$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/b8b78db0-4e80-3b6e-8015-732de34cbce6.roa File: b8b78db0-4e80-3b6e-8015-732de34cbce6.roa (raw, json) Hash identifier: 50/AqE7FFVr01F47cxTXs0K6cnDK/swS1sBwNb9ihjM= Subject key identifier: A9:31:C9:A8:45:CC:9A:92:E3:EF:5D:68:FC:4D:26:CC:0C:D9:40:D9 Certificate issuer: /CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Certificate serial: 010D0C9F4328584D4A047E3B93000ECA0B058080 Authority key identifier: 1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/b8b78db0-4e80-3b6e-8015-732de34cbce6.roa Signing time: Wed 25 Mar 2026 20:20:27 +0000 ROA not before: Wed 25 Mar 2026 20:20:27 +0000 ROA not after: Tue 23 Jun 2026 20:20:27 +0000 asID: 395861 IP address blocks: 52.144.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:04:7e:3b:93:00:0e:ca:0b:05:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Validity Not Before: Mar 25 20:20:27 2026 GMT Not After : Jun 23 20:20:27 2026 GMT Subject: CN=12b8b47e-c36d-48f3-8f64-52aae3f0ea27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:08:a0:c8:ef:7c:b6:fd:c3:7b:7b:e7:ad: 59:1e:05:7f:3e:8c:dd:30:54:cd:27:fa:16:e5:c8: b7:09:98:1f:11:07:c2:7a:cf:34:27:2b:e2:47:ad: d1:72:46:24:14:e2:b3:22:d3:40:1a:e3:72:0f:12: 7b:f0:bc:a5:d9:80:1c:af:98:69:70:57:e7:69:ef: 52:8e:0d:91:96:43:41:a1:e8:43:03:ff:21:c3:6e: d7:6d:0f:2c:2c:48:d6:cf:4a:6a:32:13:1a:89:ee: 67:14:c3:9f:49:71:89:c3:94:39:d4:a9:23:e0:67: 8b:89:59:16:e2:4d:df:76:6a:38:b4:00:9c:51:47: 38:c3:a5:3f:31:8d:61:65:2b:e0:f8:4d:4b:36:f6: a9:43:3f:21:e5:1b:3a:c0:60:e0:67:0a:78:a9:1b: 24:11:11:b4:21:bc:b8:0a:30:81:63:91:71:86:1c: 0a:85:88:6d:c1:74:8c:48:2f:83:0a:a5:5f:25:ed: 4d:57:77:c9:60:d9:26:d3:de:f7:e5:ea:7d:f6:dd: 3a:11:de:7b:67:e3:1a:8f:20:58:66:c8:6a:f8:b6: 0f:77:0f:cf:c6:98:74:32:39:af:ca:ad:a2:b3:59: 12:a8:6a:da:51:0f:27:b4:6d:32:81:e8:b8:1d:fa: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:31:C9:A8:45:CC:9A:92:E3:EF:5D:68:FC:4D:26:CC:0C:D9:40:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/b8b78db0-4e80-3b6e-8015-732de34cbce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl X509v3 Authority Key Identifier: keyid:1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer sbgp-ipAddrBlock: critical IPv4: 52.144.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a5:74:3d:c2:3a:86:d5:d0:5e:78:a4:c4:08:c5:30:d3:a7: 45:67:9e:82:54:f2:4c:6c:07:ce:35:2a:f8:71:d2:fc:85:1d: 66:ce:37:11:ae:77:65:90:db:d4:f8:25:39:4f:a8:b8:5f:57: 9f:20:23:47:d7:68:3e:28:63:52:9a:e1:2c:05:26:63:b4:37: b0:5d:a8:67:c5:ef:91:3a:00:6c:ab:09:26:53:08:50:a4:54: 20:58:54:aa:20:f0:87:0e:c7:8c:de:b4:85:df:eb:a3:05:5d: 1d:fb:2b:5b:92:c2:0a:11:f0:5a:f1:1f:69:03:6e:63:ab:2c: 72:f5:ba:94:58:6e:24:1b:6e:83:7b:de:7d:ba:ce:d6:95:1c: 15:af:6c:00:c6:e4:09:35:4e:28:64:79:de:b9:b0:67:0a:80: c3:e5:7b:41:c4:42:d3:5c:73:13:16:ba:d6:7a:c4:99:e0:50: 16:d3:24:99:3b:2a:5a:e8:d4:50:6b:aa:3e:d8:c8:e8:ab:67: 82:34:2c:aa:d0:a0:83:1a:61:ea:3c:31:69:d5:fe:93:97:6d: 8e:6e:7d:64:cd:48:95:68:2f:91:42:6d:c4:6c:23:a4:0b:3f: 51:24:de:d0:7b:b7:e5:e9:78:67:d6:41:5e:86:c2:da:70:1d: a6:b6:c4:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1KBH47kwAOygsFgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZlMTY1ZDAtYTljYS00YzhlLTg4ZWUtY2I4MzE2ODFk ZjEzMB4XDTI2MDMyNTIwMjAyN1oXDTI2MDYyMzIwMjAyN1owLzEtMCsGA1UEAxMk MTJiOGI0N2UtYzM2ZC00OGYzLThmNjQtNTJhYWUzZjBlYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQQIoMjvfLb9w3t7561ZHgV/PozdMFTNJ/oW 5ci3CZgfEQfCes80JyviR63RckYkFOKzItNAGuNyDxJ78Lyl2YAcr5hpcFfnae9S jg2RlkNBoehDA/8hw27XbQ8sLEjWz0pqMhMaie5nFMOfSXGJw5Q51Kkj4GeLiVkW 4k3fdmo4tACcUUc4w6U/MY1hZSvg+E1LNvapQz8h5Rs6wGDgZwp4qRskERG0Iby4 CjCBY5FxhhwKhYhtwXSMSC+DCqVfJe1NV3fJYNkm09735ep99t06Ed57Z+MajyBY Zshq+LYPdw/Pxph0Mjmvyq2is1kSqGraUQ8ntG0ygei4HfpQ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkxyahFzJqS4+9daPxNJswM2UDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUx NjVkMC1hOWNhLTRjOGUtODhlZS1jYjgzMTY4MWRmMTMvYjhiNzhkYjAtNGU4MC0z YjZlLTgwMTUtNzMyZGUzNGNiY2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmZlMTY1ZDAtYTljYS00YzhlLTg4 ZWUtY2I4MzE2ODFkZjEzL2ZmZTE2NWQwLWE5Y2EtNGM4ZS04OGVlLWNiODMxNjgx ZGYxMy5jcmwwHwYDVR0jBBgwFoAUGy/dUxOu9xrnk4yc5u8wKIQhICswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUxNjVkMC1hOWNhLTRjOGUtODhlZS1jYjgz MTY4MWRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqldD3COobV0F54pMQIxTDTp0VnnoJU8kxsB841Kvhx0vyFHWbONxGu d2WQ29T4JTlPqLhfV58gI0fXaD4oY1Ka4SwFJmO0N7BdqGfF75E6AGyrCSZTCFCk VCBYVKog8IcOx4zetIXf66MFXR37K1uSwgoR8FrxH2kDbmOrLHL1upRYbiQbboN7 3n26ztaVHBWvbADG5Ak1Tihked65sGcKgMPle0HEQtNccxMWutZ6xJngUBbTJJk7 Klro1FBrqj7YyOirZ4I0LKrQoIMaYeo8MWnV/pOXbY5ufWTNSJVoL5FCbcRsI6QL P1Ek3tB7t+XpeGfWQV6GwtpwHaa2xGc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:11:48 2026 by rpki-client