$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa File: 0400b87c-f24c-326c-a2a2-44c7961b7277.roa (raw, json) Hash identifier: shAZ2n3Sev8JtQNtN9yaL2fwi7SNnEfkJ8ld2VY/ZlM= Subject key identifier: CD:79:5F:54:18:97:DF:C9:8F:13:80:94:18:B1:76:59:02:10:0E:A3 Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F4328584CA0619E797BFCBF683E93B100 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 399150 IP address blocks: 52.128.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:9e:79:7b:fc:bf:68:3e:93:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=4f7c78d1-aa4c-41ac-93f5-cde2ce34aace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:36:46:35:6b:3d:8c:a2:4d:cc:e0:23:6f: 36:2a:56:33:db:70:9b:97:fc:a3:4b:f7:32:e0:0e: 0b:a5:c4:61:1b:9f:ee:ea:47:2b:e6:95:7e:c5:d4: 89:ca:a5:cd:e5:7e:f9:b8:f5:98:0c:6f:37:ed:f2: 2f:b3:df:52:78:52:e2:6e:85:09:05:88:83:58:b8: 64:19:21:f4:b3:da:cf:23:d7:81:ae:6b:06:4f:e8: c8:ad:e1:f6:cc:1b:4d:06:35:81:d9:1d:6f:53:04: 2b:81:fa:5c:04:d2:42:2a:4e:e1:f8:50:38:e2:37: c6:b3:cd:53:53:41:85:d1:17:e1:b3:1b:3a:c6:6b: a3:50:4f:16:5a:78:75:96:25:fc:d3:b3:80:05:eb: 32:c3:96:91:aa:a5:23:d3:4a:8f:e4:7e:f6:56:7f: b0:02:de:aa:f2:70:e2:35:b1:04:d4:6a:67:46:3d: 1b:ab:cd:fe:43:18:04:a1:03:63:fa:a9:76:3c:b4: 89:43:24:3f:e1:c8:f9:13:a9:87:c0:9b:a4:02:fe: 64:e8:dd:5c:f2:ca:b5:a0:6b:51:ba:9f:4a:e5:4d: 67:8f:bd:f8:7b:76:3f:78:ec:5c:77:fe:f1:44:82: c4:1b:94:ed:4b:51:25:1f:93:86:f9:97:27:5e:6a: 50:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:79:5F:54:18:97:DF:C9:8F:13:80:94:18:B1:76:59:02:10:0E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:98:ab:de:67:42:f8:fa:f2:65:36:b5:3b:39:00:de:54:e6: 46:f8:87:37:d7:09:28:22:5b:7a:2e:1a:a3:73:67:fb:d2:78: 00:1e:14:6f:11:d1:78:08:7c:52:a0:0e:78:cb:d5:e5:87:32: 4c:8a:46:78:db:58:fd:f2:3b:f8:3c:7c:08:f8:5c:8e:39:1b: 4c:fe:af:8a:89:40:07:f3:a1:d1:e5:b4:82:28:9e:6d:c4:85: f1:ce:e7:b2:5a:93:c5:87:d8:06:e1:50:11:59:54:06:d5:07: 9a:f0:eb:2c:8e:d3:f5:7d:2e:f3:2a:c8:05:a2:44:5e:3b:d7: 69:c9:9a:75:98:00:08:42:8d:52:77:09:94:bd:79:89:9a:13: e7:73:25:b0:0e:f7:3a:f1:06:87:ec:23:ad:5a:c6:6e:e6:35: 6f:01:6a:87:22:0e:a2:2f:58:3b:b8:27:89:ae:38:e6:9a:cb: 6b:bd:09:a1:54:a9:c1:32:a3:43:fb:35:63:6d:8b:d6:00:cd: 21:10:3b:27:9d:0a:dd:56:35:55:74:4a:e3:6a:a4:f1:d6:1f: e7:93:7d:f7:e2:42:59:e8:bc:57:7c:e0:50:e3:a3:32:b4:2c: 64:bd:0c:a9:88:ac:7a:89:04:0e:48:62:38:bb:98:bb:2f:bf: 54:3b:e2:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEygYZ55e/y/aD6TsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk NGY3Yzc4ZDEtYWE0Yy00MWFjLTkzZjUtY2RlMmNlMzRhYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG42RjVrPYyiTczgI282KlYz23Cbl/yjS/cy 4A4LpcRhG5/u6kcr5pV+xdSJyqXN5X75uPWYDG837fIvs99SeFLiboUJBYiDWLhk GSH0s9rPI9eBrmsGT+jIreH2zBtNBjWB2R1vUwQrgfpcBNJCKk7h+FA44jfGs81T U0GF0Rfhsxs6xmujUE8WWnh1liX807OABesyw5aRqqUj00qP5H72Vn+wAt6q8nDi NbEE1GpnRj0bq83+QxgEoQNj+ql2PLSJQyQ/4cj5E6mHwJukAv5k6N1c8sq1oGtR up9K5U1nj734e3Y/eOxcd/7xRILEG5TtS1ElH5OG+ZcnXmpQoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM15X1QYl9/JjxOAlBixdlkCEA6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvMDQwMGI4N2MtZjI0Yy0z MjZjLWEyYTItNDRjNzk2MWI3Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASYq95nQvj68mU2tTs5AN5U5kb4hzfXCSgiW3ouGqNzZ/vSeAAeFG8R 0XgIfFKgDnjL1eWHMkyKRnjbWP3yO/g8fAj4XI45G0z+r4qJQAfzodHltIIonm3E hfHO57Jak8WH2AbhUBFZVAbVB5rw6yyO0/V9LvMqyAWiRF4712nJmnWYAAhCjVJ3 CZS9eYmaE+dzJbAO9zrxBofsI61axm7mNW8BaociDqIvWDu4J4muOOaay2u9CaFU qcEyo0P7NWNti9YAzSEQOyedCt1WNVV0SuNqpPHWH+eTfffiQlnovFd84FDjozK0 LGS9DKmIrHqJBA5IYji7mLsvv1Q74lI= -----END CERTIFICATE-----Generated at Mon Mar 2 17:32:24 2026 by rpki-client