$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa File: e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa (raw, json) Hash identifier: 8dQKm464+tOC2tRWTLOa/7rad2FfbFZp0WadS+ubEBw= Subject key identifier: 3B:37:F3:66:F4:BD:A5:00:D1:31:6B:E3:45:5F:01:6E:72:0B:44:C7 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584CF15779B3899C7239CDD9A500 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa Signing time: Sun 22 Feb 2026 02:00:32 +0000 ROA not before: Sun 22 Feb 2026 02:00:32 +0000 ROA not after: Sat 23 May 2026 01:00:32 +0000 asID: 400745 IP address blocks: 52.129.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:57:79:b3:89:9c:72:39:cd:d9:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Feb 22 02:00:32 2026 GMT Not After : May 23 01:00:32 2026 GMT Subject: CN=d36e2282-ad9e-4c79-a8b7-9c0da06075f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:f6:ed:1e:88:46:5c:dd:6c:4e:5d:91:38: c3:ae:50:87:48:7f:66:9d:dc:3f:3a:ea:51:9d:b4: f8:e5:0d:40:fb:eb:e1:0e:0d:57:12:86:96:10:9a: 8f:8d:88:ac:f5:51:b8:44:58:aa:29:cc:f5:d0:c2: 36:99:8b:6d:d2:97:d4:65:f9:21:c7:40:2c:b5:70: 5c:f8:e7:88:43:da:1a:b3:48:4e:36:60:35:74:6f: 62:46:41:bf:8f:ee:41:f0:4b:e4:e2:3b:5f:c7:c8: 20:12:d3:fe:8d:89:f7:ac:df:96:26:35:cf:c2:44: 90:bf:76:eb:f6:2e:54:89:2f:dc:51:44:10:a0:30: 24:44:4f:df:86:46:35:ff:9a:f5:41:4f:48:37:73: 90:b4:b0:26:f0:fa:5a:7d:ec:bb:c3:9b:a7:89:0d: 48:35:97:41:21:48:47:6e:fb:ff:8b:36:b5:23:4e: 7f:95:bd:1a:c3:fc:c5:82:1b:d9:72:30:8c:71:87: f9:2a:b6:3b:a9:c2:02:8e:96:a8:74:bf:a7:03:ed: 2a:7e:33:85:03:b0:21:df:f4:1e:25:01:97:28:df: 7d:b8:98:3f:e2:44:bc:0e:9d:04:ca:1f:60:93:d5: a3:f8:1b:56:e1:73:54:90:c1:3c:5d:1a:16:81:50: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:37:F3:66:F4:BD:A5:00:D1:31:6B:E3:45:5F:01:6E:72:0B:44:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:cd:72:7b:c2:07:18:00:63:f9:54:30:e8:ee:43:92:a8:e7: 46:c2:9f:0a:7e:e5:e5:2e:03:80:9d:af:fe:18:23:d5:ba:3f: ad:69:2f:58:6b:7a:ab:3c:2a:1b:ab:ff:1a:56:70:7d:e7:39: ef:f9:d3:19:f4:ae:81:94:58:3e:74:ce:1f:50:98:83:7a:e2: 85:29:bd:79:37:f6:48:92:e8:ea:7a:a4:1b:c5:f3:17:31:c1: fa:df:23:69:7d:dd:91:be:e0:e5:d0:b3:83:ba:fb:dd:e3:5d: 3b:23:80:79:aa:37:cb:e5:2e:c4:fc:fc:eb:88:13:00:7d:b3: c0:80:f9:a0:e2:ca:3a:7f:f0:90:71:b0:1b:3f:63:46:5c:11: 70:8c:d9:bd:a8:c6:b0:b2:48:b1:a3:9b:9d:b0:54:02:21:41: 60:e2:6a:35:3d:4c:f6:57:1e:c1:09:38:fb:62:d6:18:07:21: 3d:d1:6c:19:b3:a4:c4:f4:c1:eb:28:35:90:13:1b:e7:2f:b1: b3:9a:59:4a:89:8a:c6:5e:88:7e:77:19:0b:c3:52:2a:29:f1: fe:0a:b6:bf:f7:22:03:f9:86:aa:f2:90:91:7a:a7:48:03:40: 7a:83:4c:f6:98:fa:a0:3e:7f:d7:d0:7d:10:ee:83:bb:46:b8: d9:76:be:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzxV3mziZxyOc3ZpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI2MDIyMjAyMDAzMloXDTI2MDUyMzAxMDAzMlowLzEtMCsGA1UEAxMk ZDM2ZTIyODItYWQ5ZS00Yzc5LWE4YjctOWMwZGEwNjA3NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyED27R6IRlzdbE5dkTjDrlCHSH9mndw/OupR nbT45Q1A++vhDg1XEoaWEJqPjYis9VG4RFiqKcz10MI2mYtt0pfUZfkhx0AstXBc +OeIQ9oas0hONmA1dG9iRkG/j+5B8Evk4jtfx8ggEtP+jYn3rN+WJjXPwkSQv3br 9i5UiS/cUUQQoDAkRE/fhkY1/5r1QU9IN3OQtLAm8Ppafey7w5uniQ1INZdBIUhH bvv/iza1I05/lb0aw/zFghvZcjCMcYf5KrY7qcICjpaodL+nA+0qfjOFA7Ah3/Qe JQGXKN99uJg/4kS8Dp0Eyh9gk9Wj+BtW4XNUkME8XRoWgVC9IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs382b0vaUA0TFr40VfAW5yC0THMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZTNlMjg4MTktOTQ4Ny0z ZmVhLWI1ZWEtYjRmM2RiYjRmOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjNcnvCBxgAY/lUMOjuQ5Ko50bCnwp+5eUuA4Cdr/4YI9W6P61pL1hr eqs8Khur/xpWcH3nOe/50xn0roGUWD50zh9QmIN64oUpvXk39kiS6Op6pBvF8xcx wfrfI2l93ZG+4OXQs4O6+93jXTsjgHmqN8vlLsT8/OuIEwB9s8CA+aDiyjp/8JBx sBs/Y0ZcEXCM2b2oxrCySLGjm52wVAIhQWDiajU9TPZXHsEJOPti1hgHIT3RbBmz pMT0wesoNZATG+cvsbOaWUqJisZeiH53GQvDUiop8f4Ktr/3IgP5hqrykJF6p0gD QHqDTPaY+qA+f9fQfRDug7tGuNl2vqM= -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:35 2026 by rpki-client