$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/d4249f5a-766b-3f8f-b659-e3956775e72f.roa File: d4249f5a-766b-3f8f-b659-e3956775e72f.roa (raw, json) Hash identifier: rnBjyOzmW/63INBl0uiPTuV/JWEJjpNfz12NMtRASk0= Subject key identifier: 32:21:12:75:D4:10:38:20:B2:B5:2E:B9:09:BD:89:15:73:BA:44:25 Certificate issuer: /CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Certificate serial: 010D0C9F4328584D4A04D23EE3C6ECA9B911AD00 Authority key identifier: 1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/d4249f5a-766b-3f8f-b659-e3956775e72f.roa Signing time: Wed 25 Mar 2026 20:21:06 +0000 ROA not before: Wed 25 Mar 2026 20:21:06 +0000 ROA not after: Tue 23 Jun 2026 20:21:06 +0000 asID: 395861 IP address blocks: 52.144.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:04:d2:3e:e3:c6:ec:a9:b9:11:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13 Validity Not Before: Mar 25 20:21:06 2026 GMT Not After : Jun 23 20:21:06 2026 GMT Subject: CN=9bc5c2cb-cc7e-4ecc-9ea8-5d6c63f68916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:df:31:2b:fb:26:76:cb:6e:8f:47:bc:01: fb:a1:95:53:47:16:7d:35:12:76:93:da:6b:56:36: 49:d3:aa:24:7d:76:c6:b1:ee:12:9b:2c:6f:23:ff: b7:e5:66:3c:52:5e:77:93:4a:79:de:b9:fa:49:67: b3:0c:a8:ec:c8:d6:92:4d:93:26:64:90:de:9d:8b: 21:75:a7:4e:a3:05:6b:b7:43:29:a1:5e:d4:59:7c: 9f:ff:18:33:d1:52:7f:b6:89:70:e3:6e:82:ff:0d: 62:91:4c:8d:8b:b8:88:37:31:9e:bb:27:43:f2:c0: b4:71:7a:78:1c:d4:70:c6:61:5f:f9:c6:3e:b4:0f: ce:08:b3:29:4c:64:85:e7:20:0a:ba:b6:bb:ff:0d: c5:5c:33:4d:99:c8:83:db:6b:26:12:96:5f:96:94: e0:dc:bc:cd:cf:d5:9b:c8:5e:3f:39:9f:de:3d:ba: fb:ef:4d:e0:b3:36:e9:aa:46:19:df:9c:a2:f9:47: 7e:dd:28:e7:f9:f3:99:c1:70:30:89:e4:d2:d6:69: 12:bd:de:90:7e:72:bd:9f:1a:31:b1:77:7f:a2:6f: c0:d1:f4:a2:c0:00:53:23:20:a2:a1:a3:d2:d6:d6: e2:7e:cd:47:67:ac:60:bc:45:cf:02:68:c4:15:4d: 16:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:21:12:75:D4:10:38:20:B2:B5:2E:B9:09:BD:89:15:73:BA:44:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/d4249f5a-766b-3f8f-b659-e3956775e72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl X509v3 Authority Key Identifier: keyid:1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer sbgp-ipAddrBlock: critical IPv4: 52.144.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8d:36:84:e2:fd:a7:13:18:91:e7:8c:55:73:11:05:18:bb: 3f:25:e1:3e:93:b2:02:03:ea:61:60:22:3a:93:7d:83:e2:ff: 91:9a:dc:b5:54:76:e5:15:e8:2b:4c:68:04:97:3c:13:d1:0a: 24:48:d8:c1:29:52:df:c6:67:5d:d6:e3:85:cd:f1:53:43:8e: c2:fb:23:f1:6e:cf:be:56:1f:8c:b1:08:a4:c0:66:11:67:62: bc:bf:40:29:3f:c4:e7:cf:29:d0:c5:10:82:6f:b7:96:08:32: 8e:4c:9e:84:82:15:4a:5d:06:3d:a5:9d:64:1a:8d:ec:d7:6c: 52:15:55:a0:14:c6:24:28:f6:8b:8d:d3:bf:8d:33:62:b3:d5: 68:06:90:77:03:3e:6e:88:f5:b6:4c:86:ec:fb:9b:d2:36:87: 3a:09:04:28:ea:1e:0e:4e:d5:40:c6:3b:a9:a4:43:c8:44:d8: 1f:ce:75:25:57:5d:bf:f4:77:94:43:a3:7f:dd:69:bf:12:19: b9:e6:8b:5e:d2:4f:71:30:4e:a3:64:73:22:d1:e6:d1:99:28: 4b:b6:eb:0d:a2:c6:57:54:d9:33:2b:d6:75:23:fc:b1:f5:1b: 43:a4:15:6f:ea:c3:43:ec:d3:cf:7c:82:7f:05:4d:e3:21:61: 23:ee:30:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1KBNI+48bsqbkRrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZlMTY1ZDAtYTljYS00YzhlLTg4ZWUtY2I4MzE2ODFk ZjEzMB4XDTI2MDMyNTIwMjEwNloXDTI2MDYyMzIwMjEwNlowLzEtMCsGA1UEAxMk OWJjNWMyY2ItY2M3ZS00ZWNjLTllYTgtNWQ2YzYzZjY4OTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxnfMSv7JnbLbo9HvAH7oZVTRxZ9NRJ2k9pr VjZJ06okfXbGse4SmyxvI/+35WY8Ul53k0p53rn6SWezDKjsyNaSTZMmZJDenYsh dadOowVrt0MpoV7UWXyf/xgz0VJ/tolw426C/w1ikUyNi7iINzGeuydD8sC0cXp4 HNRwxmFf+cY+tA/OCLMpTGSF5yAKura7/w3FXDNNmciD22smEpZflpTg3LzNz9Wb yF4/OZ/ePbr7703gszbpqkYZ35yi+Ud+3Sjn+fOZwXAwieTS1mkSvd6QfnK9nxox sXd/om/A0fSiwABTIyCioaPS1tbifs1HZ6xgvEXPAmjEFU0WvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIhEnXUEDggsrUuuQm9iRVzukQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUx NjVkMC1hOWNhLTRjOGUtODhlZS1jYjgzMTY4MWRmMTMvZDQyNDlmNWEtNzY2Yi0z ZjhmLWI2NTktZTM5NTY3NzVlNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmZlMTY1ZDAtYTljYS00YzhlLTg4 ZWUtY2I4MzE2ODFkZjEzL2ZmZTE2NWQwLWE5Y2EtNGM4ZS04OGVlLWNiODMxNjgx ZGYxMy5jcmwwHwYDVR0jBBgwFoAUGy/dUxOu9xrnk4yc5u8wKIQhICswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mZmUxNjVkMC1hOWNhLTRjOGUtODhlZS1jYjgz MTY4MWRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6NNoTi/acTGJHnjFVzEQUYuz8l4T6TsgID6mFgIjqTfYPi/5Ga3LVU duUV6CtMaASXPBPRCiRI2MEpUt/GZ13W44XN8VNDjsL7I/Fuz75WH4yxCKTAZhFn Yry/QCk/xOfPKdDFEIJvt5YIMo5MnoSCFUpdBj2lnWQajezXbFIVVaAUxiQo9ouN 07+NM2Kz1WgGkHcDPm6I9bZMhuz7m9I2hzoJBCjqHg5O1UDGO6mkQ8hE2B/OdSVX Xb/0d5RDo3/dab8SGbnmi17ST3EwTqNkcyLR5tGZKEu26w2ixldU2TMr1nUj/LH1 G0OkFW/qw0Ps0898gn8FTeMhYSPuMD0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:42:19 2026 by rpki-client