$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/f0b39196-a50a-3796-9cf0-8969367acc8b.roa File: f0b39196-a50a-3796-9cf0-8969367acc8b.roa (raw, json) Hash identifier: BGScf+rzRXmsboTKjJ3E0o5EAbZFVu+3VJFmJxUzcYg= Subject key identifier: D5:FC:72:00:38:32:BF:15:23:6B:2F:D1:7A:B2:2B:F9:9A:28:37:8B Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F4328584F4AD7DB98FE24993B692C3900 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/f0b39196-a50a-3796-9cf0-8969367acc8b.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 54004 IP address blocks: 52.128.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:db:98:fe:24:99:3b:69:2c:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=9c03bb29-d0a9-47c9-a010-55158a392ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:4d:e3:c2:ee:af:00:7b:6d:50:8c:60:00: 8c:e7:c1:b6:14:47:7c:cd:50:44:dd:df:6d:52:44: 29:ac:5e:fe:cf:4d:eb:f3:89:d9:72:44:3e:b9:fc: c9:9a:bd:65:20:ee:61:19:e7:38:de:4e:c4:24:38: a7:72:c4:35:82:70:cc:3b:64:45:2f:68:37:d6:29: c8:80:b1:9e:96:86:85:9f:e1:d4:da:51:3a:94:37: 17:68:1a:ce:19:96:5f:b9:8f:55:5b:6e:fc:fa:51: c5:51:a8:37:ff:33:af:4a:09:9f:c0:55:8c:66:76: 19:a7:b9:44:73:2a:9b:f4:75:97:f2:7b:18:ce:6b: 3a:9d:ca:77:a9:db:26:85:70:02:19:b9:dd:3c:fe: 97:e3:21:5f:c9:ca:6b:2f:03:25:39:9d:b3:54:0d: 24:4c:e8:f4:26:a8:c9:46:0b:a4:24:90:68:19:28: 62:8c:8a:20:20:46:30:a5:10:51:7d:bf:77:dd:46: 50:e5:0d:13:9b:9c:0d:43:c9:a4:e9:13:51:8c:95: 45:dd:24:bd:87:64:e9:a7:f3:de:f1:d3:01:b7:32: 3f:a6:18:42:90:d7:c0:4f:16:ca:a5:e0:9f:7a:d2: 83:81:24:2d:25:76:81:43:7b:1f:a1:25:7b:2a:f9: 8d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FC:72:00:38:32:BF:15:23:6B:2F:D1:7A:B2:2B:F9:9A:28:37:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/f0b39196-a50a-3796-9cf0-8969367acc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:23:5a:36:b4:d1:e7:5e:ff:4a:7c:9d:67:0d:63:b0:74:d6: 9b:b1:0d:2a:97:91:e5:20:c8:11:7c:86:1a:75:7b:be:e1:36: d4:dd:aa:f0:bd:ee:01:37:2a:57:55:0a:87:2a:00:ab:6a:a2: 17:ff:5f:57:05:67:6d:4f:4a:24:5c:96:fe:65:ab:ab:9c:4b: ea:6e:fd:42:b1:e7:87:fb:f8:b6:83:c9:c1:35:8b:37:70:07: a0:ac:65:94:dc:62:cc:cc:42:2a:91:c6:d5:14:95:5b:67:97: 42:a9:be:f5:33:98:23:7c:a5:10:c2:95:dc:2d:e3:06:1b:9c: 38:dc:92:7c:af:5b:ee:00:77:ad:67:56:ee:25:e6:d7:0f:a2: ff:03:bc:34:b0:dd:64:e6:eb:d4:ab:e8:ca:9d:1e:c8:39:3d: 31:f6:84:22:11:ce:28:e1:a1:fe:7d:02:f4:a5:92:c4:3a:14: 3b:51:96:47:0b:08:31:d6:ba:ff:aa:3d:62:21:99:7a:ad:dc: 88:e5:6c:e8:00:f1:8d:90:1f:11:b7:68:e9:23:39:49:58:bb: c2:71:82:89:eb:16:95:8e:b4:fb:b8:1b:53:99:dc:8d:54:9c: 33:9b:ec:f3:14:8d:6a:88:c9:f1:76:66:ac:73:ed:06:bc:a9: ab:cf:78:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K19uY/iSZO2ksOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk OWMwM2JiMjktZDBhOS00N2M5LWEwMTAtNTUxNThhMzkyY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQNN48LurwB7bVCMYACM58G2FEd8zVBE3d9t UkQprF7+z03r84nZckQ+ufzJmr1lIO5hGec43k7EJDincsQ1gnDMO2RFL2g31inI gLGeloaFn+HU2lE6lDcXaBrOGZZfuY9VW278+lHFUag3/zOvSgmfwFWMZnYZp7lE cyqb9HWX8nsYzms6ncp3qdsmhXACGbndPP6X4yFfycprLwMlOZ2zVA0kTOj0JqjJ RgukJJBoGShijIogIEYwpRBRfb933UZQ5Q0Tm5wNQ8mk6RNRjJVF3SS9h2Tpp/Pe 8dMBtzI/phhCkNfATxbKpeCfetKDgSQtJXaBQ3sfoSV7KvmNPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNX8cgA4Mr8VI2sv0XqyK/maKDeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvZjBiMzkxOTYtYTUwYS0z Nzk2LTljZjAtODk2OTM2N2FjYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADojWja00ede/0p8nWcNY7B01puxDSqXkeUgyBF8hhp1e77hNtTdqvC9 7gE3KldVCocqAKtqohf/X1cFZ21PSiRclv5lq6ucS+pu/UKx54f7+LaDycE1izdw B6CsZZTcYszMQiqRxtUUlVtnl0KpvvUzmCN8pRDCldwt4wYbnDjcknyvW+4Ad61n Vu4l5tcPov8DvDSw3WTm69Sr6MqdHsg5PTH2hCIRzijhof59AvSlksQ6FDtRlkcL CDHWuv+qPWIhmXqt3IjlbOgA8Y2QHxG3aOkjOUlYu8JxgonrFpWOtPu4G1OZ3I1U nDOb7PMUjWqIyfF2Zqxz7Qa8qavPeLI= -----END CERTIFICATE-----Generated at Sun Oct 4 18:35:55 2026 by rpki-client