$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/476b81e3-0a9e-3123-b1fd-6213da9ec63e.roa File: 476b81e3-0a9e-3123-b1fd-6213da9ec63e.roa (raw, json) Hash identifier: Z6sASuHIJaxZ1dS1Co+lD6eksu9+0glG2YRRIvfDwq8= Subject key identifier: 21:06:3E:C5:3B:1A:37:DF:51:DA:34:E8:E5:44:3A:94:9F:31:80:CB Certificate issuer: /CN=03076186-05a5-4f02-8553-d5325a66f27c Certificate serial: 010D0C9F4328584EFCACBFD9199710064CEB0D00 Authority key identifier: 69:D4:35:E5:90:23:80:6B:D2:31:31:23:77:EB:74:1B:16:54:4E:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/476b81e3-0a9e-3123-b1fd-6213da9ec63e.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 395454 IP address blocks: 52.144.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/03076186-05a5-4f02-8553-d5325a66f27c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/03076186-05a5-4f02-8553-d5325a66f27c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:bf:d9:19:97:10:06:4c:eb:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03076186-05a5-4f02-8553-d5325a66f27c Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=b9e6d04b-c932-4fac-a9c3-05afc760a668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:88:76:ae:74:49:ec:42:c8:ac:00:ff:61: 5a:08:a0:8f:35:bc:51:fc:ca:89:23:2b:52:4b:69: 24:94:0e:ff:cf:47:90:5a:47:bb:a9:bd:3c:05:57: 0b:f4:25:2d:29:2c:54:7b:05:68:79:7f:29:58:9f: a2:bc:a2:05:58:65:4e:6b:13:58:a7:4c:76:f7:4b: 79:86:ea:ac:0b:94:5b:49:e2:25:3d:66:79:35:66: fc:e1:6f:66:7a:ee:c1:85:1f:ae:35:95:8a:29:52: bd:89:93:6e:ac:ca:a4:b0:d7:dd:84:63:b4:cb:32: 4f:0b:31:f1:80:24:b1:85:65:9e:42:cb:92:74:e4: e2:3c:cc:dc:dc:d3:25:68:cc:2e:ad:dd:a6:1f:13: aa:35:7f:d9:c2:95:e4:e2:82:d7:5a:1e:2f:3e:5b: a6:ac:86:1d:ae:61:2f:de:fd:38:f0:11:25:1e:2f: 40:00:3a:c0:37:54:e1:d9:9f:e5:a7:0a:97:c7:35: c6:31:b4:ab:b0:64:3f:11:c0:ac:81:42:22:7b:38: 9c:6f:71:a5:64:c5:8b:60:5a:f5:c3:ba:d2:28:6e: f7:58:71:02:f5:0a:9d:97:b6:6e:66:55:18:f3:4b: ab:e9:43:b6:29:cf:1b:31:ee:47:f5:cf:3f:5f:dc: d4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:06:3E:C5:3B:1A:37:DF:51:DA:34:E8:E5:44:3A:94:9F:31:80:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/476b81e3-0a9e-3123-b1fd-6213da9ec63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/03076186-05a5-4f02-8553-d5325a66f27c.crl X509v3 Authority Key Identifier: keyid:69:D4:35:E5:90:23:80:6B:D2:31:31:23:77:EB:74:1B:16:54:4E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c.cer sbgp-ipAddrBlock: critical IPv4: 52.144.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:85:1f:27:15:a7:c5:b0:b1:96:29:f0:3e:d8:b5:76:b1:12: 3a:37:97:2e:2f:9a:fa:ac:64:47:d5:87:ad:57:ec:22:35:95: c3:64:d8:a1:47:da:40:b0:a8:ca:df:aa:c1:c7:44:0d:30:67: 7f:88:9e:84:ad:65:d1:01:85:6f:39:b2:da:c6:30:44:97:54: 35:e9:3b:17:3a:1f:a9:51:53:9c:7d:c1:5b:95:95:4a:55:3c: e3:85:37:1d:ee:fd:e9:df:3e:3a:6a:92:91:a4:28:f2:bc:f6: 6a:da:51:f4:6b:2c:ab:a2:8a:1e:0a:fb:c5:e8:23:45:9a:47: 86:c5:d7:90:ad:40:f6:e7:65:ce:b9:53:87:b2:ee:b7:63:89: 23:66:8f:f2:42:01:28:02:7e:a6:50:01:6b:f4:8b:fa:4b:78: 07:22:97:cd:c1:e3:8c:a7:cf:51:56:43:51:fc:9c:2f:14:b0: ed:d9:88:29:3e:65:f8:01:31:10:83:34:96:70:62:fb:24:ff: 94:df:ed:3b:8d:77:1a:2a:da:ed:8a:48:27:1d:e1:e0:45:83: 19:35:9a:6d:dc:04:8a:e4:0c:93:e3:a3:6e:5a:b7:65:f6:ad: ec:0a:e6:53:bc:b2:f8:23:92:3e:f0:0d:d7:6e:d7:d5:5e:f8: b8:d8:45:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rL/ZGZcQBkzrDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMwNzYxODYtMDVhNS00ZjAyLTg1NTMtZDUzMjVhNjZm MjdjMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YjllNmQwNGItYzkzMi00ZmFjLWE5YzMtMDVhZmM3NjBhNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB6Idq50SexCyKwA/2FaCKCPNbxR/MqJIytS S2kklA7/z0eQWke7qb08BVcL9CUtKSxUewVoeX8pWJ+ivKIFWGVOaxNYp0x290t5 huqsC5RbSeIlPWZ5NWb84W9meu7BhR+uNZWKKVK9iZNurMqksNfdhGO0yzJPCzHx gCSxhWWeQsuSdOTiPMzc3NMlaMwurd2mHxOqNX/ZwpXk4oLXWh4vPlumrIYdrmEv 3v048BElHi9AADrAN1Th2Z/lpwqXxzXGMbSrsGQ/EcCsgUIiezicb3GlZMWLYFr1 w7rSKG73WHEC9Qqdl7ZuZlUY80ur6UO2Kc8bMe5H9c8/X9zUqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEGPsU7GjffUdo06OVEOpSfMYDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMzA3 NjE4Ni0wNWE1LTRmMDItODU1My1kNTMyNWE2NmYyN2MvNDc2YjgxZTMtMGE5ZS0z MTIzLWIxZmQtNjIxM2RhOWVjNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDMwNzYxODYtMDVhNS00ZjAyLTg1 NTMtZDUzMjVhNjZmMjdjLzAzMDc2MTg2LTA1YTUtNGYwMi04NTUzLWQ1MzI1YTY2 ZjI3Yy5jcmwwHwYDVR0jBBgwFoAUadQ15ZAjgGvSMTEjd+t0GxZUTrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMzA3NjE4Ni0wNWE1LTRmMDItODU1My1kNTMy NWE2NmYyN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyFHycVp8WwsZYp8D7YtXaxEjo3ly4vmvqsZEfVh61X7CI1lcNk2KFH 2kCwqMrfqsHHRA0wZ3+InoStZdEBhW85strGMESXVDXpOxc6H6lRU5x9wVuVlUpV POOFNx3u/enfPjpqkpGkKPK89mraUfRrLKuiih4K+8XoI0WaR4bF15CtQPbnZc65 U4ey7rdjiSNmj/JCASgCfqZQAWv0i/pLeAcil83B44ynz1FWQ1H8nC8UsO3ZiCk+ ZfgBMRCDNJZwYvsk/5Tf7TuNdxoq2u2KSCcd4eBFgxk1mm3cBIrkDJPjo25at2X2 rewK5lO8svgjkj7wDddu19Ve+LjYRVI= -----END CERTIFICATE-----Generated at Mon Sep 28 23:32:54 2026 by rpki-client