$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa File: afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa (raw, json) Hash identifier: /SNwKFjJXzsiLW+i2OwABQKVjuYZcO3CVuwlxBUnyHk= Subject key identifier: EE:0D:CC:52:FE:30:14:EF:F8:16:C3:55:C4:C1:E3:AE:6D:0C:31:C4 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F4328584F3FAD3474030A1923A9441400 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 52.129.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:34:74:03:0a:19:23:a9:44:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=aa3abb48-bfe5-45c5-85a6-01e8acbec831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:b8:96:d5:1b:4d:33:ad:8b:0c:46:95:39: 69:27:52:43:8a:cd:a1:d3:d4:7d:8b:4b:e3:5b:91: 65:d9:0e:b5:78:6d:80:5d:3f:b5:d5:c0:cb:ef:5b: cc:00:f2:36:b6:9c:9a:b2:42:28:e8:48:fe:9f:72: 10:35:6b:4b:bf:0f:1b:16:77:04:d6:0a:c6:0e:d7: 3b:45:2d:52:75:c6:f5:7a:9b:fc:1c:f0:b3:ab:7f: 6b:90:4e:69:50:7b:7a:8d:9e:57:9b:08:cb:b9:ea: cb:c4:a8:22:20:11:2e:c1:90:c0:30:27:7f:46:9e: ad:44:37:4c:c7:da:6f:46:d2:5e:15:7a:83:83:34: a1:49:fb:84:84:40:02:a3:eb:e8:05:59:49:ec:78: 11:83:cb:38:7b:83:dc:fc:3e:37:ab:f9:77:37:fa: 6f:9c:59:1e:7d:da:fd:1a:99:6a:b7:c8:5d:54:50: 5e:3b:4b:1f:9c:9d:c1:a3:0b:7f:35:2d:b9:d0:29: bc:37:e7:6c:06:a3:d6:d0:05:e8:58:bf:17:73:b4: 93:f3:24:13:10:f5:87:e1:a8:45:43:79:ad:25:1b: df:fe:fd:6d:21:c6:23:d5:31:14:31:3c:94:5e:2f: c4:81:d3:59:29:bd:c6:6e:4b:74:1b:54:98:53:73: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0D:CC:52:FE:30:14:EF:F8:16:C3:55:C4:C1:E3:AE:6D:0C:31:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e1:ab:fe:5b:19:6b:5d:b0:8c:d2:66:a9:58:f9:5b:8f:82: a7:bb:ba:3f:5c:32:9e:1b:50:41:0b:61:e8:d9:9e:9d:97:83: a1:73:e5:f3:1a:94:a3:ba:ef:aa:12:3e:0d:4a:c4:8d:53:3b: 88:d9:37:b6:40:a6:69:73:dc:ee:0d:29:d6:0d:0d:9d:54:32: ac:82:01:55:bc:7c:f5:c7:74:1f:8c:41:a9:b2:24:51:04:f0: 6e:ac:18:36:69:0c:0c:04:79:eb:65:54:18:21:d9:a0:10:96: e9:56:18:1d:d4:67:08:0a:5a:b3:7c:bb:d5:05:05:cd:80:05: 7e:1d:10:fd:c7:b8:10:45:f8:7c:ed:21:57:63:bb:94:8c:c7: a3:72:86:ce:da:76:23:03:e5:df:8c:e4:ac:e4:96:aa:3e:a5: e6:0d:d6:b2:0e:84:01:db:c1:e5:1a:15:f1:d6:34:46:89:24: 7f:e5:6f:78:37:93:fd:63:2e:20:75:54:2a:40:33:a5:e9:b3: 79:c3:75:91:5c:09:2f:1e:53:ee:df:d3:7b:58:18:a3:18:df: 0f:29:60:6e:5e:fb:fa:da:57:ed:45:6b:15:96:1f:1a:3d:c5: 0b:42:fa:f9:74:73:42:ba:3a:09:c5:5b:cf:ca:e4:24:da:91: 7e:3f:b5:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTR0AwoZI6lEFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YWEzYWJiNDgtYmZlNS00NWM1LTg1YTYtMDFlOGFjYmVjODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsty4ltUbTTOtiwxGlTlpJ1JDis2h09R9i0vj W5Fl2Q61eG2AXT+11cDL71vMAPI2tpyaskIo6Ej+n3IQNWtLvw8bFncE1grGDtc7 RS1Sdcb1epv8HPCzq39rkE5pUHt6jZ5XmwjLuerLxKgiIBEuwZDAMCd/Rp6tRDdM x9pvRtJeFXqDgzShSfuEhEACo+voBVlJ7HgRg8s4e4Pc/D43q/l3N/pvnFkefdr9 Gplqt8hdVFBeO0sfnJ3Bowt/NS250Cm8N+dsBqPW0AXoWL8Xc7ST8yQTEPWH4ahF Q3mtJRvf/v1tIcYj1TEUMTyUXi/EgdNZKb3Gbkt0G1SYU3PCJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4NzFL+MBTv+BbDVcTB465tDDHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvYWZiOWI0ODItZDRmMS0z ZGMzLWFhNmMtYTliZjE3YmQxYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDhq/5bGWtdsIzSZqlY+VuPgqe7uj9cMp4bUEELYejZnp2Xg6Fz5fMa lKO676oSPg1KxI1TO4jZN7ZApmlz3O4NKdYNDZ1UMqyCAVW8fPXHdB+MQamyJFEE 8G6sGDZpDAwEeetlVBgh2aAQlulWGB3UZwgKWrN8u9UFBc2ABX4dEP3HuBBF+Hzt IVdju5SMx6Nyhs7adiMD5d+M5Kzklqo+peYN1rIOhAHbweUaFfHWNEaJJH/lb3g3 k/1jLiB1VCpAM6Xps3nDdZFcCS8eU+7f03tYGKMY3w8pYG5e+/raV+1FaxWWHxo9 xQtC+vl0c0K6OgnFW8/K5CTakX4/tTQ= -----END CERTIFICATE-----Generated at Sun Sep 27 08:53:07 2026 by rpki-client