$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/a41ea90e-b568-3dfe-a5dd-db2be2a570e7.roa File: a41ea90e-b568-3dfe-a5dd-db2be2a570e7.roa (raw, json) Hash identifier: 3C/myN/LWjAJY9AbnNm+5zUcJDdEO9qv9hBQV+CIjgI= Subject key identifier: 1F:91:2D:4F:B8:9B:34:0B:EB:06:2B:B9:63:E7:5F:5D:E6:02:E0:AA Certificate issuer: /CN=2e3e43ea-6b8f-4420-bf66-7285576d56fe Certificate serial: 010D0C9F4328584EB847476A80E0DEDADFD9F800 Authority key identifier: FA:98:9D:0E:F0:F9:4C:7C:7A:02:54:99:9B:82:C3:64:28:5E:85:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/a41ea90e-b568-3dfe-a5dd-db2be2a570e7.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 397091 IP address blocks: 52.144.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/2e3e43ea-6b8f-4420-bf66-7285576d56fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/2e3e43ea-6b8f-4420-bf66-7285576d56fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:47:6a:80:e0:de:da:df:d9:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3e43ea-6b8f-4420-bf66-7285576d56fe Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=0efefd59-55a8-40da-8b12-198b4bf08af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d0:b9:11:d7:9b:cc:4b:2f:a4:f9:91:a2:18: fd:bd:e1:19:d9:e9:f9:b6:47:aa:65:a9:02:ee:13: d7:a5:f7:d1:85:3e:a1:48:ab:42:2f:78:4c:76:a1: ff:a7:d8:64:ff:65:12:55:b1:ca:dd:9f:82:bb:e0: b2:b5:83:e9:1b:dd:f3:91:c8:4d:07:ad:14:24:d6: c1:61:0d:5b:ca:00:bb:d7:92:46:69:11:58:88:29: 0f:93:21:6b:96:f6:a4:42:6f:46:7d:d5:b5:48:14: 1c:06:98:bf:72:6c:6c:31:aa:46:29:92:86:30:65: d0:8f:26:be:e9:46:42:11:38:a4:90:a0:a2:5c:82: 4b:a5:d8:a1:84:f1:7f:a7:b4:f7:fd:6b:10:9b:07: 8e:12:a1:22:07:bc:d1:5a:e5:e1:69:d0:81:b9:57: 44:eb:b1:88:e4:1a:9a:34:e1:7c:bb:79:02:4e:5b: 70:b7:5f:79:22:09:2c:e8:ab:12:a5:df:99:f1:49: ec:c5:ef:55:9a:ab:07:c1:16:a5:55:f7:c5:4a:02: 96:44:24:d8:3b:67:5e:bc:42:c4:fa:09:e0:db:08: f3:68:90:9c:dd:c6:dc:1c:05:5a:11:37:73:0a:00: d7:30:c6:20:b1:e9:fe:51:5a:7c:51:07:cd:81:d9: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:91:2D:4F:B8:9B:34:0B:EB:06:2B:B9:63:E7:5F:5D:E6:02:E0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/a41ea90e-b568-3dfe-a5dd-db2be2a570e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/2e3e43ea-6b8f-4420-bf66-7285576d56fe.crl X509v3 Authority Key Identifier: keyid:FA:98:9D:0E:F0:F9:4C:7C:7A:02:54:99:9B:82:C3:64:28:5E:85:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe.cer sbgp-ipAddrBlock: critical IPv4: 52.144.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c7:4d:25:76:ff:0b:0b:b8:4d:29:37:71:4f:f2:24:92:6c: af:ca:dd:d7:ec:9c:dd:3e:ba:4f:94:cc:2a:5a:00:cd:7b:35: ad:3d:b1:83:1f:a3:2c:bf:75:7d:01:a9:92:0d:1a:60:29:f4: 0e:72:d8:93:f6:e0:88:bf:a9:e4:8f:27:bb:12:46:68:c6:fd: 94:a8:65:41:e0:84:ea:0c:c9:9e:5a:df:2c:f3:87:16:5c:87: ed:b2:1e:d0:5f:18:2a:88:91:35:92:b5:43:e0:96:62:d3:d4: ec:8d:37:e3:b6:1b:0a:04:a3:91:54:32:be:37:89:d0:1c:04: f8:f6:c7:3a:14:d2:5b:97:b2:a4:5f:b3:7f:47:02:88:d6:0c: f9:3e:c7:74:c7:5b:cf:22:76:6d:98:81:d8:58:b6:59:89:86: 86:9b:62:ac:ec:e4:33:aa:d2:5c:f1:16:af:5e:35:13:7f:22: 21:7b:5c:7f:2b:07:d1:81:a2:34:51:55:d8:02:2d:40:d1:6d: be:3c:6c:8f:41:38:ac:d0:15:8a:99:a1:51:ee:37:92:40:91: 24:4c:bf:ba:cd:0d:8a:40:e8:85:6b:68:a0:3a:92:83:ff:e7: 89:d1:4b:dc:a7:a6:a2:ec:e7:25:87:e1:97:48:f3:0c:c9:79: 3b:16:29:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R0dqgODe2t/Z+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzZTQzZWEtNmI4Zi00NDIwLWJmNjYtNzI4NTU3NmQ1 NmZlMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk MGVmZWZkNTktNTVhOC00MGRhLThiMTItMTk4YjRiZjA4YWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tC5EdebzEsvpPmRohj9veEZ2en5tkeqZakC 7hPXpffRhT6hSKtCL3hMdqH/p9hk/2USVbHK3Z+Cu+CytYPpG93zkchNB60UJNbB YQ1bygC715JGaRFYiCkPkyFrlvakQm9GfdW1SBQcBpi/cmxsMapGKZKGMGXQjya+ 6UZCETikkKCiXIJLpdihhPF/p7T3/WsQmweOEqEiB7zRWuXhadCBuVdE67GI5Bqa NOF8u3kCTltwt195Igks6KsSpd+Z8Unsxe9VmqsHwRalVffFSgKWRCTYO2devELE +gng2wjzaJCc3cbcHAVaETdzCgDXMMYgsen+UVp8UQfNgdnnPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+RLU+4mzQL6wYruWPnX13mAuCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yZTNl NDNlYS02YjhmLTQ0MjAtYmY2Ni03Mjg1NTc2ZDU2ZmUvYTQxZWE5MGUtYjU2OC0z ZGZlLWE1ZGQtZGIyYmUyYTU3MGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmUzZTQzZWEtNmI4Zi00NDIwLWJm NjYtNzI4NTU3NmQ1NmZlLzJlM2U0M2VhLTZiOGYtNDQyMC1iZjY2LTcyODU1NzZk NTZmZS5jcmwwHwYDVR0jBBgwFoAU+pidDvD5THx6AlSZm4LDZChehZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yZTNlNDNlYS02YjhmLTQ0MjAtYmY2Ni03Mjg1 NTc2ZDU2ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3HTSV2/wsLuE0pN3FP8iSSbK/K3dfsnN0+uk+UzCpaAM17Na09sYMf oyy/dX0BqZINGmAp9A5y2JP24Ii/qeSPJ7sSRmjG/ZSoZUHghOoMyZ5a3yzzhxZc h+2yHtBfGCqIkTWStUPglmLT1OyNN+O2GwoEo5FUMr43idAcBPj2xzoU0luXsqRf s39HAojWDPk+x3THW88idm2YgdhYtlmJhoabYqzs5DOq0lzxFq9eNRN/IiF7XH8r B9GBojRRVdgCLUDRbb48bI9BOKzQFYqZoVHuN5JAkSRMv7rNDYpA6IVraKA6koP/ 54nRS9ynpqLs5yWH4ZdI8wzJeTsWKUU= -----END CERTIFICATE-----Generated at Mon Aug 31 10:50:39 2026 by rpki-client