1:e7:4e:b0:0c:d3:63:2b:64:c8:db:44:bf:b4:34:a1:5d: a5:da:8d:c9:f8:be:3f:21:58:b9:c5:ff:d3:2b:ba:c5:cc:31: dd:f7:80:75:85:fe:b6:96:b2:17:13:b5:39:ee:f4:6b:4e:b0: 67:ac:cf:09:53:c9:92:c2:c6:a3:e6:88:58:f7:5f:50:db:5e: cc:19:68:6b:4c:89:a9:4a:1d:d7:0d:00:17:3d:7f:33:fb:a9: 1a:c6:19:39:12:e3:7f:f8:f7:b6:2b:75:bb:34:88:89:0b:52: 70:ad:89:15:51:20:fe:e5:e5:ec:2a:c6:6c:61:2b:4e:3f:9a: 48:ff:1c:f2:32:56:6b:99:e5:b2:47:7a:7e:43:42:23:12:f2: 9f:98:e1:bd:b1:cb:e4:1c:55:f3:53:7a:7e:b9:b4:d6:73:27: a5:2c:33:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwe2aara8LrWCSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk M2E4YzJhZTctNTNiYi00YTY3LTgwNmQtZTU4ZjZmYWZhNDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIAAJle6F8yCt8pAMn9tMtJiTJvqzvwMSuw8 KTcqrSJ9chJMYLLA4Ee35hw8vDmLAYroZeE6fS3sicASZEKgkwEb6EzxqoxDzhDO 2QZa+fxoUfj0odIBQcY7U3ddHmJqh1nDJZVfIpBcTX1u9K9XVR+R0y2Y7hY5/1+p fVl9lpDVC5KIiyYOZD/eEjK2d76ysuyP9ZRqZGF0ZKIpwnK9FB46O5AFvO4rilim W+sHuwKlmIBkuc1uZm3QFTsXbjU6atIOvdc6c8XqCTobzh1HbA2Z1ZQaHM0oYZS5 kSF31cL1q1wlJTGGhhUry9Y5MvNbyDeV+QRQQ1f5iHqHrXtcMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJFUiOXIg9GyPVAzHEffSFbCJDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNWU1Y2I1NzgtZTAyOC0z Nzc5LWJkZTEtNDUxMzNlOWNjMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiBWAcLupkl4qYfCrDEpJq76EFRfw2ujkhmA4R4cZL/lprx59lxYMnv YZ9ODuLTx1aHdOJbcVx/MNtI4/XTZegWNGtQZSIKS0E/jm4Ms7pJuPZjSpQ8wdjp vWSx506wDNNjK2TI20S/tDShXaXajcn4vj8hWLnF/9MrusXMMd33gHWF/raWshcT tTnu9GtOsGeszwlTyZLCxqPmiFj3X1DbXswZaGtMialKHdcNABc9fzP7qRrGGTkS 43/497Yrdbs0iIkLUnCtiRVRIP7l5ewqxmxhK04/mkj/HPIyVmuZ5bJHen5DQiMS 8p+Y4b2xy+QcVfNTen65tNZzJ6UsM0w= -----END CERTIFICATE-----Generated at Sat Aug 22 18:47:51 2026 by rpki-client