$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/4b56dc87-70d9-397b-bf76-7c918176aa3b.roa File: 4b56dc87-70d9-397b-bf76-7c918176aa3b.roa (raw, json) Hash identifier: QRBkUA2oTTPlq4z+tNhLSzpKLE4jIYqjgQsn6cQ8pJ8= Subject key identifier: 48:B3:AF:30:18:C2:04:5C:D7:C5:D8:35:A2:B6:D2:71:D0:89:89:21 Certificate issuer: /CN=c8607cef-f8a0-4a7c-8845-db8d32964491 Certificate serial: 010D0C9F4328584DA11ABB95B421ED494F9C85C0 Authority key identifier: 44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/4b56dc87-70d9-397b-bf76-7c918176aa3b.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 398335 IP address blocks: 52.129.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:bb:95:b4:21:ed:49:4f:9c:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8607cef-f8a0-4a7c-8845-db8d32964491 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=68650893-d5fa-423d-86ab-7f386ea216d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:74:b4:1a:d6:fa:77:9c:72:5e:57:a4:16:2d: c6:ff:1d:94:2b:9e:7c:66:23:53:70:00:cd:78:b2: b3:c1:5d:d3:16:7b:59:05:bb:a1:77:4d:92:84:c1: b7:6f:9f:4e:31:7a:d0:70:e5:a0:58:35:ea:36:ef: 69:a5:91:3c:36:c0:f0:36:f0:cc:05:65:61:53:21: ae:83:4b:1c:83:28:19:68:83:cf:15:4e:13:6a:f8: e0:93:b9:e3:eb:0e:5c:f1:18:61:68:f0:5a:a9:b9: 8d:da:cb:38:d8:0e:23:1e:4f:bc:4f:09:a2:b2:45: a0:12:49:df:63:33:28:88:d6:12:5d:21:3a:d0:a4: ce:cb:04:85:dc:d6:01:dc:6a:97:60:e1:9d:86:36: 3e:96:a7:94:b9:2b:5c:72:0e:da:ea:bc:f8:bc:54: 9b:2c:a5:37:7c:2b:77:9b:df:ca:7b:54:0e:bf:ce: ef:f3:b3:3e:b7:2f:00:40:25:b1:af:e8:bc:46:6a: cd:4c:32:61:a5:24:34:fb:ae:05:ef:9a:06:d0:e8: c9:f5:43:79:61:d3:47:a9:22:ed:3f:b3:37:31:27: 35:3d:b0:5d:3f:de:91:4d:75:f5:b5:27:14:0c:75: 1f:d7:3a:fc:3f:2a:95:e1:7e:a7:cb:d6:67:81:fb: 41:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B3:AF:30:18:C2:04:5C:D7:C5:D8:35:A2:B6:D2:71:D0:89:89:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/4b56dc87-70d9-397b-bf76-7c918176aa3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.crl X509v3 Authority Key Identifier: keyid:44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer sbgp-ipAddrBlock: critical IPv4: 52.129.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:26:b5:fc:f5:cf:da:a9:85:fc:f5:48:0e:8f:e8:94:ba:c8: 43:d2:6f:42:83:d8:d1:63:46:a2:d4:f5:f3:b8:69:16:af:99: 27:74:9b:95:f8:0b:87:f6:b5:c0:f2:34:94:42:60:2f:18:05: cc:8c:3f:21:08:32:c8:fe:41:48:4a:56:93:15:65:2d:49:65: 23:37:5a:0c:09:3b:3f:b9:32:c7:f4:91:e8:a5:8e:b9:6d:e5: 5d:0f:56:8d:e3:74:fb:f9:99:0b:f1:1b:0f:f1:56:3c:b3:65: 1a:4d:2f:8a:66:b3:70:10:8d:56:cd:14:4a:7c:d7:c3:9d:85: 43:7a:46:cf:10:e3:f2:cb:e6:3e:61:b1:f9:9b:a0:80:e9:04: d1:92:c4:bf:09:de:76:e5:65:d4:7e:19:61:ed:65:be:33:41: 91:09:4b:c2:09:1d:d3:5c:d9:20:8b:71:aa:0b:be:fa:18:0f: 33:11:5f:ef:8b:e0:5a:d4:17:83:45:a9:4d:38:19:7e:a8:57: 19:ab:a1:1c:93:09:66:21:2d:71:ca:f2:d7:ef:a6:4b:5b:5d: ba:b0:26:e3:fd:cd:90:a2:ba:24:2c:3e:f1:e5:77:90:45:52: 7e:aa:4c:6c:ae:8d:d1:1a:d4:ff:92:ae:41:ff:24:38:b5:da: 7f:44:fd:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGruVtCHtSU+chcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2MDdjZWYtZjhhMC00YTdjLTg4NDUtZGI4ZDMyOTY0 NDkxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk Njg2NTA4OTMtZDVmYS00MjNkLTg2YWItN2YzODZlYTIxNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3S0Gtb6d5xyXlekFi3G/x2UK558ZiNTcADN eLKzwV3TFntZBbuhd02ShMG3b59OMXrQcOWgWDXqNu9ppZE8NsDwNvDMBWVhUyGu g0scgygZaIPPFU4Tavjgk7nj6w5c8RhhaPBaqbmN2ss42A4jHk+8TwmiskWgEknf YzMoiNYSXSE60KTOywSF3NYB3GqXYOGdhjY+lqeUuStccg7a6rz4vFSbLKU3fCt3 m9/Ke1QOv87v87M+ty8AQCWxr+i8RmrNTDJhpSQ0+64F75oG0OjJ9UN5YdNHqSLt P7M3MSc1PbBdP96RTXX1tScUDHUf1zr8PyqV4X6ny9ZngftBawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEizrzAYwgRc18XYNaK20nHQiYkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jODYw N2NlZi1mOGEwLTRhN2MtODg0NS1kYjhkMzI5NjQ0OTEvNGI1NmRjODctNzBkOS0z OTdiLWJmNzYtN2M5MTgxNzZhYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzg2MDdjZWYtZjhhMC00YTdjLTg4 NDUtZGI4ZDMyOTY0NDkxL2M4NjA3Y2VmLWY4YTAtNGE3Yy04ODQ1LWRiOGQzMjk2 NDQ5MS5jcmwwHwYDVR0jBBgwFoAURAjE0NXhLxiKQjdpYB6ET2n3TTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jODYwN2NlZi1mOGEwLTRhN2MtODg0NS1kYjhk MzI5NjQ0OTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNIEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKImtfz1z9qphfz1SA6P6JS6yEPSb0KD2NFjRqLU9fO4aRavmSd0m5X4 C4f2tcDyNJRCYC8YBcyMPyEIMsj+QUhKVpMVZS1JZSM3WgwJOz+5Msf0keiljrlt 5V0PVo3jdPv5mQvxGw/xVjyzZRpNL4pms3AQjVbNFEp818OdhUN6Rs8Q4/LL5j5h sfmboIDpBNGSxL8J3nblZdR+GWHtZb4zQZEJS8IJHdNc2SCLcaoLvvoYDzMRX++L 4FrUF4NFqU04GX6oVxmroRyTCWYhLXHK8tfvpktbXbqwJuP9zZCiuiQsPvHld5BF Un6qTGyujdEa1P+SrkH/JDi12n9E/ZI= -----END CERTIFICATE-----Generated at Wed May 13 08:43:57 2026 by rpki-client