$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa File: 288fc8dd-efe9-316a-a798-5d9657553ed5.roa (raw, json) Hash identifier: CKHzy4OWbpEKBr4RAOPiBccWdlj7Vzi3bSSv4GzFDlA= Subject key identifier: 27:95:23:A5:84:DA:3C:11:56:D6:33:F8:DB:A2:B9:C9:4C:AB:F2:30 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584B5DD1F4277BCBC1DE92FB2780 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 22241 IP address blocks: 52.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f4:27:7b:cb:c1:de:92:fb:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=b329e445-1d28-4b68-8e69-2a09e028a492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:f2:d2:fa:e8:0e:7b:c5:e0:6a:53:9b:7a: 90:04:4b:b2:1b:06:7c:8f:7c:89:47:64:63:90:8a: e4:66:d4:f9:ae:ed:5b:e1:43:29:38:00:37:9d:45: 88:d8:27:47:90:6f:b6:2c:e4:53:4f:09:ba:48:6b: 2e:74:6e:66:01:ca:89:39:1c:a3:fd:36:d2:48:d3: 8b:f9:92:60:4c:72:1a:f2:af:53:e0:52:74:0e:a8: 12:00:fe:0b:c9:0e:dd:53:b1:12:1c:16:ab:7d:be: 8c:b1:cd:76:e7:9a:de:b8:61:20:b1:3a:2e:77:4b: 95:83:da:78:ea:56:ba:e4:d6:a2:83:5b:de:03:07: 2a:62:78:f4:01:11:32:57:2a:5f:7e:62:73:db:03: 1b:07:9b:b4:2b:1b:c3:5c:43:34:9e:24:6b:5b:63: cb:5c:92:87:00:34:5d:c0:2d:df:06:e2:66:b9:b1: d2:07:5c:f3:0f:29:80:59:82:ba:ed:10:17:84:3b: f3:83:df:3e:52:26:f3:b4:cc:df:92:a3:c0:63:ad: 33:7d:fc:f6:16:f4:9c:cb:48:c1:46:ce:9f:e3:57: 0f:c0:6c:4d:a5:e1:62:25:0f:f0:dc:8a:ef:84:4a: 8b:44:25:73:d9:61:56:54:c5:8c:66:1e:07:2b:43: 6e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:95:23:A5:84:DA:3C:11:56:D6:33:F8:DB:A2:B9:C9:4C:AB:F2:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:78:5d:56:3b:cb:cc:36:b1:e0:d8:ae:34:7f:ce:1e:a9:07: 7c:f7:74:80:25:4b:47:58:97:e9:47:13:7a:27:94:d6:1a:60: 1f:7c:c6:a7:77:aa:5f:78:2e:70:e7:17:b1:3c:73:e1:88:eb: 6d:25:5c:5a:fe:1e:f5:60:f8:d5:e8:ec:be:b5:56:5d:3a:b6: e1:f6:42:17:e9:34:63:8b:01:7b:2f:7a:2f:3a:2f:f8:44:aa: 8f:52:c1:d1:bb:93:ff:81:b5:c7:ab:a8:12:0d:10:8e:4d:b0: cb:cb:3f:af:b5:07:45:27:0a:89:bb:5b:55:87:0c:b1:c3:4a: 5e:80:c1:2f:0d:e2:aa:52:6d:14:59:6e:79:4b:e6:13:50:b6: e5:93:20:f4:0b:99:79:c5:fd:52:01:fd:a1:20:5f:84:d2:06: df:78:56:e4:ef:2a:8f:b8:22:9f:4d:eb:29:8d:6a:31:74:23: aa:e0:63:66:3f:2b:a0:e6:ba:f3:55:9a:c9:e8:08:e3:85:60: bb:dd:bf:28:51:50:df:9a:e4:9e:37:01:69:f2:5c:74:3a:77: ce:dc:97:5e:56:ca:bd:5d:d8:e0:3d:49:eb:20:3f:51:3e:1a: 88:df:a3:0f:eb:66:2f:ac:64:72:f0:c5:4f:62:be:e1:a1:c8: 92:c9:1f:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fQne8vB3pL7J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YjMyOWU0NDUtMWQyOC00YjY4LThlNjktMmEwOWUwMjhhNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0Py0vroDnvF4GpTm3qQBEuyGwZ8j3yJR2Rj kIrkZtT5ru1b4UMpOAA3nUWI2CdHkG+2LORTTwm6SGsudG5mAcqJORyj/TbSSNOL +ZJgTHIa8q9T4FJ0DqgSAP4LyQ7dU7ESHBarfb6Msc1255reuGEgsToud0uVg9p4 6la65Naig1veAwcqYnj0AREyVypffmJz2wMbB5u0KxvDXEM0niRrW2PLXJKHADRd wC3fBuJmubHSB1zzDymAWYK67RAXhDvzg98+UibztMzfkqPAY60zffz2FvScy0jB Rs6f41cPwGxNpeFiJQ/w3IrvhEqLRCVz2WFWVMWMZh4HK0Nu4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeVI6WE2jwRVtYz+NuiuclMq/IwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvMjg4ZmM4ZGQtZWZlOS0z MTZhLWE3OTgtNWQ5NjU3NTUzZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ4XVY7y8w2seDYrjR/zh6pB3z3dIAlS0dYl+lHE3onlNYaYB98xqd3 ql94LnDnF7E8c+GI620lXFr+HvVg+NXo7L61Vl06tuH2QhfpNGOLAXsvei86L/hE qo9SwdG7k/+BtcerqBINEI5NsMvLP6+1B0UnCom7W1WHDLHDSl6AwS8N4qpSbRRZ bnlL5hNQtuWTIPQLmXnF/VIB/aEgX4TSBt94VuTvKo+4Ip9N6ymNajF0I6rgY2Y/ K6DmuvNVmsnoCOOFYLvdvyhRUN+a5J43AWnyXHQ6d87cl15Wyr1d2OA9SesgP1E+ Gojfow/rZi+sZHLwxU9ivuGhyJLJH2I= -----END CERTIFICATE-----Generated at Tue Oct 21 18:00:50 2025 by rpki-client