$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/ad214fa9-5028-3913-a474-0fc7cd823fbd.roa File: ad214fa9-5028-3913-a474-0fc7cd823fbd.roa (raw, json) Hash identifier: YYjFnYGajISyaGb4a/MW+itLQJbZ7wOzCCpC4m9sQnE= Subject key identifier: 57:BC:40:63:B3:A0:A9:BB:99:95:CE:5A:90:63:C3:15:D5:7C:59:B2 Certificate issuer: /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Certificate serial: 010D0C9F4328584F49759C7752F0751FF5A32C40 Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/ad214fa9-5028-3913-a474-0fc7cd823fbd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 52.129.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:9c:77:52:f0:75:1f:f5:a3:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ebc388db-ab88-4eeb-9e27-f5d2b947f8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7f:bb:d3:74:4f:39:c4:2e:9a:f9:cd:65:af: 25:b6:dd:a5:87:6d:6e:c5:1e:f9:18:8e:41:61:c1: c3:d6:a7:3b:cc:0a:85:e7:ea:60:84:f0:88:83:81: af:6e:e7:28:ff:8c:a9:84:c9:b6:e7:7e:9e:95:87: b0:b4:da:f4:20:38:bb:09:c2:d0:6c:90:04:e1:8a: f7:71:43:fd:86:f1:c4:74:80:27:ef:ba:3d:3a:b1: 4b:8b:70:5f:1f:9a:02:9b:f3:09:15:eb:57:40:5f: 8a:78:0e:52:42:a3:28:ff:be:c7:60:39:76:c9:48: 08:5e:69:5a:79:79:17:41:f3:6f:a8:bb:b7:6c:34: c0:a1:36:e3:2b:9c:cb:97:b9:ea:f6:48:e8:c5:f8: 61:8e:35:b6:fe:35:82:9f:13:80:b7:b1:1d:26:7d: 76:bd:25:10:6c:71:24:cb:1f:3a:82:e5:7d:e2:cd: c0:6a:d1:fd:cb:3e:78:b1:eb:21:d7:20:cc:c9:79: 41:cf:2a:19:e8:66:6f:dd:45:1d:6e:f9:92:e4:61: 65:d5:af:13:bf:68:c0:57:ad:2c:f4:ab:dd:39:a9: 76:8d:eb:65:ba:98:66:11:f7:88:26:82:8a:43:b8: 13:58:91:a5:1b:19:d4:8c:5a:a2:03:55:d3:96:e0: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:40:63:B3:A0:A9:BB:99:95:CE:5A:90:63:C3:15:D5:7C:59:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/ad214fa9-5028-3913-a474-0fc7cd823fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl X509v3 Authority Key Identifier: keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer sbgp-ipAddrBlock: critical IPv4: 52.129.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ba:02:74:fc:4f:06:5e:5e:44:19:66:42:7f:d1:e6:8d:53: 31:c5:b8:25:cd:eb:8d:85:92:de:db:2d:8d:96:90:7a:2e:56: c5:7c:d9:f1:ba:f0:cc:29:be:a2:a3:db:02:42:cd:c5:8c:68: ae:44:5c:7a:03:6b:13:b0:07:45:a8:cf:ee:61:62:1d:3e:75: 54:8a:25:17:23:a2:b1:4b:79:e6:bc:6a:5e:fc:31:0d:63:f4: 88:37:8e:17:a1:b8:b7:43:42:42:49:69:30:18:01:f1:48:a1: 8b:4f:95:1b:a2:b6:5c:84:ca:2a:8e:f2:f1:9d:1c:03:19:83: fd:8f:94:2f:66:2d:1b:88:a1:93:d7:67:77:ee:21:cd:8b:fa: d6:f7:25:3a:81:73:36:73:11:21:7d:06:a7:49:f4:c9:65:27: 03:04:af:37:7b:94:44:9d:78:8f:db:87:dd:03:7a:1a:e1:b0: 6e:40:fd:78:06:0e:8f:f7:a8:40:7e:d1:a0:6f:a8:29:b2:4d: fa:bb:d6:59:00:18:8f:87:6a:90:4c:cb:08:4f:32:9e:7a:ea: 30:70:4f:5b:20:51:6b:3c:92:36:1d:12:bf:dc:28:00:35:e6: b9:4c:ab:ad:6b:f4:96:76:2c:a2:ff:aa:46:5a:f0:b4:ba:2f: a4:f9:7e:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdZx3UvB1H/WjLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE5MDkzM2UtMjAwNS00YzMzLWFlM2YtNzQ0YjdiNzBl ZDdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWJjMzg4ZGItYWI4OC00ZWViLTllMjctZjVkMmI5NDdmOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn+703RPOcQumvnNZa8ltt2lh21uxR75GI5B YcHD1qc7zAqF5+pghPCIg4Gvbuco/4yphMm2536elYewtNr0IDi7CcLQbJAE4Yr3 cUP9hvHEdIAn77o9OrFLi3BfH5oCm/MJFetXQF+KeA5SQqMo/77HYDl2yUgIXmla eXkXQfNvqLu3bDTAoTbjK5zLl7nq9kjoxfhhjjW2/jWCnxOAt7EdJn12vSUQbHEk yx86guV94s3AatH9yz54sesh1yDMyXlBzyoZ6GZv3UUdbvmS5GFl1a8Tv2jAV60s 9KvdOal2jetluphmEfeIJoKKQ7gTWJGlGxnUjFqiA1XTluCRYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe8QGOzoKm7mZXOWpBjwxXVfFmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkw OTMzZS0yMDA1LTRjMzMtYWUzZi03NDRiN2I3MGVkN2MvYWQyMTRmYTktNTAyOC0z OTEzLWE0NzQtMGZjN2NkODIzZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE5MDkzM2UtMjAwNS00YzMzLWFl M2YtNzQ0YjdiNzBlZDdjLzFhOTA5MzNlLTIwMDUtNGMzMy1hZTNmLTc0NGI3Yjcw ZWQ3Yy5jcmwwHwYDVR0jBBgwFoAU1HSrk3fw+jwU6HiojPfAQyQ3aOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkwOTMzZS0yMDA1LTRjMzMtYWUzZi03NDRi N2I3MGVkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa6AnT8TwZeXkQZZkJ/0eaNUzHFuCXN642Fkt7bLY2WkHouVsV82fG6 8MwpvqKj2wJCzcWMaK5EXHoDaxOwB0Woz+5hYh0+dVSKJRcjorFLeea8al78MQ1j 9Ig3jhehuLdDQkJJaTAYAfFIoYtPlRuitlyEyiqO8vGdHAMZg/2PlC9mLRuIoZPX Z3fuIc2L+tb3JTqBczZzESF9BqdJ9MllJwMErzd7lESdeI/bh90DehrhsG5A/XgG Do/3qEB+0aBvqCmyTfq71lkAGI+HapBMywhPMp566jBwT1sgUWs8kjYdEr/cKAA1 5rlMq61r9JZ2LKL/qkZa8LS6L6T5fog= -----END CERTIFICATE-----Generated at Mon Sep 28 21:48:04 2026 by rpki-client