$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa File: 57255afb-e05f-3ef2-8797-83efde89cf68.roa (raw, json) Hash identifier: dTvxgr4DdmqbYSiBPiBZ/UtGPuxopOhmhwa4WstkRDQ= Subject key identifier: 18:65:EC:FB:50:69:40:4B:EB:5C:32:80:92:07:B4:BB:48:E1:3A:1F Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584CF15779A2AEFA35FD5E410DC0 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa Signing time: Sun 22 Feb 2026 02:00:32 +0000 ROA not before: Sun 22 Feb 2026 02:00:32 +0000 ROA not after: Sat 23 May 2026 01:00:32 +0000 asID: 400745 IP address blocks: 52.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:57:79:a2:ae:fa:35:fd:5e:41:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Feb 22 02:00:32 2026 GMT Not After : May 23 01:00:32 2026 GMT Subject: CN=3999f471-4c45-4144-a4d5-c1fc878857b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:a6:59:18:3b:07:86:ee:f3:96:8d:fd:89: 69:b6:30:9e:70:46:b4:73:34:d1:04:c7:f8:8d:2e: 3b:7f:37:a4:ea:dc:e4:4d:0c:9f:35:19:03:63:8a: 9e:05:31:c8:ee:d9:9c:cb:25:6f:be:e7:82:09:8e: 7b:e7:aa:88:48:3b:e7:47:50:92:12:4d:87:73:b8: 10:e5:54:1a:ce:21:15:88:9a:d0:0d:62:db:dd:24: d1:e4:cd:e5:b2:49:a0:ee:51:30:e4:9e:26:94:2e: 9c:4d:09:fe:6e:15:9b:45:fe:e9:5e:16:94:32:3d: 2b:a5:8a:4a:2c:57:61:f8:8e:25:01:1a:7a:b0:a9: 83:ff:01:5d:45:86:46:cc:6d:5d:23:b9:43:4c:48: 8d:1f:9b:8e:cd:be:50:56:90:64:44:22:46:c3:e4: 18:19:4f:84:a4:90:9e:31:28:8c:4f:93:39:f3:77: af:b8:53:23:85:8c:2a:71:f3:1b:23:2b:70:64:7a: 1f:69:fc:cd:7c:ca:38:52:ed:a4:f1:1a:1d:21:30: 14:89:03:47:5f:1e:18:58:02:b7:d6:45:95:da:6f: 3d:69:97:08:9f:e6:d2:84:18:da:4f:37:1a:5b:36: 6c:b5:ec:2f:49:21:22:bf:2e:5f:45:53:78:0f:54: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:65:EC:FB:50:69:40:4B:EB:5C:32:80:92:07:B4:BB:48:E1:3A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:30:11:0e:1c:b5:6a:8f:b6:b7:9b:46:cd:21:ec:1c:f9:cb: 47:6c:6a:59:97:19:ee:10:cc:15:24:21:c6:29:69:f3:c2:c0: f1:90:d7:37:42:4e:65:1e:6e:18:d8:49:88:17:57:e6:c8:d3: 47:a5:04:cd:6c:65:f2:0f:ba:8d:cc:7d:de:8d:62:5d:14:7c: 23:dd:db:1b:b6:58:23:28:cd:49:67:00:24:d8:91:dd:65:c0: e2:f5:3a:53:a7:04:a1:d1:f1:b9:e4:d3:ca:e9:fa:c8:92:8a: 37:e1:6e:ed:a1:49:48:9e:02:2c:96:35:28:44:f0:bf:0e:8b: db:a6:a8:4a:24:31:67:dd:c4:19:4c:1d:e6:15:fd:7a:d5:5c: 61:2b:02:9f:65:f0:9a:00:f4:fb:13:a7:8a:ef:22:cd:e8:46: f5:17:43:c2:63:59:df:d0:6c:44:78:ae:34:bd:3c:07:8e:05: c0:02:8a:7f:83:de:43:61:da:92:05:0f:32:61:69:57:da:db: 2e:77:ed:3d:7c:f6:f9:e4:db:05:0f:c2:3e:40:20:71:8a:f0: 17:b0:1f:cd:19:10:68:09:0a:79:2c:03:38:7c:8a:77:e8:8b: 4e:75:8c:03:29:ad:24:82:fd:ff:08:a4:e4:27:b0:cd:4b:f5: 17:19:94:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzxV3mirvo1/V5BDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI2MDIyMjAyMDAzMloXDTI2MDUyMzAxMDAzMlowLzEtMCsGA1UEAxMk Mzk5OWY0NzEtNGM0NS00MTQ0LWE0ZDUtYzFmYzg3ODg1N2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzGmWRg7B4bu85aN/YlptjCecEa0czTRBMf4 jS47fzek6tzkTQyfNRkDY4qeBTHI7tmcyyVvvueCCY5756qISDvnR1CSEk2Hc7gQ 5VQaziEViJrQDWLb3STR5M3lskmg7lEw5J4mlC6cTQn+bhWbRf7pXhaUMj0rpYpK LFdh+I4lARp6sKmD/wFdRYZGzG1dI7lDTEiNH5uOzb5QVpBkRCJGw+QYGU+EpJCe MSiMT5M583evuFMjhYwqcfMbIytwZHofafzNfMo4Uu2k8RodITAUiQNHXx4YWAK3 1kWV2m89aZcIn+bShBjaTzcaWzZstewvSSEivy5fRVN4D1SzcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhl7PtQaUBL61wygJIHtLtI4TofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvNTcyNTVhZmItZTA1Zi0z ZWYyLTg3OTctODNlZmRlODljZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0wEQ4ctWqPtrebRs0h7Bz5y0dsalmXGe4QzBUkIcYpafPCwPGQ1zdC TmUebhjYSYgXV+bI00elBM1sZfIPuo3Mfd6NYl0UfCPd2xu2WCMozUlnACTYkd1l wOL1OlOnBKHR8bnk08rp+siSijfhbu2hSUieAiyWNShE8L8Oi9umqEokMWfdxBlM HeYV/XrVXGErAp9l8JoA9PsTp4rvIs3oRvUXQ8JjWd/QbER4rjS9PAeOBcACin+D 3kNh2pIFDzJhaVfa2y537T189vnk2wUPwj5AIHGK8BewH80ZEGgJCnksAzh8info i051jAMprSSC/f8IpOQnsM1L9RcZlJE= -----END CERTIFICATE-----Generated at Mon Mar 2 23:23:51 2026 by rpki-client