$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa File: dd445671-6815-3a61-a556-1bfd773ca1e6.roa (raw, json) Hash identifier: Sh0UH7i9GnxKvBqEwJeriK4d9qjBYPlIPj0NmmBchYQ= Subject key identifier: D7:1D:F4:9A:96:09:52:C2:E3:7D:19:57:58:FE:78:56:90:31:72:2C Certificate issuer: /CN=0d32fa67-7158-4437-9e64-f0926c4e4d26 Certificate serial: 010D0C9F4328584F0D6CE00AECF222FCDCCEA050 Authority key identifier: 04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 399134 IP address blocks: 52.124.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e0:0a:ec:f2:22:fc:dc:ce:a0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d32fa67-7158-4437-9e64-f0926c4e4d26 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=02c8f4d5-221d-44f6-858a-4fbe8d7d70ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3c:00:fd:18:bd:21:d3:ca:ca:54:1e:2f:23: dc:12:81:b7:30:be:24:fc:5f:c7:ce:91:1e:cb:76: d9:ff:0b:da:36:06:f5:d7:b6:d6:de:4a:7f:ad:03: f9:be:eb:5a:7b:5a:dc:fc:f6:62:14:f5:b6:7f:81: 56:dd:b1:93:6f:dc:ed:8c:a2:43:e0:66:a5:8a:62: cb:b1:8c:e7:1e:ce:21:de:d7:33:bd:72:6b:d8:41: eb:bc:a1:d5:e4:8c:6e:b1:e3:7c:0c:60:3f:d9:1a: 5f:4a:34:38:80:5b:c8:6d:79:96:8b:2e:a5:8f:ef: f5:5e:4c:ea:d7:54:05:9d:ec:03:d9:07:27:95:d5: 31:cb:3c:a0:49:17:1b:97:f0:74:c0:72:34:86:04: 85:e1:48:0c:63:38:74:bc:24:07:60:50:79:cb:58: d1:d1:a4:7a:43:f7:73:d5:65:6f:6f:d2:1e:7a:03: 22:dc:76:38:a2:9e:9f:8f:3f:6c:7a:3f:4a:22:96: c0:9a:80:4d:15:44:1b:4e:86:11:fb:09:80:d5:e7: b0:15:35:a0:fb:1d:1f:0c:76:3d:56:80:72:6e:7e: 1d:8a:d2:84:81:b4:ed:52:87:ac:21:07:4e:e5:5b: fc:c0:b4:f6:73:e0:78:91:b8:b6:fb:bd:ed:ea:8b: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1D:F4:9A:96:09:52:C2:E3:7D:19:57:58:FE:78:56:90:31:72:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl X509v3 Authority Key Identifier: keyid:04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer sbgp-ipAddrBlock: critical IPv4: 52.124.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:64:ae:51:23:2c:aa:8c:6c:b0:99:a3:76:a1:e5:09:de:59: 3f:d6:37:ec:4e:d1:49:e9:b2:82:6c:6d:d7:f6:c5:19:e1:9d: fb:45:a4:a1:09:77:48:53:c8:72:1c:26:47:55:9b:3e:d7:66: 94:d1:86:4f:70:12:f7:2a:c7:19:9d:6f:9b:8d:33:0f:96:a5: c6:71:33:c0:83:2b:b2:8f:fa:d5:2b:a3:47:b0:26:4a:90:f4: 89:cf:fb:49:ba:7c:9d:f5:5b:72:83:5f:66:97:3e:0a:9f:8e: ce:63:1a:fe:c3:08:f2:2d:4c:72:a9:d2:f2:4c:97:94:52:40: 69:28:a7:8b:71:11:0d:ae:20:e5:27:0f:9e:ff:fd:e9:76:1f: 37:09:ed:fe:5d:b1:aa:dc:3d:0c:d3:b8:71:5e:c9:6a:ee:f5: d0:20:bf:0d:9d:13:51:e3:32:2f:f2:48:c1:ef:f4:3b:07:73: d8:f3:9e:53:fe:86:b5:c8:13:78:1d:dd:39:71:5b:4f:0b:81: 89:47:4c:82:8e:ec:44:90:bd:55:46:ef:a8:24:59:b4:3a:08: f7:01:e3:43:c4:cc:28:69:93:10:52:19:11:0a:3e:1c:a4:78: f8:3c:51:1c:11:44:81:57:52:02:c2:f9:47:3f:b4:b3:25:54: fe:83:15:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOAK7PIi/NzOoFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzMmZhNjctNzE1OC00NDM3LTllNjQtZjA5MjZjNGU0 ZDI2MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MDJjOGY0ZDUtMjIxZC00NGY2LTg1OGEtNGZiZThkN2Q3MGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDwA/Ri9IdPKylQeLyPcEoG3ML4k/F/HzpEe y3bZ/wvaNgb117bW3kp/rQP5vutae1rc/PZiFPW2f4FW3bGTb9ztjKJD4GalimLL sYznHs4h3tczvXJr2EHrvKHV5IxuseN8DGA/2RpfSjQ4gFvIbXmWiy6lj+/1Xkzq 11QFnewD2QcnldUxyzygSRcbl/B0wHI0hgSF4UgMYzh0vCQHYFB5y1jR0aR6Q/dz 1WVvb9IeegMi3HY4op6fjz9sej9KIpbAmoBNFUQbToYR+wmA1eewFTWg+x0fDHY9 VoBybn4ditKEgbTtUoesIQdO5Vv8wLT2c+B4kbi2+73t6ovhcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcd9JqWCVLC430ZV1j+eFaQMXIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDMy ZmE2Ny03MTU4LTQ0MzctOWU2NC1mMDkyNmM0ZTRkMjYvZGQ0NDU2NzEtNjgxNS0z YTYxLWE1NTYtMWJmZDc3M2NhMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQzMmZhNjctNzE1OC00NDM3LTll NjQtZjA5MjZjNGU0ZDI2LzBkMzJmYTY3LTcxNTgtNDQzNy05ZTY0LWYwOTI2YzRl NGQyNi5jcmwwHwYDVR0jBBgwFoAUBEx1DkW6xAnA6QI7v20+IM7/BdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDMyZmE2Ny03MTU4LTQ0MzctOWU2NC1mMDky NmM0ZTRkMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdkrlEjLKqMbLCZo3ah5QneWT/WN+xO0UnpsoJsbdf2xRnhnftFpKEJ d0hTyHIcJkdVmz7XZpTRhk9wEvcqxxmdb5uNMw+WpcZxM8CDK7KP+tUro0ewJkqQ 9InP+0m6fJ31W3KDX2aXPgqfjs5jGv7DCPItTHKp0vJMl5RSQGkop4txEQ2uIOUn D57//el2HzcJ7f5dsarcPQzTuHFeyWru9dAgvw2dE1HjMi/ySMHv9DsHc9jznlP+ hrXIE3gd3TlxW08LgYlHTIKO7ESQvVVG76gkWbQ6CPcB40PEzChpkxBSGREKPhyk ePg8URwRRIFXUgLC+Uc/tLMlVP6DFTg= -----END CERTIFICATE-----Generated at Wed Oct 14 20:11:03 2026 by rpki-client