$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa File: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (raw, json) Hash identifier: 3mbkDKEVBipWwK+5EArtfRz09E58xynk4MbuzjxMIx8= Subject key identifier: 66:DF:EE:F5:91:20:87:64:83:77:C6:A7:D9:04:A8:97:10:F0:30:68 Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F4328584D3DFFAD47434C4508D22BA300 Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 54334 IP address blocks: 52.119.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ad:47:43:4c:45:08:d2:2b:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=f1336319-aab6-4db2-9d4d-495b5451de70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fd:95:f1:c3:b0:94:5f:6e:86:31:4c:6c:e3: 70:64:c1:4c:0a:70:c7:d4:38:eb:73:e5:35:6c:85: a1:3a:a2:fc:ce:bd:dc:b0:58:41:7d:15:67:9c:a9: ea:37:eb:50:c0:d7:bd:3f:3d:af:46:68:1e:d0:1f: e8:ec:a0:57:96:fb:05:1c:92:87:b9:ef:ff:e3:21: e1:cf:17:15:06:13:00:7c:ea:52:29:36:f3:a7:33: 53:d0:c1:a8:99:06:53:6f:8d:07:5a:37:ec:38:3c: ae:59:3a:44:ac:85:4c:31:60:db:27:12:ea:0a:a7: 18:60:40:84:aa:25:e4:c7:f0:08:94:73:a2:e4:ad: 4d:ff:68:03:b1:ce:dc:2d:58:6d:69:18:58:8d:09: b4:4a:a5:d6:d8:bf:89:c5:20:a3:ee:f7:21:6a:5e: 50:85:25:1a:09:bd:5a:d8:cf:81:f8:59:9f:42:d9: d0:a9:35:40:ee:c7:74:25:35:6b:d8:bc:51:8d:77: 1c:22:a7:83:2f:3f:f1:43:35:e8:24:71:1d:2b:2b: 12:ec:b7:7b:cb:66:88:84:f0:23:5e:6f:45:61:d0: 83:33:f3:e1:4f:ff:b2:82:e1:8c:04:3a:2d:b5:78: da:32:7b:67:a5:7b:3d:f8:9c:e9:b0:a7:60:e5:c5: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DF:EE:F5:91:20:87:64:83:77:C6:A7:D9:04:A8:97:10:F0:30:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: 52.119.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3c:31:62:84:74:9a:9e:33:93:fe:53:65:5c:2f:67:21:57: a5:0e:6c:27:f7:72:30:51:84:52:4c:20:65:c4:32:15:5e:bb: 51:0d:91:74:6a:1b:5c:07:4f:fd:88:7c:8e:7b:21:f8:72:90: 02:55:c2:12:89:a7:ce:49:43:cc:da:7f:64:03:c1:dc:7b:25: ca:8f:61:8b:5e:ea:9d:dc:35:03:b5:df:2d:b2:83:35:f9:70: fc:49:6d:36:b1:89:84:77:80:2c:25:f7:00:f7:d7:e7:09:65: 3a:58:fb:48:ec:b1:af:5e:e7:f6:4a:e3:9e:23:e6:42:67:fa: b4:3a:43:d8:de:7d:3d:a7:58:68:a9:ed:a8:77:96:34:2e:28: 57:92:70:85:77:ed:3d:c5:02:28:d0:2d:fa:70:4f:98:a3:05: f5:64:0b:cf:49:f1:6a:25:a8:3f:f2:09:99:0a:d4:62:7b:f0: d9:6a:3c:74:24:e3:eb:ea:19:d9:7e:22:25:10:12:9d:31:87: dd:0f:59:bf:5f:c5:48:df:fb:22:21:e3:6f:f1:1a:51:d8:0a: 2e:c6:fa:00:39:91:ef:e8:76:73:c9:fd:42:43:d1:37:8a:9e: bf:78:b3:21:e7:44:1c:9c:3c:86:e2:c8:06:6f:c9:ce:6e:3a: 77:b5:9c:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/61HQ0xFCNIrowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZjEzMzYzMTktYWFiNi00ZGIyLTlkNGQtNDk1YjU0NTFkZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv2V8cOwlF9uhjFMbONwZMFMCnDH1Djrc+U1 bIWhOqL8zr3csFhBfRVnnKnqN+tQwNe9Pz2vRmge0B/o7KBXlvsFHJKHue//4yHh zxcVBhMAfOpSKTbzpzNT0MGomQZTb40HWjfsODyuWTpErIVMMWDbJxLqCqcYYECE qiXkx/AIlHOi5K1N/2gDsc7cLVhtaRhYjQm0SqXW2L+JxSCj7vchal5QhSUaCb1a 2M+B+FmfQtnQqTVA7sd0JTVr2LxRjXccIqeDLz/xQzXoJHEdKysS7Ld7y2aIhPAj Xm9FYdCDM/PhT/+yguGMBDottXjaMntnpXs9+JzpsKdg5cXIfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbf7vWRIIdkg3fGp9kEqJcQ8DBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvYmY5YThlMTctOGE4Zi0z ODlhLTgwYjQtOGFiZjgyYTg1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY8MWKEdJqeM5P+U2VcL2chV6UObCf3cjBRhFJMIGXEMhVeu1ENkXRq G1wHT/2IfI57IfhykAJVwhKJp85JQ8zaf2QDwdx7JcqPYYte6p3cNQO13y2ygzX5 cPxJbTaxiYR3gCwl9wD31+cJZTpY+0jssa9e5/ZK454j5kJn+rQ6Q9jefT2nWGip 7ah3ljQuKFeScIV37T3FAijQLfpwT5ijBfVkC89J8WolqD/yCZkK1GJ78NlqPHQk 4+vqGdl+IiUQEp0xh90PWb9fxUjf+yIh42/xGlHYCi7G+gA5ke/odnPJ/UJD0TeK nr94syHnRBycPIbiyAZvyc5uOne1nJs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:50:04 2026 by rpki-client