$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/c830fb64-4d0b-3d84-b469-62ceca3332da.roa File: c830fb64-4d0b-3d84-b469-62ceca3332da.roa (raw, json) Hash identifier: VsSuGQN0D/p2IBvge7s05ChYGDaNQblTHaKEF6JEW4M= Subject key identifier: E5:44:66:41:95:C5:6A:56:3B:64:37:06:D2:0E:43:8C:E9:F4:BF:32 Certificate issuer: /CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Certificate serial: 010D0C9F4328584F6F22C5FAA76043232A0D7FC0 Authority key identifier: 1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/c830fb64-4d0b-3d84-b469-62ceca3332da.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 395861 IP address blocks: 52.144.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:c5:fa:a7:60:43:23:2a:0d:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=9a580481-27f1-486f-9d8d-46216b1891d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:95:ec:96:0e:b7:de:e5:24:f7:55:52:db:4c: ff:f8:dd:16:fa:01:57:9b:39:12:bb:2d:a0:33:bb: 7b:0d:ef:ce:13:5e:39:c2:80:3e:45:74:31:7c:1e: 7f:49:e1:f8:5b:cf:24:78:e5:16:2f:46:9b:05:95: 31:8e:8f:cb:65:b3:1f:dc:2f:75:2f:c6:c6:62:67: 94:91:c9:b8:7c:da:3c:82:80:09:eb:43:04:9e:2c: 93:3a:65:86:a9:db:ad:ac:58:b4:53:79:27:3b:9d: 62:f5:57:68:27:97:2b:43:07:b0:68:d6:cb:7f:93: 66:fe:89:c1:61:49:4b:e3:54:48:80:9e:16:81:a5: 87:05:0f:43:66:98:40:2e:29:a7:f4:dc:58:45:0a: 83:2a:1b:29:db:6b:35:bb:08:33:8e:ff:51:85:98: 49:21:69:fc:7a:47:e5:2f:60:0d:99:c2:a8:75:9b: 73:49:5a:17:e2:83:77:6d:14:1e:2c:48:5f:7a:c1: 35:84:eb:41:d5:cf:fd:b1:f1:64:ae:3e:ae:05:9b: 8a:3f:a4:be:3b:68:49:53:e8:83:13:59:7a:fc:ae: a0:8a:21:74:e7:92:5b:aa:ca:97:bd:b2:da:cf:e1: 2b:d0:c9:1f:d1:d2:46:ab:d4:0b:9b:a2:fe:7b:45: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:44:66:41:95:C5:6A:56:3B:64:37:06:D2:0E:43:8C:E9:F4:BF:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/c830fb64-4d0b-3d84-b469-62ceca3332da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl X509v3 Authority Key Identifier: keyid:1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer sbgp-ipAddrBlock: critical IPv4: 52.144.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b7:24:22:59:fc:96:03:bc:a1:b3:e3:4f:fc:1e:ef:7a:6b: c6:cf:29:ea:7e:91:2d:e5:00:7d:7b:f0:d2:4b:85:48:c6:c9: 32:47:2a:01:6a:c8:b3:00:92:f7:b9:52:44:73:b5:86:7e:d0: 34:e5:02:cc:14:4d:af:5f:92:02:55:90:cd:6a:16:95:9f:9d: 10:dd:8f:4f:66:f7:79:29:6a:fd:cd:ff:c0:3a:e6:71:ad:07: 57:b0:63:08:d9:6d:22:ea:71:a8:45:f9:cd:84:60:5f:31:13: c0:73:a6:46:05:80:97:12:9d:fd:fc:ea:cb:03:02:32:fa:15: a5:f6:54:4a:ae:0c:c4:df:71:d1:04:18:ff:bb:7f:2f:da:18: 2e:15:45:ba:59:91:1d:c1:51:43:5d:79:31:86:8a:e4:e2:ce: 65:55:6c:ea:33:28:b2:85:c3:72:79:df:bd:a4:3f:31:c4:1b: 11:db:88:1f:14:c7:98:1a:48:5d:c3:66:89:eb:80:ec:94:a4: bb:ce:86:c6:d9:2d:06:e9:93:79:7b:a8:ae:5d:99:93:99:36: aa:e8:96:17:b2:01:9b:8c:3e:37:c6:36:a9:90:74:43:6c:f8: 9e:91:9a:e7:40:af:b7:48:eb:86:69:99:26:8b:5b:89:0c:1f: 3c:57:1e:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIsX6p2BDIyoNf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZlMTY1ZDAtYTljYS00YzhlLTg4ZWUtY2I4MzE2ODFk ZjEzMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk OWE1ODA0ODEtMjdmMS00ODZmLTlkOGQtNDYyMTZiMTg5MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJXslg633uUk91VS20z/+N0W+gFXmzkSuy2g M7t7De/OE145woA+RXQxfB5/SeH4W88keOUWL0abBZUxjo/LZbMf3C91L8bGYmeU kcm4fNo8goAJ60MEniyTOmWGqdutrFi0U3knO51i9VdoJ5crQwewaNbLf5Nm/onB YUlL41RIgJ4WgaWHBQ9DZphALimn9NxYRQqDKhsp22s1uwgzjv9RhZhJIWn8ekfl L2ANmcKodZtzSVoX4oN3bRQeLEhfesE1hOtB1c/9sfFkrj6uBZuKP6S+O2hJU+iD E1l6/K6giiF055JbqsqXvbLaz+Er0Mkf0dJGq9QLm6L+e0Wz9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVEZkGVxWpWO2Q3BtIOQ4zp9L8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUx NjVkMC1hOWNhLTRjOGUtODhlZS1jYjgzMTY4MWRmMTMvYzgzMGZiNjQtNGQwYi0z ZDg0LWI0NjktNjJjZWNhMzMzMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmZlMTY1ZDAtYTljYS00YzhlLTg4 ZWUtY2I4MzE2ODFkZjEzL2ZmZTE2NWQwLWE5Y2EtNGM4ZS04OGVlLWNiODMxNjgx ZGYxMy5jcmwwHwYDVR0jBBgwFoAUGy/dUxOu9xrnk4yc5u8wKIQhICswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUxNjVkMC1hOWNhLTRjOGUtODhlZS1jYjgz MTY4MWRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm3JCJZ/JYDvKGz40/8Hu96a8bPKep+kS3lAH178NJLhUjGyTJHKgFq yLMAkve5UkRztYZ+0DTlAswUTa9fkgJVkM1qFpWfnRDdj09m93kpav3N/8A65nGt B1ewYwjZbSLqcahF+c2EYF8xE8BzpkYFgJcSnf386ssDAjL6FaX2VEquDMTfcdEE GP+7fy/aGC4VRbpZkR3BUUNdeTGGiuTizmVVbOozKLKFw3J5372kPzHEGxHbiB8U x5gaSF3DZonrgOyUpLvOhsbZLQbpk3l7qK5dmZOZNqrolheyAZuMPjfGNqmQdENs +J6RmudAr7dI64ZpmSaLW4kMHzxXHjc= -----END CERTIFICATE-----Generated at Mon Oct 19 01:40:38 2026 by rpki-client