$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/a41ea90e-b568-3dfe-a5dd-db2be2a570e7.roa File: a41ea90e-b568-3dfe-a5dd-db2be2a570e7.roa (raw, json) Hash identifier: EOuefequ8943rYNd0ZF2bh+5m6sAm2kMkLf0dc3UrLk= Subject key identifier: 0D:CE:A9:71:E2:19:AF:45:65:56:D0:F4:4F:51:31:3E:D5:E5:AD:C2 Certificate issuer: /CN=2e3e43ea-6b8f-4420-bf66-7285576d56fe Certificate serial: 010D0C9F4328584D36724D481E8ECC1538D54F20 Authority key identifier: FA:98:9D:0E:F0:F9:4C:7C:7A:02:54:99:9B:82:C3:64:28:5E:85:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/a41ea90e-b568-3dfe-a5dd-db2be2a570e7.roa Signing time: Wed 18 Mar 2026 20:05:32 +0000 ROA not before: Wed 18 Mar 2026 20:05:32 +0000 ROA not after: Tue 16 Jun 2026 20:05:32 +0000 asID: 397091 IP address blocks: 52.144.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/2e3e43ea-6b8f-4420-bf66-7285576d56fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/2e3e43ea-6b8f-4420-bf66-7285576d56fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:72:4d:48:1e:8e:cc:15:38:d5:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3e43ea-6b8f-4420-bf66-7285576d56fe Validity Not Before: Mar 18 20:05:32 2026 GMT Not After : Jun 16 20:05:32 2026 GMT Subject: CN=ab425c5a-a772-46a5-9e24-694571fab552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c7:02:9f:b1:09:ee:e9:52:02:b4:9e:1e:f9: cf:69:33:9c:23:d7:b4:02:d1:fe:85:8e:56:cc:83: 14:8a:7f:71:bb:61:48:3b:5b:39:ef:0f:ca:a0:2f: 8d:63:08:be:9c:35:ac:10:be:11:f7:9b:a4:7b:aa: e7:cd:0e:0e:96:07:d8:eb:f0:7a:a4:e8:a5:b0:25: de:35:f7:e1:ad:5c:bd:65:08:f3:7b:a8:9d:c1:b5: 43:c5:be:77:8d:63:30:7a:24:60:f1:88:5b:40:93: 30:32:28:c1:d3:fd:1c:21:00:b1:9c:9a:aa:b1:ec: 4d:d7:09:21:85:1d:58:8d:35:ea:48:f2:f0:10:ce: ae:aa:91:92:49:fd:65:29:68:45:80:b3:98:9d:3e: 7a:50:48:68:b7:0b:30:f4:95:34:8c:90:cb:78:ea: 51:c7:98:bf:fd:8b:5e:65:86:01:bd:cf:e5:b7:20: c8:f0:da:a8:18:94:e6:47:b7:f0:c9:4c:77:10:ef: 1e:e0:03:14:2e:68:03:62:19:c1:ee:b7:f2:0d:4a: 51:b9:c5:1e:63:86:24:79:90:1e:e9:3c:36:34:67: b3:58:ee:b8:3f:2f:97:b2:e3:b5:0a:fb:fc:95:a1: ae:9a:ae:f1:85:0d:ce:bf:ac:e7:d9:2f:03:b1:a2: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CE:A9:71:E2:19:AF:45:65:56:D0:F4:4F:51:31:3E:D5:E5:AD:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/a41ea90e-b568-3dfe-a5dd-db2be2a570e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe/2e3e43ea-6b8f-4420-bf66-7285576d56fe.crl X509v3 Authority Key Identifier: keyid:FA:98:9D:0E:F0:F9:4C:7C:7A:02:54:99:9B:82:C3:64:28:5E:85:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2e3e43ea-6b8f-4420-bf66-7285576d56fe.cer sbgp-ipAddrBlock: critical IPv4: 52.144.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f3:60:e0:11:d3:af:02:e1:f7:eb:a7:ff:4e:75:e9:4d:56: a8:4c:c4:52:bd:91:8d:bd:f5:8a:d4:26:83:43:b4:89:12:03: 9b:07:14:9d:3f:62:b2:be:54:68:ea:d0:25:a8:85:01:87:d5: ab:8d:14:16:8d:58:45:94:ed:4b:7e:83:0d:68:d5:95:3b:73: 29:7f:94:f5:d3:cd:e4:bc:5a:33:4a:4e:87:93:58:bc:36:25: 11:46:69:ae:26:2f:b2:77:0a:4d:34:63:94:13:ba:5a:a2:b2: a2:9d:8d:f0:3b:f3:c7:cc:1c:4f:81:6e:44:a0:b9:c6:ae:29: bd:5f:0e:81:72:88:e3:5c:e6:45:78:b7:2d:b6:e7:86:d5:a4: 4f:bd:4e:9c:70:ed:98:64:cf:41:63:b7:ca:93:90:c9:97:84: 42:90:9d:38:02:db:c9:fd:10:c0:e7:87:5f:d3:f1:82:8c:b3: 5e:d2:4d:e9:e6:db:21:4b:3a:ef:21:94:fc:aa:9a:26:50:e0: 15:36:7a:ee:4a:0f:24:72:85:a0:d5:a5:86:03:95:fa:52:dc: ad:08:ea:d3:a5:b6:d2:8c:e7:d4:06:2f:33:d1:ff:00:5b:fd: 31:11:be:99:98:7a:08:cb:3b:55:2e:3e:5d:86:65:3e:48:db: 3f:72:dc:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02ck1IHo7MFTjVTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzZTQzZWEtNmI4Zi00NDIwLWJmNjYtNzI4NTU3NmQ1 NmZlMB4XDTI2MDMxODIwMDUzMloXDTI2MDYxNjIwMDUzMlowLzEtMCsGA1UEAxMk YWI0MjVjNWEtYTc3Mi00NmE1LTllMjQtNjk0NTcxZmFiNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhscCn7EJ7ulSArSeHvnPaTOcI9e0AtH+hY5W zIMUin9xu2FIO1s57w/KoC+NYwi+nDWsEL4R95uke6rnzQ4OlgfY6/B6pOilsCXe NffhrVy9ZQjze6idwbVDxb53jWMweiRg8YhbQJMwMijB0/0cIQCxnJqqsexN1wkh hR1YjTXqSPLwEM6uqpGSSf1lKWhFgLOYnT56UEhotwsw9JU0jJDLeOpRx5i//Yte ZYYBvc/ltyDI8NqoGJTmR7fwyUx3EO8e4AMULmgDYhnB7rfyDUpRucUeY4YkeZAe 6Tw2NGezWO64Py+XsuO1Cvv8laGumq7xhQ3Ov6zn2S8DsaK+qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3OqXHiGa9FZVbQ9E9RMT7V5a3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yZTNl NDNlYS02YjhmLTQ0MjAtYmY2Ni03Mjg1NTc2ZDU2ZmUvYTQxZWE5MGUtYjU2OC0z ZGZlLWE1ZGQtZGIyYmUyYTU3MGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmUzZTQzZWEtNmI4Zi00NDIwLWJm NjYtNzI4NTU3NmQ1NmZlLzJlM2U0M2VhLTZiOGYtNDQyMC1iZjY2LTcyODU1NzZk NTZmZS5jcmwwHwYDVR0jBBgwFoAU+pidDvD5THx6AlSZm4LDZChehZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yZTNlNDNlYS02YjhmLTQ0MjAtYmY2Ni03Mjg1 NTc2ZDU2ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArzYOAR068C4ffrp/9OdelNVqhMxFK9kY299YrUJoNDtIkSA5sHFJ0/ YrK+VGjq0CWohQGH1auNFBaNWEWU7Ut+gw1o1ZU7cyl/lPXTzeS8WjNKToeTWLw2 JRFGaa4mL7J3Ck00Y5QTulqisqKdjfA788fMHE+BbkSgucauKb1fDoFyiONc5kV4 ty2254bVpE+9Tpxw7Zhkz0Fjt8qTkMmXhEKQnTgC28n9EMDnh1/T8YKMs17STenm 2yFLOu8hlPyqmiZQ4BU2eu5KDyRyhaDVpYYDlfpS3K0I6tOlttKM59QGLzPR/wBb /TERvpmYegjLO1UuPl2GZT5I2z9y3KE= -----END CERTIFICATE-----Generated at Thu Mar 26 21:52:16 2026 by rpki-client