$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/5032838d-9920-33ba-ac0a-385c4445f179.roa File: 5032838d-9920-33ba-ac0a-385c4445f179.roa (raw, json) Hash identifier: WsazfgsTcBPlZyfSayHBTexcLYcLr1JJYNne3sHboHs= Subject key identifier: 28:7A:D1:4B:07:A9:54:15:86:BB:15:85:C3:7D:51:F1:B4:45:24:AC Certificate issuer: /CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Certificate serial: 010D0C9F4328584F542D4057CC627CCB2A39A440 Authority key identifier: A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/5032838d-9920-33ba-ac0a-385c4445f179.roa Signing time: Mon 28 Sep 2026 21:14:32 +0000 ROA not before: Mon 28 Sep 2026 21:14:32 +0000 ROA not after: Sun 27 Dec 2026 22:14:32 +0000 asID: 32586 IP address blocks: 52.129.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:2d:40:57:cc:62:7c:cb:2a:39:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Validity Not Before: Sep 28 21:14:32 2026 GMT Not After : Dec 27 22:14:32 2026 GMT Subject: CN=f05bac95-5025-42fc-a3b4-0ddad8826c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:b6:77:88:0e:87:b7:42:46:79:93:b5:83: 6d:81:3e:e7:41:42:92:c0:6a:aa:e4:d7:a6:e2:e1: 07:cc:8c:6b:7d:b4:88:8e:01:aa:25:85:2f:36:72: 9b:24:d0:e7:c7:54:47:14:1c:58:57:29:80:42:0e: 68:8d:41:ef:83:aa:fd:10:79:06:54:2b:08:24:7b: fd:93:a2:a1:ad:b8:7e:9c:33:52:5d:a2:b5:5e:82: 0f:c5:70:3d:d9:db:1b:9c:08:32:f5:7f:d0:cc:39: ac:eb:c7:57:da:6a:d0:9b:fb:87:c1:0f:e0:e7:58: 03:ca:f7:be:32:9c:ab:68:52:55:12:68:fe:86:bb: a5:25:03:05:7e:1a:e4:c1:af:1f:c0:5a:25:f7:9a: 18:05:45:31:5e:1a:43:50:2e:4b:1b:58:39:c0:e7: f6:af:fe:d8:a6:ab:46:38:a4:82:13:8e:6a:7c:c8: 50:e7:9f:82:49:2c:d7:62:fb:54:ba:19:23:56:ae: 14:5b:03:93:01:df:1d:b6:a2:78:1b:91:91:f0:ce: bf:96:b4:1f:ed:52:7b:78:d3:e6:19:48:02:52:6c: 28:39:a4:4e:58:e7:87:fd:80:58:f9:0d:d9:80:d2: 22:5d:f3:04:e1:b9:62:c9:d3:6e:a1:a5:34:3e:0c: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7A:D1:4B:07:A9:54:15:86:BB:15:85:C3:7D:51:F1:B4:45:24:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/5032838d-9920-33ba-ac0a-385c4445f179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl X509v3 Authority Key Identifier: keyid:A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer sbgp-ipAddrBlock: critical IPv4: 52.129.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8b:1d:25:53:d8:b4:52:7b:39:0d:09:3c:7a:95:71:b4:c1: 49:b1:15:08:c6:c7:20:ea:ff:6b:f2:7b:20:df:c7:63:39:31: 6e:3e:aa:6a:6a:c3:5e:62:29:46:2a:52:e3:ff:0b:a1:11:65: d5:2d:ee:40:c0:d0:00:37:b0:ac:33:86:5d:ef:e3:ff:3b:75: 3b:9b:e2:b7:ed:c7:4c:fb:16:b3:b3:2a:5f:99:6f:fc:4e:83: db:09:7d:a6:a3:e9:c3:3c:c2:27:46:fc:60:71:2b:07:53:d6: 59:83:1c:55:db:57:7c:ad:a2:22:1b:ff:b2:aa:8b:5c:af:d5: 4d:f9:4b:43:7f:71:d8:c2:3e:52:5a:c8:6f:f8:ba:11:a3:5d: 83:9d:fb:3f:c3:a0:24:73:d0:e3:25:00:94:f8:6e:4f:a7:b7: 7d:a0:87:31:15:2a:a4:39:5f:d3:02:cf:4a:ef:46:85:f3:c1: fb:b6:45:a6:80:10:be:50:31:51:77:06:cf:fd:5c:39:d8:2a: 04:db:7f:2b:56:e2:d2:a9:f5:32:a9:61:ad:91:b0:d3:14:60: 39:24:58:a5:f5:dd:e6:10:3f:47:05:dd:e0:7d:60:7f:cd:f4: 59:0f:4f:fd:fd:b1:28:c8:22:83:d6:b3:3d:c4:ee:2b:c7:19: d9:f2:69:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ULUBXzGJ8yyo5pEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQwN2Y1OGQtMjdhOC00MmE1LWI3M2UtMWZlMzUwODFj NmRmMB4XDTI2MDkyODIxMTQzMloXDTI2MTIyNzIyMTQzMlowLzEtMCsGA1UEAxMk ZjA1YmFjOTUtNTAyNS00MmZjLWEzYjQtMGRkYWQ4ODI2YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlza2d4gOh7dCRnmTtYNtgT7nQUKSwGqq5Nem 4uEHzIxrfbSIjgGqJYUvNnKbJNDnx1RHFBxYVymAQg5ojUHvg6r9EHkGVCsIJHv9 k6Khrbh+nDNSXaK1XoIPxXA92dsbnAgy9X/QzDms68dX2mrQm/uHwQ/g51gDyve+ MpyraFJVEmj+hrulJQMFfhrkwa8fwFol95oYBUUxXhpDUC5LG1g5wOf2r/7YpqtG OKSCE45qfMhQ55+CSSzXYvtUuhkjVq4UWwOTAd8dtqJ4G5GR8M6/lrQf7VJ7eNPm GUgCUmwoOaROWOeH/YBY+Q3ZgNIiXfME4bliydNuoaU0Pgx7+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCh60UsHqVQVhrsVhcN9UfG0RSSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3 ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUzNTA4MWM2ZGYvNTAzMjgzOGQtOTkyMC0z M2JhLWFjMGEtMzg1YzQ0NDVmMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTQwN2Y1OGQtMjdhOC00MmE1LWI3 M2UtMWZlMzUwODFjNmRmLzE0MDdmNThkLTI3YTgtNDJhNS1iNzNlLTFmZTM1MDgx YzZkZi5jcmwwHwYDVR0jBBgwFoAUqXHCIBuAdC31fIHIgg2qq+D9GyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUz NTA4MWM2ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWLHSVT2LRSezkNCTx6lXG0wUmxFQjGxyDq/2vyeyDfx2M5MW4+qmpq w15iKUYqUuP/C6ERZdUt7kDA0AA3sKwzhl3v4/87dTub4rftx0z7FrOzKl+Zb/xO g9sJfaaj6cM8widG/GBxKwdT1lmDHFXbV3ytoiIb/7Kqi1yv1U35S0N/cdjCPlJa yG/4uhGjXYOd+z/DoCRz0OMlAJT4bk+nt32ghzEVKqQ5X9MCz0rvRoXzwfu2RaaA EL5QMVF3Bs/9XDnYKgTbfytW4tKp9TKpYa2RsNMUYDkkWKX13eYQP0cF3eB9YH/N 9FkPT/39sSjIIoPWsz3E7ivHGdnyabI= -----END CERTIFICATE-----Generated at Thu Oct 8 20:19:02 2026 by rpki-client