$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/f946e001-6257-3142-994b-9a43a5c2ba92.roa File: f946e001-6257-3142-994b-9a43a5c2ba92.roa (raw, json) Hash identifier: jlsqkGGxS8bz0NgCtjwMhgD+4MQHoPAerQKqBkwHIHg= Subject key identifier: 4E:96:A7:34:B6:30:1D:3F:45:B3:72:1A:42:78:91:C7:F7:04:68:D2 Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F4328584F4AD7DB37655AC7346A3E55C0 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/f946e001-6257-3142-994b-9a43a5c2ba92.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 174 IP address blocks: 52.128.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:db:37:65:5a:c7:34:6a:3e:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=2da9628e-378f-4f96-a788-b5398933ccc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:61:ab:f7:f6:b4:21:30:ed:e8:41:d4:44: 7f:69:43:0a:63:1c:7d:1b:78:28:5c:bc:75:5c:60: 14:f7:ea:84:f5:a2:b6:7d:b5:13:f6:5d:5a:31:e4: 5e:94:3b:35:1f:3f:4f:69:02:c7:ec:12:7e:c4:45: 34:31:cc:e0:da:be:8b:2e:33:df:33:10:a6:76:be: de:84:29:ec:b4:ce:ef:06:b0:f8:de:a9:38:80:6f: 87:bb:37:a9:af:d7:de:e8:0d:fe:32:90:c3:1b:01: da:26:f7:2f:d1:10:35:90:f9:ab:bb:96:84:6c:03: 3c:01:98:09:27:62:02:52:cd:90:3a:cd:12:de:d3: 16:d8:84:c8:5f:06:66:9e:f5:83:b7:b3:4d:5f:3c: 82:73:fc:cd:f0:33:b5:b3:76:ef:21:20:b0:03:2d: 94:3d:77:af:cc:88:17:2c:93:7f:6c:4d:6a:4b:ed: 1d:9a:00:61:ec:02:a5:91:1b:ec:d7:cf:68:5a:5e: 39:ab:96:59:e9:00:e6:36:4e:b0:f4:54:55:71:0c: c7:e1:85:db:d4:51:31:b3:e6:2d:8a:60:22:0c:71: ce:48:1f:b6:ca:84:55:3c:93:ad:f3:d4:b8:82:ff: e7:44:08:4b:18:8c:37:bd:c9:bf:c9:ac:cb:ce:3c: 7d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:96:A7:34:B6:30:1D:3F:45:B3:72:1A:42:78:91:C7:F7:04:68:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/f946e001-6257-3142-994b-9a43a5c2ba92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:29:5d:c8:41:51:54:12:da:84:f0:96:22:ce:94:85:03:49: 52:cd:4f:47:04:f4:cc:8e:77:70:61:99:2f:79:3e:92:a3:ea: 02:e7:af:19:c5:c6:6e:05:71:ee:4d:c3:4d:a5:bd:57:68:89: f8:25:b7:71:11:a5:89:ca:a0:01:63:50:b4:26:12:c2:d4:07: 51:e2:01:3a:19:e8:12:13:1e:e3:02:93:ea:50:91:62:62:d9: 19:81:a8:7e:88:73:e9:ea:c9:4c:1d:5e:c5:6a:51:e7:a5:62: d0:53:db:18:aa:29:4f:95:d1:0f:77:b9:26:81:12:6b:b4:23: 00:36:b2:b9:f7:4f:63:d4:3a:24:24:f9:98:6c:e9:7c:0e:06: 42:d2:a7:61:da:34:e9:f0:5f:0b:fb:3f:e6:df:6c:78:29:74: 3b:5a:71:76:4e:d4:1d:cc:d3:f7:15:9a:f4:68:bc:a1:09:76: 67:90:0e:10:99:6a:e5:0b:85:cf:fe:1c:cf:18:69:4c:01:8b: 4f:66:6c:bd:09:6f:d6:5a:b9:3d:b4:68:ac:6d:c8:29:5b:d6: 6a:d5:5a:2e:43:ca:c5:0e:26:52:19:af:94:7e:70:0b:01:7d: e9:dd:33:e6:21:db:96:21:3d:40:9b:d3:43:58:b9:dd:b0:58: 4c:f3:b4:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K19s3ZVrHNGo+VcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk MmRhOTYyOGUtMzc4Zi00Zjk2LWE3ODgtYjUzOTg5MzNjY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa5hq/f2tCEw7ehB1ER/aUMKYxx9G3goXLx1 XGAU9+qE9aK2fbUT9l1aMeRelDs1Hz9PaQLH7BJ+xEU0Mczg2r6LLjPfMxCmdr7e hCnstM7vBrD43qk4gG+Huzepr9fe6A3+MpDDGwHaJvcv0RA1kPmru5aEbAM8AZgJ J2ICUs2QOs0S3tMW2ITIXwZmnvWDt7NNXzyCc/zN8DO1s3bvISCwAy2UPXevzIgX LJN/bE1qS+0dmgBh7AKlkRvs189oWl45q5ZZ6QDmNk6w9FRVcQzH4YXb1FExs+Yt imAiDHHOSB+2yoRVPJOt89S4gv/nRAhLGIw3vcm/yazLzjx9KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6WpzS2MB0/RbNyGkJ4kcf3BGjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvZjk0NmUwMDEtNjI1Ny0z MTQyLTk5NGItOWE0M2E1YzJiYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4pXchBUVQS2oTwliLOlIUDSVLNT0cE9MyOd3BhmS95PpKj6gLnrxnF xm4Fce5Nw02lvVdoifglt3ERpYnKoAFjULQmEsLUB1HiAToZ6BITHuMCk+pQkWJi 2RmBqH6Ic+nqyUwdXsVqUeelYtBT2xiqKU+V0Q93uSaBEmu0IwA2srn3T2PUOiQk +Zhs6XwOBkLSp2HaNOnwXwv7P+bfbHgpdDtacXZO1B3M0/cVmvRovKEJdmeQDhCZ auULhc/+HM8YaUwBi09mbL0Jb9ZauT20aKxtyClb1mrVWi5DysUOJlIZr5R+cAsB fendM+Yh25YhPUCb00NYud2wWEzztN4= -----END CERTIFICATE-----Generated at Mon Sep 28 06:20:41 2026 by rpki-client