$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/98d0e7ba-6267-335a-a0f7-da1ea1e65457.roa File: 98d0e7ba-6267-335a-a0f7-da1ea1e65457.roa (raw, json) Hash identifier: Vx8RiA8sSoTemXod8wFXyXGVbakKMcbvxmEi8/Q1Das= Subject key identifier: 6C:13:29:23:B2:FA:12:48:A8:99:A0:BC:11:34:27:FE:2E:41:DC:A4 Certificate issuer: /CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Certificate serial: 010D0C9F4328584E296F23D8DE799DE2D4808A72 Authority key identifier: 1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/98d0e7ba-6267-335a-a0f7-da1ea1e65457.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 402317 IP address blocks: 52.144.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6f:23:d8:de:79:9d:e2:d4:80:8a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=092c124c-4cad-4deb-ba17-db0411937e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:6c:94:07:55:31:6d:59:5f:a7:4a:0a:96: 83:18:65:10:bd:66:58:0c:50:db:e5:02:4b:93:c8: 6d:0f:a9:7c:67:fe:2c:fa:28:0f:3a:86:68:d3:3d: e0:6d:b4:51:33:b2:8b:86:5c:54:8c:b9:cc:a6:01: 4b:1e:2e:99:7c:d5:0a:50:69:8b:00:84:75:26:47: 2e:46:cd:fc:f1:fa:8a:a4:88:6b:56:8b:f7:84:ed: 8e:6f:89:5e:d4:0c:0b:0b:84:71:a1:c9:22:49:fd: a9:ab:fd:f4:3a:73:07:4b:89:79:42:94:8d:80:34: 77:91:60:1d:38:e5:56:ac:17:dd:0e:37:ef:d7:f5: 68:fe:3f:60:ce:bd:5b:70:e0:86:67:9b:95:ce:cc: 51:d9:d5:45:7d:31:d9:2a:a1:00:ec:c0:3e:a1:93: 43:f8:f6:0e:37:89:50:77:25:6c:77:52:a6:24:3b: f0:f7:bc:37:a7:88:a6:a9:56:21:d1:04:f7:53:8c: 04:52:98:a6:24:98:2a:d5:3e:84:f9:08:d6:57:d9: a9:ed:fe:ce:ea:9e:cd:06:4d:ca:d3:a2:a8:e4:32: 45:3f:5e:a4:94:18:8f:bf:99:6a:c1:21:98:84:37: 95:98:aa:c8:4c:8d:fc:75:f2:1e:48:70:92:a1:e2: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:13:29:23:B2:FA:12:48:A8:99:A0:BC:11:34:27:FE:2E:41:DC:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/98d0e7ba-6267-335a-a0f7-da1ea1e65457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl X509v3 Authority Key Identifier: keyid:1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer sbgp-ipAddrBlock: critical IPv4: 52.144.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:02:c5:9b:38:ca:c4:b2:9d:45:1f:c7:59:5c:3c:c8:4a:69: 35:51:e1:b2:81:fb:dd:69:f7:f7:e9:85:08:75:8c:0a:9d:d8: 33:3d:6b:5c:0d:5d:5e:00:35:98:96:05:7b:1a:f2:d9:c9:5b: 28:85:4f:11:0e:81:f4:28:dc:ba:a9:1d:24:1d:e8:29:1c:d7: 43:57:a6:7e:53:6f:11:da:c2:63:5a:bc:c8:c3:d9:12:39:8a: ab:85:66:6c:4b:ee:12:6f:c5:a3:61:d6:fd:ea:44:8e:35:34: 9f:8b:5e:e4:8d:8d:de:4b:e0:b8:a5:7d:68:a5:ac:38:49:68: 30:5c:9d:ff:e8:07:d5:a8:f0:83:05:3f:ae:68:f0:0a:32:6c: af:23:76:96:2a:49:ba:6c:0d:ab:26:a6:d0:1a:58:68:20:db: 5c:e7:cf:9d:4f:f8:e4:38:ba:72:78:e7:7d:40:31:fd:22:db: 41:ad:91:73:65:21:5d:4b:ca:76:47:c8:da:c8:7e:dd:93:22: 62:59:3b:cd:1f:b9:58:8d:f5:bd:32:36:79:04:92:e6:a9:9a: bf:b6:ab:b7:f9:74:5f:94:b3:12:8f:35:60:4e:64:b8:73:08: 56:f0:c9:15:5c:db:57:7d:36:88:07:61:62:0a:7c:23:e8:62: f6:e3:86:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbyPY3nmd4tSAinIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZlMTY1ZDAtYTljYS00YzhlLTg4ZWUtY2I4MzE2ODFk ZjEzMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk MDkyYzEyNGMtNGNhZC00ZGViLWJhMTctZGIwNDExOTM3ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUBslAdVMW1ZX6dKCpaDGGUQvWZYDFDb5QJL k8htD6l8Z/4s+igPOoZo0z3gbbRRM7KLhlxUjLnMpgFLHi6ZfNUKUGmLAIR1Jkcu Rs388fqKpIhrVov3hO2Ob4le1AwLC4RxockiSf2pq/30OnMHS4l5QpSNgDR3kWAd OOVWrBfdDjfv1/Vo/j9gzr1bcOCGZ5uVzsxR2dVFfTHZKqEA7MA+oZND+PYON4lQ dyVsd1KmJDvw97w3p4imqVYh0QT3U4wEUpimJJgq1T6E+QjWV9mp7f7O6p7NBk3K 06Ko5DJFP16klBiPv5lqwSGYhDeVmKrITI38dfIeSHCSoeJCVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwTKSOy+hJIqJmgvBE0J/4uQdykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUx NjVkMC1hOWNhLTRjOGUtODhlZS1jYjgzMTY4MWRmMTMvOThkMGU3YmEtNjI2Ny0z MzVhLWEwZjctZGExZWExZTY1NDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmZlMTY1ZDAtYTljYS00YzhlLTg4 ZWUtY2I4MzE2ODFkZjEzL2ZmZTE2NWQwLWE5Y2EtNGM4ZS04OGVlLWNiODMxNjgx ZGYxMy5jcmwwHwYDVR0jBBgwFoAUGy/dUxOu9xrnk4yc5u8wKIQhICswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUxNjVkMC1hOWNhLTRjOGUtODhlZS1jYjgz MTY4MWRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQCxZs4ysSynUUfx1lcPMhKaTVR4bKB+91p9/fphQh1jAqd2DM9a1wN XV4ANZiWBXsa8tnJWyiFTxEOgfQo3LqpHSQd6Ckc10NXpn5TbxHawmNavMjD2RI5 iquFZmxL7hJvxaNh1v3qRI41NJ+LXuSNjd5L4LilfWilrDhJaDBcnf/oB9Wo8IMF P65o8AoybK8jdpYqSbpsDasmptAaWGgg21znz51P+OQ4unJ4531AMf0i20GtkXNl IV1LynZHyNrIft2TImJZO80fuViN9b0yNnkEkuapmr+2q7f5dF+UsxKPNWBOZLhz CFbwyRVc21d9NogHYWIKfCPoYvbjhmU= -----END CERTIFICATE-----Generated at Fri Jul 17 05:07:40 2026 by rpki-client