$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa File: 949b9c71-af76-3dca-bf92-77173f62a9a6.roa (raw, json) Hash identifier: 0peo2yS2EGz9hToer0zBPbaxS1+RqdpyLiVIxH2PCvI= Subject key identifier: 78:7F:28:E6:B8:73:CE:A3:92:A9:84:FC:0C:A3:9D:4D:AC:75:0E:AF Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584D9E500951BC906C45C0147580 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 26967 IP address blocks: 52.144.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:09:51:bc:90:6c:45:c0:14:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=0270d4e4-d7ad-4671-b93e-1fa70dcd30d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a8:d8:6f:e4:51:54:97:f2:83:69:2b:09:71: 74:24:e1:54:64:64:e2:09:e1:2a:67:53:d9:3e:00: 1d:13:d9:2c:94:1a:11:87:06:f2:f7:6e:83:e2:24: 3c:f1:40:f5:fa:fb:f2:f4:77:e1:38:7d:9c:a7:37: 6e:c7:a9:92:ec:b3:c3:a9:c5:80:4f:f8:81:9b:1c: af:94:28:96:a3:d2:66:71:c4:de:af:5f:50:59:c0: 37:80:34:5b:1a:8f:ed:c7:84:bf:5a:25:45:e8:d8: c5:50:23:be:c0:80:c9:d0:94:45:9c:07:bf:15:17: 7c:79:16:82:d0:70:72:40:aa:d9:30:29:e7:2a:52: fa:5d:09:7d:13:74:aa:91:d4:e0:5b:8c:09:47:1f: 15:bf:a1:5b:0d:fa:db:0a:0f:be:b5:72:63:a0:fd: 5f:a8:68:23:d4:91:c4:51:e6:fb:27:b8:25:a5:3f: 7b:34:0e:6a:05:77:ad:91:22:2c:38:d1:9f:e4:72: f0:ef:e3:4b:8c:bd:a4:61:ea:a0:e9:c6:2d:9d:a7: b0:01:49:8e:7a:ec:08:77:85:90:02:8d:60:46:7c: a0:af:c9:a7:62:32:55:2e:78:38:19:00:ab:fb:bd: 46:ee:d7:bc:a8:3b:f4:90:93:50:2d:45:d4:6f:a6: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7F:28:E6:B8:73:CE:A3:92:A9:84:FC:0C:A3:9D:4D:AC:75:0E:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b6:1d:1f:e8:0d:82:4a:42:dc:1c:1f:10:30:ac:f9:f2:3f: af:5c:5e:bd:f0:43:a2:b9:67:3f:51:73:6b:cc:f8:9b:78:ba: e3:93:1d:86:6b:dc:91:1d:31:85:8d:33:d1:b4:1a:57:58:90: a8:51:b7:7e:32:7c:3c:ce:2e:0f:5b:6f:cb:2a:bb:8a:47:0e: 50:b2:db:b5:68:17:9e:67:27:cf:24:a2:5c:61:ec:34:d1:4a: 58:80:85:21:52:13:b8:65:54:d8:b4:00:8e:9a:c8:59:26:d6: 8b:e3:ae:5a:c8:22:46:bb:d8:f5:ea:64:32:02:1d:94:e4:10: 77:ce:0b:fe:ec:16:9c:19:7f:cd:04:74:fb:5f:34:68:73:7c: 4b:e3:af:a1:0d:1d:33:95:5d:e4:77:2f:50:56:3e:2c:28:7c: c5:0b:61:2f:1f:78:52:a6:41:08:2a:7c:a4:9d:fd:17:55:ac: b9:03:47:6b:4a:00:81:f8:80:5d:19:93:5f:02:8e:f5:db:d8: e9:08:aa:87:fb:88:a5:07:75:dc:c3:54:d5:0e:98:f7:41:0d: 6f:e7:10:00:56:cc:a9:79:46:fc:cd:24:99:de:72:1f:6d:d1: 8c:c7:7e:4a:59:6e:6a:63:19:44:1e:ba:3c:a4:9a:e5:01:6d: fc:52:d7:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAlRvJBsRcAUdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MDI3MGQ0ZTQtZDdhZC00NjcxLWI5M2UtMWZhNzBkY2QzMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKjYb+RRVJfyg2krCXF0JOFUZGTiCeEqZ1PZ PgAdE9kslBoRhwby926D4iQ88UD1+vvy9HfhOH2cpzdux6mS7LPDqcWAT/iBmxyv lCiWo9JmccTer19QWcA3gDRbGo/tx4S/WiVF6NjFUCO+wIDJ0JRFnAe/FRd8eRaC 0HByQKrZMCnnKlL6XQl9E3SqkdTgW4wJRx8Vv6FbDfrbCg++tXJjoP1fqGgj1JHE Ueb7J7glpT97NA5qBXetkSIsONGf5HLw7+NLjL2kYeqg6cYtnaewAUmOeuwId4WQ Ao1gRnygr8mnYjJVLng4GQCr+71G7te8qDv0kJNQLUXUb6aPawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHh/KOa4c86jkqmE/AyjnU2sdQ6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOTQ5YjljNzEtYWY3Ni0z ZGNhLWJmOTItNzcxNzNmNjJhOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA62HR/oDYJKQtwcHxAwrPnyP69cXr3wQ6K5Zz9Rc2vM+Jt4uuOTHYZr 3JEdMYWNM9G0GldYkKhRt34yfDzOLg9bb8squ4pHDlCy27VoF55nJ88kolxh7DTR SliAhSFSE7hlVNi0AI6ayFkm1ovjrlrIIka72PXqZDICHZTkEHfOC/7sFpwZf80E dPtfNGhzfEvjr6ENHTOVXeR3L1BWPiwofMULYS8feFKmQQgqfKSd/RdVrLkDR2tK AIH4gF0Zk18CjvXb2OkIqof7iKUHddzDVNUOmPdBDW/nEABWzKl5RvzNJJnech9t 0YzHfkpZbmpjGUQeujykmuUBbfxS11Q= -----END CERTIFICATE-----Generated at Wed May 13 17:02:54 2026 by rpki-client