$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa File: 288fc8dd-efe9-316a-a798-5d9657553ed5.roa (raw, json) Hash identifier: NxkT4n7jkUPJ/Zqa3c74DxepZl3R/rrDQp9wKmggGjc= Subject key identifier: 22:18:AF:55:31:1D:BC:66:05:07:F6:59:97:6F:7D:76:F0:0F:34:E9 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584F4976BD8BB904B3360B1D2B80 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22241 IP address blocks: 52.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:bd:8b:b9:04:b3:36:0b:1d:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7d276ca1-9263-47a2-8492-f01f37011fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:43:6a:07:88:b0:51:8a:02:fe:a2:ab:25:7e: de:fd:7b:95:43:22:71:d2:36:39:ce:06:fc:4b:c6: b9:59:1d:8e:57:d9:82:fb:99:6d:e3:30:58:02:be: 44:e5:ea:6c:bc:7e:b5:15:95:f4:ee:ea:14:fb:ce: c0:33:91:18:6a:c6:32:5a:d5:19:aa:63:63:cc:2d: 61:3d:b9:6c:f5:52:3f:e8:db:2e:bf:d6:53:22:0d: 24:1a:83:4c:df:4b:d3:ad:ed:c8:80:dd:07:39:cd: f9:30:b9:8f:34:f4:7e:53:36:f8:52:7a:6c:b9:e8: c2:2d:57:64:13:89:c0:b1:fb:19:69:a4:68:6d:55: 31:03:83:c5:29:da:e8:0f:8d:96:07:9b:ab:6c:39: 58:97:fa:29:75:e3:cf:85:f0:23:79:41:35:ec:c9: f2:0b:05:04:ef:6a:ac:75:ef:45:e6:3c:09:32:a2: 2a:96:1b:84:57:0d:98:0e:96:e4:de:ae:6f:bf:bb: 18:01:98:99:18:d3:94:13:0c:79:af:ed:5a:9d:8e: ed:c6:64:ac:03:6d:f6:31:27:6b:77:01:c1:c3:39: cb:87:8a:fc:cc:1f:3b:0d:8e:a0:96:a9:5f:10:c6: 02:3c:65:9f:42:09:90:68:32:98:12:04:64:d0:2a: eb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:18:AF:55:31:1D:BC:66:05:07:F6:59:97:6F:7D:76:F0:0F:34:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/288fc8dd-efe9-316a-a798-5d9657553ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:da:97:73:85:12:56:f7:60:b0:1b:5c:59:a9:1f:5f:a1:e0: 7d:49:b2:33:2c:d5:1e:37:87:1f:67:04:d5:90:8f:90:9f:11: 56:0d:d0:da:3b:23:c9:74:fe:64:f2:26:c5:ef:fb:b4:78:dd: 2e:98:cf:0b:6e:98:6b:88:6f:aa:9a:30:80:5f:7c:56:e0:2e: 00:76:e7:56:29:27:ff:a0:4c:6a:90:bd:bf:7a:d6:f5:b4:b0: c9:d9:0a:43:47:49:3e:02:bd:8c:1c:10:03:a3:63:2c:a9:2b: 44:7f:60:65:c5:77:f1:3d:65:7d:10:25:8e:67:8c:b6:32:76: fa:54:d4:54:d8:89:93:5f:cf:b0:b5:5b:65:d2:1e:bd:57:4c: 0f:ab:9d:a1:45:f3:a8:ec:c1:f5:28:41:de:7e:4b:33:f1:e7: a9:a9:c6:8b:f4:a8:c9:40:21:9b:f4:f6:f3:1e:07:07:be:89: ff:e7:17:81:01:c1:8f:3c:cd:12:de:30:c1:15:7d:9f:c4:0f: 51:79:a6:a3:df:2d:63:f2:76:a8:33:f8:07:07:97:ec:89:72: 0a:72:c0:f9:a1:95:07:c0:30:a3:be:81:56:24:c2:3c:5c:2b: d0:f0:d4:7c:36:58:95:ef:4d:47:99:2c:1a:00:28:ae:89:cd: 91:7d:37:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdr2LuQSzNgsdK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2QyNzZjYTEtOTI2My00N2EyLTg0OTItZjAxZjM3MDExZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40NqB4iwUYoC/qKrJX7e/XuVQyJx0jY5zgb8 S8a5WR2OV9mC+5lt4zBYAr5E5epsvH61FZX07uoU+87AM5EYasYyWtUZqmNjzC1h Pbls9VI/6Nsuv9ZTIg0kGoNM30vTre3IgN0HOc35MLmPNPR+Uzb4UnpsuejCLVdk E4nAsfsZaaRobVUxA4PFKdroD42WB5urbDlYl/opdePPhfAjeUE17MnyCwUE72qs de9F5jwJMqIqlhuEVw2YDpbk3q5vv7sYAZiZGNOUEwx5r+1anY7txmSsA232MSdr dwHBwznLh4r8zB87DY6glqlfEMYCPGWfQgmQaDKYEgRk0CrrXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIYr1UxHbxmBQf2WZdvfXbwDzTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvMjg4ZmM4ZGQtZWZlOS0z MTZhLWE3OTgtNWQ5NjU3NTUzZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzal3OFElb3YLAbXFmpH1+h4H1JsjMs1R43hx9nBNWQj5CfEVYN0No7 I8l0/mTyJsXv+7R43S6YzwtumGuIb6qaMIBffFbgLgB251YpJ/+gTGqQvb961vW0 sMnZCkNHST4CvYwcEAOjYyypK0R/YGXFd/E9ZX0QJY5njLYydvpU1FTYiZNfz7C1 W2XSHr1XTA+rnaFF86jswfUoQd5+SzPx56mpxov0qMlAIZv09vMeBwe+if/nF4EB wY88zRLeMMEVfZ/ED1F5pqPfLWPydqgz+AcHl+yJcgpywPmhlQfAMKO+gVYkwjxc K9Dw1Hw2WJXvTUeZLBoAKK6JzZF9N5A= -----END CERTIFICATE-----Generated at Sat Sep 26 18:50:39 2026 by rpki-client