$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/8bf12226-b81b-3a6b-9b8d-d6c33bad6237.roa File: 8bf12226-b81b-3a6b-9b8d-d6c33bad6237.roa (raw, json) Hash identifier: G6BXkizHbWSYuDz38lykNEcs8+dvGyUDWXAr0zoJ8LQ= Subject key identifier: 93:B7:9A:65:9D:93:40:E8:F3:AB:B9:FA:72:E2:9B:8C:B8:34:EA:C1 Certificate issuer: /CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Certificate serial: 010D0C9F4328584F542D6C92AE025134421A7840 Authority key identifier: A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/8bf12226-b81b-3a6b-9b8d-d6c33bad6237.roa Signing time: Mon 28 Sep 2026 21:14:53 +0000 ROA not before: Mon 28 Sep 2026 21:14:53 +0000 ROA not after: Sun 27 Dec 2026 22:14:53 +0000 asID: 32586 IP address blocks: 52.144.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:2d:6c:92:ae:02:51:34:42:1a:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Validity Not Before: Sep 28 21:14:53 2026 GMT Not After : Dec 27 22:14:53 2026 GMT Subject: CN=198f17f9-3c79-4bd9-8976-30b9bd31fc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:17:39:ab:09:4b:2a:21:0c:e9:1d:13:45: 96:43:8b:f3:5a:14:f1:66:b5:8e:92:fd:c1:75:f1: 64:cf:7f:e7:8f:b3:47:1b:8f:d9:db:cd:1c:84:ac: 1f:20:59:34:58:d3:22:44:2e:62:fd:78:e1:28:ee: 5a:32:89:54:e3:e6:ab:21:09:9e:a3:fd:55:ef:6a: a6:c5:cc:c0:81:d2:70:90:ce:23:82:3b:9f:63:f9: 38:d7:18:38:84:8c:ca:9c:8f:a7:ec:94:40:04:74: bf:f5:3d:5f:cb:b7:ba:ba:6f:73:cf:49:f5:86:71: f1:0a:94:e8:8f:7f:52:8e:b4:c4:25:f5:a9:c9:e7: 78:af:f7:c4:21:83:50:d5:98:06:af:50:59:19:67: 28:d6:32:1c:13:f2:a3:eb:40:69:95:32:1b:81:4a: 41:f5:40:fe:61:68:1a:ec:e4:ff:34:5e:c0:5a:1b: de:fb:1d:de:db:81:60:f3:f7:5e:6b:4b:07:53:9b: 6c:08:7c:69:2c:07:15:d2:1e:22:09:d0:c3:bf:8d: 7f:1a:f8:73:9f:db:0b:5b:53:ec:72:fc:81:b7:21: 0e:39:1f:1a:fb:09:ef:dc:08:36:6c:e2:4c:3f:02: 74:d9:e5:9d:5a:4c:f8:db:dc:40:9f:a8:fd:0c:7f: 9d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B7:9A:65:9D:93:40:E8:F3:AB:B9:FA:72:E2:9B:8C:B8:34:EA:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/8bf12226-b81b-3a6b-9b8d-d6c33bad6237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl X509v3 Authority Key Identifier: keyid:A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer sbgp-ipAddrBlock: critical IPv4: 52.144.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:57:32:85:ea:04:d2:64:2d:29:0b:29:11:14:19:98:e6:1d: c2:f4:fc:4c:2b:08:0d:3a:05:5b:c3:60:2e:68:1f:fe:99:b7: a3:1b:0b:a3:8b:4e:8a:27:16:86:7e:cb:de:ec:72:0f:f5:f5: 2c:3d:ea:fe:6a:46:67:f4:55:d8:97:cd:f4:5d:41:bb:74:d8: aa:12:54:9c:1c:37:56:1b:af:1d:03:0a:37:7e:ef:01:37:8a: 96:c8:04:8c:a2:ad:77:1b:78:ca:e7:72:1a:c1:81:e6:d1:69: e4:c6:23:3f:60:89:dd:40:33:36:78:3e:4b:3e:c1:d0:1d:83: 6b:b7:5e:b6:c1:d6:96:4a:8b:f9:8d:8c:e5:20:49:33:4a:d4: 16:90:80:9f:56:f2:17:26:69:96:67:0d:88:de:21:25:d7:fe: 91:46:8b:e9:0c:62:a4:e8:ce:a9:47:d2:42:2b:79:14:ab:1d: 7d:08:81:9b:e3:ca:23:58:c0:21:38:0e:90:5d:4b:b5:a5:ff: c1:38:d8:78:62:a0:f0:ac:14:10:ca:d8:07:0e:a1:cb:fa:3a: 65:6c:c2:2c:82:62:8a:f6:0d:ce:b0:60:2a:4e:14:cb:e9:b3: 8a:6a:8e:d4:82:aa:06:d5:f6:0a:18:be:b5:12:2a:57:9a:43: c9:f8:1e:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ULWySrgJRNEIaeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQwN2Y1OGQtMjdhOC00MmE1LWI3M2UtMWZlMzUwODFj NmRmMB4XDTI2MDkyODIxMTQ1M1oXDTI2MTIyNzIyMTQ1M1owLzEtMCsGA1UEAxMk MTk4ZjE3ZjktM2M3OS00YmQ5LTg5NzYtMzBiOWJkMzFmYzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH4XOasJSyohDOkdE0WWQ4vzWhTxZrWOkv3B dfFkz3/nj7NHG4/Z280chKwfIFk0WNMiRC5i/XjhKO5aMolU4+arIQmeo/1V72qm xczAgdJwkM4jgjufY/k41xg4hIzKnI+n7JRABHS/9T1fy7e6um9zz0n1hnHxCpTo j39SjrTEJfWpyed4r/fEIYNQ1ZgGr1BZGWco1jIcE/Kj60BplTIbgUpB9UD+YWga 7OT/NF7AWhve+x3e24Fg8/dea0sHU5tsCHxpLAcV0h4iCdDDv41/Gvhzn9sLW1Ps cvyBtyEOOR8a+wnv3Ag2bOJMPwJ02eWdWkz429xAn6j9DH+dUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO3mmWdk0Do86u5+nLim4y4NOrBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3 ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUzNTA4MWM2ZGYvOGJmMTIyMjYtYjgxYi0z YTZiLTliOGQtZDZjMzNiYWQ2MjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTQwN2Y1OGQtMjdhOC00MmE1LWI3 M2UtMWZlMzUwODFjNmRmLzE0MDdmNThkLTI3YTgtNDJhNS1iNzNlLTFmZTM1MDgx YzZkZi5jcmwwHwYDVR0jBBgwFoAUqXHCIBuAdC31fIHIgg2qq+D9GyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUz NTA4MWM2ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANJAbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFXMoXqBNJkLSkLKREUGZjmHcL0/EwrCA06BVvDYC5oH/6Zt6MbC6OL ToonFoZ+y97scg/19Sw96v5qRmf0VdiXzfRdQbt02KoSVJwcN1Ybrx0DCjd+7wE3 ipbIBIyirXcbeMrnchrBgebRaeTGIz9gid1AMzZ4Pks+wdAdg2u3XrbB1pZKi/mN jOUgSTNK1BaQgJ9W8hcmaZZnDYjeISXX/pFGi+kMYqTozqlH0kIreRSrHX0IgZvj yiNYwCE4DpBdS7Wl/8E42HhioPCsFBDK2AcOocv6OmVswiyCYor2Dc6wYCpOFMvp s4pqjtSCqgbV9goYvrUSKleaQ8n4His= -----END CERTIFICATE-----Generated at Mon Oct 5 14:24:42 2026 by rpki-client