$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/e413581a-ea71-3211-9fa2-7956cacdf5d8.roa File: e413581a-ea71-3211-9fa2-7956cacdf5d8.roa (raw, json) Hash identifier: hgYu7UpZmed9LwoLzUPKQyDi65uwenhNwnV8+jNVZRY= Subject key identifier: F5:93:F9:A5:9D:C2:13:3F:A0:A1:DF:24:99:C5:BD:57:CB:64:9F:3E Certificate issuer: /CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Certificate serial: 010D0C9F4328584F6F22F7A85F8823BD24695A80 Authority key identifier: 1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/e413581a-ea71-3211-9fa2-7956cacdf5d8.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 395861 IP address blocks: 52.144.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:f7:a8:5f:88:23:bd:24:69:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=753c7f9e-44f1-4c0d-afb3-8dac3d9c6226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:bd:f3:ea:d4:7f:9f:eb:6f:df:c3:75:7e: 60:6c:19:2b:51:53:e2:aa:e3:d9:b2:00:d5:be:69: 3c:a1:f6:3a:41:67:7a:1e:1e:d9:ff:67:e5:61:14: 17:99:0e:b5:6b:fc:17:29:b8:bc:d0:ce:8b:f4:3f: bd:09:0b:1e:3b:da:9e:ed:94:80:22:38:cd:77:29: 81:a1:fd:c4:ba:4f:1c:6a:61:c6:40:9e:b9:ad:b5: eb:49:35:b4:c3:19:66:bc:0e:29:43:c6:04:fd:e5: 74:fa:ce:a1:aa:fd:f2:60:0d:b8:14:b5:85:5c:9c: 19:c4:8c:65:30:af:27:bd:c3:0f:6d:65:b9:78:46: fd:8d:40:5e:8b:e1:6b:3a:6d:05:5f:0d:14:b8:6d: f2:9d:21:0d:f0:91:f3:9e:d4:8e:dd:65:e3:1b:f8: 99:70:b5:e7:fc:98:8d:6f:77:4c:67:a5:a0:2f:30: e0:36:fd:ab:18:b1:0c:74:f2:95:87:eb:7d:9d:b7: 34:82:58:6c:29:5e:29:ea:11:15:48:7b:ef:33:6b: 4a:c5:27:56:e0:8c:6e:cf:88:90:cb:82:b3:f7:6c: a7:df:04:31:61:19:1f:88:33:13:de:95:ad:9c:bd: 99:6c:c0:91:20:d4:83:0c:bf:31:59:aa:c8:a9:82: 66:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:93:F9:A5:9D:C2:13:3F:A0:A1:DF:24:99:C5:BD:57:CB:64:9F:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/e413581a-ea71-3211-9fa2-7956cacdf5d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl X509v3 Authority Key Identifier: keyid:1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer sbgp-ipAddrBlock: critical IPv4: 52.144.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:16:d1:1a:c9:7a:61:86:00:c9:c8:53:11:30:44:d1:d5:93: 35:31:e8:83:6b:39:9a:d4:d9:7b:bd:2a:d5:03:bf:23:29:70: 59:8f:3e:53:45:df:aa:cf:98:fa:72:b5:0f:96:95:95:d0:4c: 77:a6:e0:30:ad:dd:9a:29:1c:ec:68:d8:ad:7c:0b:96:08:f5: 57:55:81:a5:d3:dd:23:97:ce:80:2e:c2:2d:0c:5e:16:67:37: fc:b3:e7:db:ab:c6:fb:c3:99:ad:35:f4:66:c0:f4:27:ee:b1: b0:4d:b1:e6:d7:33:8a:1d:25:4e:6a:6c:17:76:43:30:6a:5f: 72:e9:bf:c7:10:6e:7f:20:df:d5:ff:6b:6e:71:f5:57:70:fc: 1e:77:36:23:ba:a9:68:a7:db:bc:3b:40:e1:2e:6a:bd:e5:40: 91:43:90:79:2e:27:7d:74:9b:ad:10:50:d9:fd:e4:1f:6a:bd: cf:76:0f:39:f3:e5:9a:db:e6:86:bd:22:20:f7:bf:65:fc:36: 08:e6:2e:5e:42:d9:4d:4f:d4:de:e4:d2:91:a0:e8:bb:f1:ff: ee:7a:78:97:5f:31:9c:a5:f7:9b:54:08:32:cb:f0:e4:09:67: 0a:dc:11:5b:b2:15:35:b5:dd:07:c3:9d:5a:79:34:43:b7:f9: c4:e1:cb:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIveoX4gjvSRpWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZlMTY1ZDAtYTljYS00YzhlLTg4ZWUtY2I4MzE2ODFk ZjEzMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NzUzYzdmOWUtNDRmMS00YzBkLWFmYjMtOGRhYzNkOWM2MjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bC98+rUf5/rb9/DdX5gbBkrUVPiquPZsgDV vmk8ofY6QWd6Hh7Z/2flYRQXmQ61a/wXKbi80M6L9D+9CQseO9qe7ZSAIjjNdymB of3Euk8camHGQJ65rbXrSTW0wxlmvA4pQ8YE/eV0+s6hqv3yYA24FLWFXJwZxIxl MK8nvcMPbWW5eEb9jUBei+FrOm0FXw0UuG3ynSEN8JHzntSO3WXjG/iZcLXn/JiN b3dMZ6WgLzDgNv2rGLEMdPKVh+t9nbc0glhsKV4p6hEVSHvvM2tKxSdW4Ixuz4iQ y4Kz92yn3wQxYRkfiDMT3pWtnL2ZbMCRINSDDL8xWarIqYJmxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWT+aWdwhM/oKHfJJnFvVfLZJ8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUx NjVkMC1hOWNhLTRjOGUtODhlZS1jYjgzMTY4MWRmMTMvZTQxMzU4MWEtZWE3MS0z MjExLTlmYTItNzk1NmNhY2RmNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmZlMTY1ZDAtYTljYS00YzhlLTg4 ZWUtY2I4MzE2ODFkZjEzL2ZmZTE2NWQwLWE5Y2EtNGM4ZS04OGVlLWNiODMxNjgx ZGYxMy5jcmwwHwYDVR0jBBgwFoAUGy/dUxOu9xrnk4yc5u8wKIQhICswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUxNjVkMC1hOWNhLTRjOGUtODhlZS1jYjgz MTY4MWRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMW0RrJemGGAMnIUxEwRNHVkzUx6INrOZrU2Xu9KtUDvyMpcFmPPlNF 36rPmPpytQ+WlZXQTHem4DCt3ZopHOxo2K18C5YI9VdVgaXT3SOXzoAuwi0MXhZn N/yz59urxvvDma019GbA9CfusbBNsebXM4odJU5qbBd2QzBqX3Lpv8cQbn8g39X/ a25x9Vdw/B53NiO6qWin27w7QOEuar3lQJFDkHkuJ310m60QUNn95B9qvc92Dznz 5Zrb5oa9IiD3v2X8NgjmLl5C2U1P1N7k0pGg6Lvx/+56eJdfMZyl95tUCDLL8OQJ ZwrcEVuyFTW13QfDnVp5NEO3+cThy1o= -----END CERTIFICATE-----Generated at Mon Oct 19 14:27:57 2026 by rpki-client