$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa File: 57255afb-e05f-3ef2-8797-83efde89cf68.roa (raw, json) Hash identifier: 2fBvylDZae01x5CIeQQAa+0qSjHfov4h/Nman+Mk0p8= Subject key identifier: 20:00:99:1A:61:2A:6B:1F:A4:47:72:54:C7:3B:AD:C2:8D:CC:20:65 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584B3126F27CAF8E40222C2EB080 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 400745 IP address blocks: 52.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f2:7c:af:8e:40:22:2c:2e:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=ad853730-c61b-4591-a346-a8550ddd7375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:3e:66:eb:2c:fc:5c:9f:01:5b:1f:d5:07: 4b:4c:2b:53:d2:4a:d3:17:9b:a7:56:6c:0a:14:bc: 61:19:6d:17:6e:47:22:dc:fc:82:00:f4:f9:2d:a1: 4a:6e:1c:8c:ea:38:e0:04:f4:d8:c8:c0:e9:04:51: f4:5c:ed:de:f3:df:30:ce:79:e0:e4:0f:47:51:1a: 71:06:30:50:9f:76:7f:35:8d:5b:4f:4f:81:f1:36: 63:f5:54:ee:05:ed:e8:1d:36:96:39:36:eb:8c:df: 72:76:03:7e:0e:98:4d:6a:1b:b3:86:b0:18:d6:c6: 84:ec:32:03:89:a9:88:fe:39:d9:84:8f:95:c0:4f: b4:ab:68:38:65:5b:15:5d:18:4f:c6:60:a7:86:e7: 2f:c1:28:bb:1a:a8:7d:83:59:d1:2f:37:fc:d9:67: ed:2d:57:35:1e:73:0f:98:1a:ed:90:88:ac:ad:fc: b4:ef:b0:a3:a8:63:84:9a:70:ee:2c:0d:0f:98:fb: f4:41:a1:1a:4e:bd:42:78:6e:23:2c:a3:f8:d8:7d: 43:44:1e:7b:6a:e8:d6:c6:5c:df:d4:2a:35:ac:c3: 7c:2d:00:ca:92:37:7e:99:53:b0:40:93:c5:3b:3c: db:4a:2a:66:a2:e2:56:87:a0:b1:ed:86:98:79:d3: b7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:00:99:1A:61:2A:6B:1F:A4:47:72:54:C7:3B:AD:C2:8D:CC:20:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/57255afb-e05f-3ef2-8797-83efde89cf68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:91:f6:aa:03:12:b2:0d:54:ea:5b:1d:99:eb:f4:b0:07:cc: 91:9e:20:64:b1:0a:dd:e6:30:6f:e1:72:49:fa:b7:7a:aa:bb: 54:56:85:1a:80:69:38:30:6c:8e:a7:84:c0:46:7a:e3:a4:15: d9:32:e2:d6:03:66:8e:19:0d:f0:fa:35:b7:49:42:fb:c5:cb: 33:dc:dd:79:96:1f:e8:56:a8:c5:86:01:6a:f1:c6:6e:e8:d6: 9a:c4:33:48:b0:e0:ff:32:8e:f5:a5:cc:70:5c:46:78:72:7e: 5a:39:35:d3:d2:23:3a:b3:87:37:47:66:63:8a:cc:71:28:a0: b2:7d:10:62:aa:65:63:4a:f6:49:1b:fb:f4:db:e4:aa:c5:6d: 39:fd:a4:eb:c0:f5:7e:34:ed:02:bf:86:c9:62:90:5a:96:fa: 12:15:34:ea:de:98:81:98:9d:ba:ae:df:4a:f3:81:32:dc:e4: 20:ea:31:4b:86:bc:b1:9d:91:b4:f5:d4:74:31:c0:27:0f:1d: d4:80:e6:92:d6:55:ca:5a:30:27:76:99:c4:3c:f5:73:37:7e: d2:e5:d1:57:b3:b3:a2:c2:25:5e:27:62:c0:58:3b:48:37:77: ff:55:d2:f0:cb:0b:58:ad:65:dc:2b:72:ac:87:41:73:83:e5: 40:b1:6e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvJ8r45AIiwusIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk YWQ4NTM3MzAtYzYxYi00NTkxLWEzNDYtYTg1NTBkZGQ3Mzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOE+Zuss/FyfAVsf1QdLTCtT0krTF5unVmwK FLxhGW0Xbkci3PyCAPT5LaFKbhyM6jjgBPTYyMDpBFH0XO3e898wznng5A9HURpx BjBQn3Z/NY1bT0+B8TZj9VTuBe3oHTaWOTbrjN9ydgN+DphNahuzhrAY1saE7DID iamI/jnZhI+VwE+0q2g4ZVsVXRhPxmCnhucvwSi7Gqh9g1nRLzf82WftLVc1HnMP mBrtkIisrfy077CjqGOEmnDuLA0PmPv0QaEaTr1CeG4jLKP42H1DRB57aujWxlzf 1Co1rMN8LQDKkjd+mVOwQJPFOzzbSipmouJWh6Cx7YaYedO3qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAAmRphKmsfpEdyVMc7rcKNzCBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvNTcyNTVhZmItZTA1Zi0z ZWYyLTg3OTctODNlZmRlODljZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmR9qoDErINVOpbHZnr9LAHzJGeIGSxCt3mMG/hckn6t3qqu1RWhRqA aTgwbI6nhMBGeuOkFdky4tYDZo4ZDfD6NbdJQvvFyzPc3XmWH+hWqMWGAWrxxm7o 1prEM0iw4P8yjvWlzHBcRnhyflo5NdPSIzqzhzdHZmOKzHEooLJ9EGKqZWNK9kkb +/Tb5KrFbTn9pOvA9X407QK/hslikFqW+hIVNOremIGYnbqu30rzgTLc5CDqMUuG vLGdkbT11HQxwCcPHdSA5pLWVcpaMCd2mcQ89XM3ftLl0Vezs6LCJV4nYsBYO0g3 d/9V0vDLC1itZdwrcqyHQXOD5UCxbjQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:17 2025 by rpki-client