$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/923d1b31-3644-4847-8ba8-6d69eaa4e4c1/aa14510a-e2fb-360c-9e17-ce6996df7db5.roa File: aa14510a-e2fb-360c-9e17-ce6996df7db5.roa (raw, json) Hash identifier: HTYoBFo9kj+TpIrtwBhHeHtCgKNc93lq6N/J8/QGZfs= Subject key identifier: FA:F2:B1:64:61:67:6B:A5:7A:2B:7E:E7:E4:E3:2E:4F:5F:68:38:FD Certificate issuer: /CN=923d1b31-3644-4847-8ba8-6d69eaa4e4c1 Certificate serial: 010D0C9F4328584D1B19E7973CBBE26053B6C180 Authority key identifier: 73:CD:B5:3C:1D:0A:00:99:A2:D3:8D:DE:CA:1E:CE:ED:5D:A8:2C:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/923d1b31-3644-4847-8ba8-6d69eaa4e4c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/923d1b31-3644-4847-8ba8-6d69eaa4e4c1/aa14510a-e2fb-360c-9e17-ce6996df7db5.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 40357 IP address blocks: 52.119.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/923d1b31-3644-4847-8ba8-6d69eaa4e4c1/923d1b31-3644-4847-8ba8-6d69eaa4e4c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/923d1b31-3644-4847-8ba8-6d69eaa4e4c1/923d1b31-3644-4847-8ba8-6d69eaa4e4c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/923d1b31-3644-4847-8ba8-6d69eaa4e4c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:e7:97:3c:bb:e2:60:53:b6:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923d1b31-3644-4847-8ba8-6d69eaa4e4c1 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=4b00eed5-8327-413e-a63f-3c8cc19c042e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:42:c9:0f:bf:44:f6:01:dd:c2:26:06:d3: 8b:54:82:02:04:5e:98:92:17:b6:f5:f4:7b:fe:9b: 3a:9e:c4:98:5c:f6:f7:ed:74:24:ca:63:c9:37:50: be:12:bb:18:78:ee:1c:f7:6f:36:7e:33:99:c8:1d: 92:ed:ba:c1:da:79:e0:44:a9:0a:79:62:2d:72:77: 5a:f0:a9:ff:0f:c6:de:af:3b:7c:4c:7d:d0:ac:a5: 45:7a:f7:86:60:de:56:ab:00:72:33:fb:26:b3:1a: 9b:47:92:6a:5b:d3:8c:f4:59:20:fe:2e:7b:e4:47: 6f:57:29:3e:4b:e2:51:6a:07:b8:ed:a6:b5:f3:5c: 19:b6:36:03:28:0b:05:bf:c7:4f:5f:cf:4d:ee:9a: fb:87:34:b2:54:ed:2d:6f:ca:51:86:2b:bb:05:06: ef:d0:9c:97:e0:44:6f:dc:9f:d8:e4:7f:27:7a:4d: 1a:7a:2f:c0:c7:0a:6f:05:bb:59:9f:36:ad:c3:a6: ad:b7:cf:cb:00:0c:fe:47:e9:99:36:51:fa:8c:7c: 9f:a7:c4:cf:4f:1a:3b:99:c4:b2:d8:ca:62:6c:d8: f2:e1:2d:fa:f8:e2:92:e9:2d:49:89:f0:9d:4f:b1: 68:6c:31:6f:2d:ca:24:7a:5f:c4:95:9f:42:54:f0: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F2:B1:64:61:67:6B:A5:7A:2B:7E:E7:E4:E3:2E:4F:5F:68:38:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/923d1b31-3644-4847-8ba8-6d69eaa4e4c1/aa14510a-e2fb-360c-9e17-ce6996df7db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/923d1b31-3644-4847-8ba8-6d69eaa4e4c1/923d1b31-3644-4847-8ba8-6d69eaa4e4c1.crl X509v3 Authority Key Identifier: keyid:73:CD:B5:3C:1D:0A:00:99:A2:D3:8D:DE:CA:1E:CE:ED:5D:A8:2C:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/923d1b31-3644-4847-8ba8-6d69eaa4e4c1.cer sbgp-ipAddrBlock: critical IPv4: 52.119.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e1:f7:bf:79:20:6e:16:d0:c4:7e:6e:de:d1:23:01:c2:5e: da:78:ab:af:c4:0e:b3:ea:0d:7a:81:85:fc:90:c7:3d:f8:a7: ad:40:c4:17:79:8d:55:5c:17:bd:e3:97:8e:67:c0:07:bd:55: 02:d7:06:f9:19:65:34:a4:05:ac:26:76:1b:38:72:5a:28:f3: e3:f7:1b:33:4e:d2:3a:9b:db:0c:c7:86:59:87:7c:c5:6d:95: ff:c3:fa:22:08:48:3d:81:f7:d5:e2:47:68:1a:8f:09:ca:4f: 32:22:9b:8f:9f:db:f4:c3:fd:ee:d4:2e:ee:56:b6:6e:d2:f5: b5:bb:9c:df:13:21:66:dc:e4:3e:cb:df:da:a9:f9:97:12:6e: 74:a9:83:9f:ef:6a:eb:d0:2b:99:01:12:25:1c:09:fb:b6:af: 1a:34:90:06:9d:0e:2f:f5:06:55:0f:d9:a9:f8:b4:e8:71:bc: 76:09:a9:49:6d:f5:43:2e:10:a7:a8:ea:9c:ef:8d:95:3d:7e: a9:92:e7:a1:9c:eb:24:f7:f8:9e:5c:a8:2f:bb:8d:1c:59:3c: 58:1a:1b:b4:61:c6:68:07:9e:0d:16:8b:1d:a3:69:07:37:df: 46:0b:c1:e4:9d:51:ac:bc:98:37:7f:83:e2:55:6d:0e:a4:7f: 5d:e3:da:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGeeXPLviYFO2wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIzZDFiMzEtMzY0NC00ODQ3LThiYTgtNmQ2OWVhYTRl NGMxMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NGIwMGVlZDUtODMyNy00MTNlLWE2M2YtM2M4Y2MxOWMwNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGZCyQ+/RPYB3cImBtOLVIICBF6Ykhe29fR7 /ps6nsSYXPb37XQkymPJN1C+ErsYeO4c9282fjOZyB2S7brB2nngRKkKeWItcnda 8Kn/D8berzt8TH3QrKVFeveGYN5WqwByM/smsxqbR5JqW9OM9Fkg/i575EdvVyk+ S+JRage47aa181wZtjYDKAsFv8dPX89N7pr7hzSyVO0tb8pRhiu7BQbv0JyX4ERv 3J/Y5H8nek0aei/AxwpvBbtZnzatw6att8/LAAz+R+mZNlH6jHyfp8TPTxo7mcSy 2MpibNjy4S36+OKS6S1JifCdT7FobDFvLcokel/ElZ9CVPBWXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrysWRhZ2uleit+5+TjLk9faDj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85MjNk MWIzMS0zNjQ0LTQ4NDctOGJhOC02ZDY5ZWFhNGU0YzEvYWExNDUxMGEtZTJmYi0z NjBjLTllMTctY2U2OTk2ZGY3ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTIzZDFiMzEtMzY0NC00ODQ3LThi YTgtNmQ2OWVhYTRlNGMxLzkyM2QxYjMxLTM2NDQtNDg0Ny04YmE4LTZkNjllYWE0 ZTRjMS5jcmwwHwYDVR0jBBgwFoAUc821PB0KAJmi043eyh7O7V2oLMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85MjNkMWIzMS0zNjQ0LTQ4NDctOGJhOC02ZDY5 ZWFhNGU0YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbh9795IG4W0MR+bt7RIwHCXtp4q6/EDrPqDXqBhfyQxz34p61AxBd5 jVVcF73jl45nwAe9VQLXBvkZZTSkBawmdhs4cloo8+P3GzNO0jqb2wzHhlmHfMVt lf/D+iIISD2B99XiR2gajwnKTzIim4+f2/TD/e7ULu5Wtm7S9bW7nN8TIWbc5D7L 39qp+ZcSbnSpg5/vauvQK5kBEiUcCfu2rxo0kAadDi/1BlUP2an4tOhxvHYJqUlt 9UMuEKeo6pzvjZU9fqmS56Gc6yT3+J5cqC+7jRxZPFgaG7RhxmgHng0Wix2jaQc3 30YLweSdUay8mDd/g+JVbQ6kf13j2kE= -----END CERTIFICATE-----Generated at Thu Mar 26 09:54:04 2026 by rpki-client