$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/a5427593-da48-3a06-b4aa-51d977c7606b.roa File: a5427593-da48-3a06-b4aa-51d977c7606b.roa (raw, json) Hash identifier: /Tw/7GJa/76RsUCkdK8AUgQpEpMRHgnPZWL/0LvgFnM= Subject key identifier: 25:1E:DC:E7:8E:E7:18:A6:63:33:12:C6:A7:62:70:71:76:82:27:2F Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584ED001ED02DBDB8760E5427D60 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/a5427593-da48-3a06-b4aa-51d977c7606b.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 11260 IP address blocks: 52.124.64.0/18 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:ed:02:db:db:87:60:e5:42:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=a63d8238-bbf8-49d7-af6e-58d09ef627f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:03:3d:a5:e7:3c:9f:5b:4c:12:ec:29:d2:69: f1:a0:8c:bf:a8:10:2c:e2:b7:a7:8f:1a:98:9e:fd: 37:17:95:90:39:4c:9a:5f:3c:79:98:f4:53:4d:f1: 4e:9b:55:dc:fb:67:87:94:8d:3b:cc:85:85:54:3c: e5:18:95:09:09:37:6d:31:2f:ec:4d:1d:1e:21:a5: bd:6f:5b:8b:f7:73:e8:9a:a9:33:3f:29:04:f7:a5: df:7b:b8:45:eb:81:b2:14:50:9a:1c:d5:6f:ef:73: ad:80:9c:ce:2f:f6:4d:45:d2:89:f1:a8:f5:0f:99: 04:e0:1d:f9:e5:b3:dd:35:9d:e7:4b:2a:a1:50:e8: 1b:67:6c:1f:68:39:4d:e7:1a:3c:02:09:50:eb:6e: 56:48:6b:74:76:b3:ad:a3:31:86:05:6f:87:65:8e: 48:36:73:e1:f2:1d:fb:40:a6:28:4c:ba:0d:ec:49: 18:83:e3:ba:15:cb:86:b0:5e:19:c2:72:85:74:21: 7a:e3:1c:69:b8:3b:75:6e:c1:68:b6:03:37:1c:e2: f0:2e:f7:1e:11:d1:a6:96:b7:d6:3b:68:0e:0d:e8: 32:0e:a4:e3:bd:73:7d:0a:35:e9:19:74:10:da:9a: 88:c2:ad:b8:57:34:60:af:fc:bf:cb:14:1d:dc:85: ab:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1E:DC:E7:8E:E7:18:A6:63:33:12:C6:A7:62:70:71:76:82:27:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/a5427593-da48-3a06-b4aa-51d977c7606b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 52.124.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7d:9b:32:4c:af:7c:15:75:7b:a4:81:35:6c:31:d9:5f:36: 0c:1d:43:d4:41:0e:bc:8c:39:a4:a6:80:82:e4:66:da:98:01: 8f:15:92:e3:c0:4a:90:49:92:87:46:35:85:dc:a0:8b:00:ec: 0e:6f:58:1f:f6:4f:e0:31:c1:88:c2:e5:20:d0:2d:e6:26:04: b7:6a:ab:79:1f:48:bd:d6:72:c3:1c:96:72:9c:5a:72:e9:30: 26:e8:88:b0:d9:2d:58:fa:e8:29:9f:0a:91:7b:8d:0b:f0:10: 14:17:f2:e1:06:52:73:8f:2f:b2:fc:69:d5:7d:c5:de:c6:46: 20:47:cb:ce:80:20:5d:42:d2:7c:a7:b8:b3:82:cc:ef:f6:2a: bd:f2:9e:92:73:04:38:fc:1e:84:7e:0e:b1:22:f6:d9:af:4b: 3a:2b:06:7c:be:67:ae:91:87:9e:ed:f3:a1:cb:03:dc:9b:6f: 7a:ca:d4:56:b7:9b:1c:ff:6d:17:92:0e:f7:96:cd:b8:f5:c9: c9:73:b2:ff:8c:fc:f9:8b:13:60:a6:41:7f:a2:57:ab:55:96: 1e:af:c8:28:c1:23:b0:a8:fd:b0:8e:84:2d:d2:74:ab:22:a3: 6a:52:58:2a:74:b3:28:f2:75:65:30:d8:5f:ea:77:85:46:30: 44:2f:43:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAe0C29uHYOVCfWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk YTYzZDgyMzgtYmJmOC00OWQ3LWFmNmUtNThkMDllZjYyN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggM9pec8n1tMEuwp0mnxoIy/qBAs4renjxqY nv03F5WQOUyaXzx5mPRTTfFOm1Xc+2eHlI07zIWFVDzlGJUJCTdtMS/sTR0eIaW9 b1uL93PomqkzPykE96Xfe7hF64GyFFCaHNVv73OtgJzOL/ZNRdKJ8aj1D5kE4B35 5bPdNZ3nSyqhUOgbZ2wfaDlN5xo8AglQ625WSGt0drOtozGGBW+HZY5INnPh8h37 QKYoTLoN7EkYg+O6FcuGsF4ZwnKFdCF64xxpuDt1bsFotgM3HOLwLvceEdGmlrfW O2gODegyDqTjvXN9CjXpGXQQ2pqIwq24VzRgr/y/yxQd3IWr/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUe3OeO5ximYzMSxqdicHF2gicvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvYTU0Mjc1OTMtZGE0OC0z YTA2LWI0YWEtNTFkOTc3Yzc2MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGNHxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt9mzJMr3wVdXukgTVsMdlfNgwdQ9RBDryMOaSmgILkZtqYAY8VkuPA SpBJkodGNYXcoIsA7A5vWB/2T+AxwYjC5SDQLeYmBLdqq3kfSL3WcsMclnKcWnLp MCboiLDZLVj66CmfCpF7jQvwEBQX8uEGUnOPL7L8adV9xd7GRiBHy86AIF1C0nyn uLOCzO/2Kr3ynpJzBDj8HoR+DrEi9tmvSzorBny+Z66Rh57t86HLA9ybb3rK1Fa3 mxz/bReSDveWzbj1yclzsv+M/PmLE2CmQX+iV6tVlh6vyCjBI7Co/bCOhC3SdKsi o2pSWCp0syjydWUw2F/qd4VGMEQvQ3c= -----END CERTIFICATE-----Generated at Sat Sep 5 16:03:28 2026 by rpki-client