$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/c830fb64-4d0b-3d84-b469-62ceca3332da.roa File: c830fb64-4d0b-3d84-b469-62ceca3332da.roa (raw, json) Hash identifier: lNiD+o03O4620o3ANYo35MzomUjQc4rh8KN7JZwHksU= Subject key identifier: B3:90:3F:BD:C9:47:B1:B5:52:4D:5E:ED:0D:F6:F0:7A:3F:25:B8:EB Certificate issuer: /CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Certificate serial: 010D0C9F4328584D4A03DBDD6AD48E78C6D7D380 Authority key identifier: 1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/c830fb64-4d0b-3d84-b469-62ceca3332da.roa Signing time: Wed 25 Mar 2026 20:19:10 +0000 ROA not before: Wed 25 Mar 2026 20:19:10 +0000 ROA not after: Tue 23 Jun 2026 20:19:10 +0000 asID: 395861 IP address blocks: 52.144.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:03:db:dd:6a:d4:8e:78:c6:d7:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Validity Not Before: Mar 25 20:19:10 2026 GMT Not After : Jun 23 20:19:10 2026 GMT Subject: CN=b30f3c5d-1819-4e50-8f3b-c4cbbf6ee7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:59:89:ad:9d:7f:15:4a:09:e4:c7:b9:ec: ef:82:9e:7c:47:47:8d:91:e8:8b:3f:0b:fd:7b:7a: 39:10:6a:98:4d:85:fb:76:ee:00:ca:c8:b5:5f:e4: a0:4b:3b:dd:b0:60:e8:64:d2:00:84:d3:93:bd:34: b9:82:29:3e:8b:89:10:e1:f6:90:9b:50:3f:3d:cc: 7d:ba:99:01:7d:c4:86:2e:91:31:7e:f7:1c:3c:9f: 19:30:ca:b4:51:a2:73:8c:49:6c:1e:6f:35:64:68: 11:46:96:03:c3:2f:f8:40:63:3e:0d:e2:9d:bd:08: 87:c6:2d:23:0e:a5:83:de:fc:39:c0:a8:a0:fa:6c: 3c:ee:d4:1e:e2:c5:d5:b1:6a:53:1e:0a:f5:a8:95: 5e:e9:29:ab:24:0f:fb:8d:86:8f:dd:7f:ce:7d:96: 41:ed:98:97:fe:d5:73:8e:19:63:8e:98:fc:87:d1: 9a:1e:65:fa:b8:b4:74:c2:96:80:6c:5d:2c:76:de: 40:24:b4:ca:a8:3d:c1:39:3c:69:03:89:bf:fb:d8: 19:cb:1c:79:79:0c:d6:6c:98:10:40:53:37:f9:24: d2:4b:4c:fc:ed:94:06:7b:3b:19:df:d3:28:84:16: 89:63:5d:58:79:70:de:4c:d3:cb:07:47:b2:5d:64: 74:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:90:3F:BD:C9:47:B1:B5:52:4D:5E:ED:0D:F6:F0:7A:3F:25:B8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/c830fb64-4d0b-3d84-b469-62ceca3332da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl X509v3 Authority Key Identifier: keyid:1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer sbgp-ipAddrBlock: critical IPv4: 52.144.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9a:f8:08:7c:ab:b4:72:f3:e5:8f:d4:6b:69:17:38:e1:8f: 14:ef:9e:54:83:ba:b6:36:c2:63:c7:e6:1b:bd:e0:c0:ae:a7: f1:63:ec:16:e1:55:1c:ed:dd:33:22:31:32:4f:ed:c9:af:d4: ab:72:25:d4:8c:0c:8f:5d:13:23:48:77:14:56:16:98:7f:46: a3:1b:02:0c:ae:ed:a6:a9:e5:ba:4a:d2:73:ae:f3:85:89:98: d3:63:7e:c8:3b:77:8f:a7:fc:58:4a:ad:db:da:ae:89:35:bb: 69:dd:4f:ac:a9:cd:e4:3a:c7:88:59:2f:b5:63:50:92:87:9a: 2c:96:ac:46:6a:e1:fa:7b:34:61:ed:cf:10:30:11:c6:ea:c2: de:fd:6d:57:23:2c:07:2a:64:db:80:f4:a9:46:c5:66:da:fc: cc:53:d8:60:11:25:e4:d7:9c:a1:1b:15:2e:d3:f0:f6:da:7d: 56:10:e9:8e:9a:c8:60:d0:5a:63:58:f8:73:1c:8c:b9:e2:3c: d7:db:18:34:59:ee:f0:52:10:0c:8a:a8:16:0a:ad:9b:8e:30: c3:a4:47:8a:dd:c6:e0:99:4a:a8:96:33:bf:74:a7:ce:b8:8d: 15:e6:6d:d7:e8:dc:f1:3e:91:68:9d:97:ff:be:76:84:5d:09: 43:91:c2:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1KA9vdatSOeMbX04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZlMTY1ZDAtYTljYS00YzhlLTg4ZWUtY2I4MzE2ODFk ZjEzMB4XDTI2MDMyNTIwMTkxMFoXDTI2MDYyMzIwMTkxMFowLzEtMCsGA1UEAxMk YjMwZjNjNWQtMTgxOS00ZTUwLThmM2ItYzRjYmJmNmVlN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8RZia2dfxVKCeTHuezvgp58R0eNkeiLPwv9 e3o5EGqYTYX7du4Aysi1X+SgSzvdsGDoZNIAhNOTvTS5gik+i4kQ4faQm1A/Pcx9 upkBfcSGLpExfvccPJ8ZMMq0UaJzjElsHm81ZGgRRpYDwy/4QGM+DeKdvQiHxi0j DqWD3vw5wKig+mw87tQe4sXVsWpTHgr1qJVe6SmrJA/7jYaP3X/OfZZB7ZiX/tVz jhljjpj8h9GaHmX6uLR0wpaAbF0sdt5AJLTKqD3BOTxpA4m/+9gZyxx5eQzWbJgQ QFM3+STSS0z87ZQGezsZ39MohBaJY11YeXDeTNPLB0eyXWR0WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOQP73JR7G1Uk1e7Q328Ho/JbjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUx NjVkMC1hOWNhLTRjOGUtODhlZS1jYjgzMTY4MWRmMTMvYzgzMGZiNjQtNGQwYi0z ZDg0LWI0NjktNjJjZWNhMzMzMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmZlMTY1ZDAtYTljYS00YzhlLTg4 ZWUtY2I4MzE2ODFkZjEzL2ZmZTE2NWQwLWE5Y2EtNGM4ZS04OGVlLWNiODMxNjgx ZGYxMy5jcmwwHwYDVR0jBBgwFoAUGy/dUxOu9xrnk4yc5u8wKIQhICswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUxNjVkMC1hOWNhLTRjOGUtODhlZS1jYjgz MTY4MWRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKa+Ah8q7Ry8+WP1GtpFzjhjxTvnlSDurY2wmPH5hu94MCup/Fj7Bbh VRzt3TMiMTJP7cmv1KtyJdSMDI9dEyNIdxRWFph/RqMbAgyu7aap5bpK0nOu84WJ mNNjfsg7d4+n/FhKrdvarok1u2ndT6ypzeQ6x4hZL7VjUJKHmiyWrEZq4fp7NGHt zxAwEcbqwt79bVcjLAcqZNuA9KlGxWba/MxT2GARJeTXnKEbFS7T8PbafVYQ6Y6a yGDQWmNY+HMcjLniPNfbGDRZ7vBSEAyKqBYKrZuOMMOkR4rdxuCZSqiWM790p864 jRXmbdfo3PE+kWidl/++doRdCUORwoA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:45 2026 by rpki-client