$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa File: e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa (raw, json) Hash identifier: KmYaGOB9QJQw3zaqBD8mo+Zx4f8m9J8Hsba0Pv/KiVI= Subject key identifier: 0B:DF:EC:1D:C0:51:E5:41:55:D5:4A:8F:CB:21:C6:62:B5:1F:83:21 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584F4976D1F50C7F5CE609B1A080 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400745 IP address blocks: 52.129.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:d1:f5:0c:7f:5c:e6:09:b1:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=28fb03c5-e042-4096-a338-c89e41ecfe6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a6:28:2e:3e:61:d6:bd:24:63:4d:a6:35:6e: e8:65:7c:31:b7:c3:fc:ad:17:e5:68:02:ac:66:9f: 1f:ab:d4:74:9b:be:d7:75:2b:2c:4b:1c:39:02:21: aa:d4:fe:ba:b1:39:60:c8:b6:8b:f0:bc:6d:d9:97: 87:0e:10:6e:c2:fb:e6:df:79:70:2c:c1:f8:64:53: 68:4d:d0:d4:59:cb:81:d8:15:3d:47:f4:5a:0f:1f: 6d:f8:a6:57:5e:c2:d8:2a:32:1e:e0:30:26:da:35: 03:cc:9b:69:58:22:c6:de:f6:b8:71:b0:65:aa:2e: c1:a1:fa:98:c7:01:89:00:a6:c3:8b:70:00:35:c6: b1:cc:73:52:d9:c9:3e:57:5d:28:f1:b7:ce:be:ba: 3e:d7:0d:7c:7d:8d:21:81:d0:a9:7b:42:98:3d:98: 9c:03:07:66:ac:20:06:b0:df:d2:b2:0f:0d:4f:4d: 31:ba:b6:be:9f:d5:17:1e:b4:37:e9:98:78:68:cd: 75:c8:70:f1:d5:60:f1:51:73:48:9d:c9:10:79:aa: 34:bf:7c:40:87:7e:93:a0:fd:60:b5:f7:3f:84:19: 86:cf:98:c7:e1:7a:ab:34:ef:09:70:04:89:d6:07: 19:6d:df:34:d5:36:2e:0d:ef:66:ce:23:8d:44:18: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DF:EC:1D:C0:51:E5:41:55:D5:4A:8F:CB:21:C6:62:B5:1F:83:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:df:53:81:4f:bb:81:b5:bb:8d:04:f5:8f:3d:5c:23:a2:6e: b8:21:d1:bc:17:cb:0e:e3:ce:20:96:8c:73:bb:fa:c7:e8:b8: db:cb:3a:2e:5b:a4:6b:d0:4e:53:75:63:e1:a1:74:81:c1:dc: 3b:57:6b:4b:18:0c:b6:33:09:c1:30:f1:47:e5:6d:81:ba:a3: 25:ef:e0:8b:22:5a:a7:a6:f4:3f:88:d7:d8:b1:ed:37:73:3e: 7c:54:65:a7:ee:6a:1e:34:96:35:12:d6:79:a1:dd:f2:da:b0: 1b:0a:fc:f7:5a:fb:67:a8:6e:b4:4b:ad:4c:53:1c:ee:0e:d3: 7a:f5:13:ee:99:6b:67:87:a3:53:e7:e2:38:e5:e1:78:f1:86: 4d:a2:e6:a5:ca:24:d2:45:6f:b5:ac:8f:3d:02:d6:00:d8:d2: dd:59:99:dc:a8:29:a4:8a:0e:e5:79:64:5e:9f:6b:26:ec:ab: 99:5d:dc:53:c5:5c:2b:73:fc:7e:f9:09:33:b4:b0:d5:94:f2: 41:b0:a5:c0:6b:56:f2:3f:a1:e3:0a:4c:1a:a6:33:6c:99:17: 16:0a:ea:87:8b:4f:59:2c:eb:8b:48:c7:11:67:1c:72:f6:43: 0d:38:a7:02:63:ba:7a:c9:76:8e:f1:0c:25:0b:1b:18:88:6f: d5:b8:de:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdtH1DH9c5gmxoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjhmYjAzYzUtZTA0Mi00MDk2LWEzMzgtYzg5ZTQxZWNmZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKYoLj5h1r0kY02mNW7oZXwxt8P8rRflaAKs Zp8fq9R0m77XdSssSxw5AiGq1P66sTlgyLaL8Lxt2ZeHDhBuwvvm33lwLMH4ZFNo TdDUWcuB2BU9R/RaDx9t+KZXXsLYKjIe4DAm2jUDzJtpWCLG3va4cbBlqi7BofqY xwGJAKbDi3AANcaxzHNS2ck+V10o8bfOvro+1w18fY0hgdCpe0KYPZicAwdmrCAG sN/Ssg8NT00xura+n9UXHrQ36Zh4aM11yHDx1WDxUXNInckQeao0v3xAh36ToP1g tfc/hBmGz5jH4XqrNO8JcASJ1gcZbd801TYuDe9mziONRBi9pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvf7B3AUeVBVdVKj8shxmK1H4MhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZTNlMjg4MTktOTQ4Ny0z ZmVhLWI1ZWEtYjRmM2RiYjRmOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3fU4FPu4G1u40E9Y89XCOibrgh0bwXyw7jziCWjHO7+sfouNvLOi5b pGvQTlN1Y+GhdIHB3DtXa0sYDLYzCcEw8UflbYG6oyXv4IsiWqem9D+I19ix7Tdz PnxUZafuah40ljUS1nmh3fLasBsK/Pda+2eobrRLrUxTHO4O03r1E+6Za2eHo1Pn 4jjl4Xjxhk2i5qXKJNJFb7Wsjz0C1gDY0t1ZmdyoKaSKDuV5ZF6faybsq5ld3FPF XCtz/H75CTO0sNWU8kGwpcBrVvI/oeMKTBqmM2yZFxYK6oeLT1ks64tIxxFnHHL2 Qw04pwJjunrJdo7xDCULGxiIb9W43vQ= -----END CERTIFICATE-----Generated at Sat Sep 26 16:17:53 2026 by rpki-client