$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa File: 1f825b44-9c70-33dd-b03f-6d808154234c.roa (raw, json) Hash identifier: mdV/FVdX8hMrFnP8H+4uqdkwBGX33t7cyD1/05krRcw= Subject key identifier: 9E:F4:F1:7F:5C:31:2F:FD:6D:A0:CF:55:C3:1A:94:B8:42:A4:FB:22 Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F4328584C8A0C3E23BF1F76A333027D80 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 7018 IP address blocks: 52.128.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:3e:23:bf:1f:76:a3:33:02:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=1fb6506c-fefc-4f47-a148-c897dc3ddde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:3e:df:56:95:47:44:0b:47:b0:e2:db:2c: dd:ad:d4:c4:04:0f:f0:f8:cd:ad:89:b4:90:a8:52: 7b:74:d3:67:a2:e6:cd:75:2c:2f:12:94:b7:ce:8d: ad:da:14:bc:fa:2b:d1:0c:99:ca:51:da:e9:a2:7d: 44:87:77:bf:4e:e5:45:65:a6:7d:e2:2e:af:29:0a: a3:ed:60:f2:07:78:6c:a8:6e:7b:53:cf:81:bd:c6: f4:c5:10:90:33:09:75:c9:e9:aa:40:95:dc:74:1f: ce:3c:c2:e3:5d:34:5b:50:3c:02:f8:aa:97:ef:a3: bb:56:00:46:bc:43:6b:f2:88:5a:f5:64:ee:a1:65: d6:c9:57:02:91:71:dd:ca:39:0b:84:86:d6:d2:4a: 71:12:2f:bb:e5:21:a1:4d:e8:a5:dd:11:7f:c1:03: 83:42:8e:e2:ac:10:49:33:e8:c6:f7:41:58:10:8b: 85:07:e3:c1:61:1f:d0:f3:d1:66:c5:dc:fa:7d:9b: b0:47:5b:7e:e7:3c:a2:e9:e9:d7:1d:19:4f:bd:93: ff:13:4f:0c:a2:7b:1b:d5:8a:c1:e1:26:36:32:81: 92:1e:22:3c:db:19:3a:b7:0b:c6:79:bb:66:95:e2: bb:d6:96:77:a4:a1:47:62:a4:48:2e:ff:3b:8b:db: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F4:F1:7F:5C:31:2F:FD:6D:A0:CF:55:C3:1A:94:B8:42:A4:FB:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:be:ff:08:0a:d6:81:e4:3d:56:73:71:7d:41:3a:34:11:82: 42:6f:e6:f9:e1:4a:f3:03:f9:ba:32:c2:79:cd:b9:6b:3b:fc: 04:35:83:d7:38:aa:1b:37:a6:8d:14:48:0d:81:7f:55:a1:e9: dd:ff:89:74:55:8f:73:36:fa:38:33:34:5d:b8:18:3e:b9:99: 4d:68:9d:5c:bf:03:fc:87:af:79:14:58:b8:a3:48:53:ef:39: 60:2f:94:0a:ba:ec:41:ee:58:12:48:47:67:de:67:33:20:65: 0c:73:74:5f:c4:3d:d7:46:cd:f4:01:4b:e7:da:f5:c4:c4:b0: b7:1f:71:6c:75:03:06:02:c2:63:fc:07:b0:2f:c8:45:5d:0a: 53:47:a2:b0:19:f9:9b:64:6b:ea:9f:d6:2f:01:1a:ef:08:82: c6:98:d1:ee:e9:e4:ec:d1:c2:ab:19:19:87:95:7e:ce:84:ca: f4:7e:fa:e5:a6:52:ed:e9:b1:5a:0a:69:a8:3f:94:6e:bb:64: 61:43:d6:19:e7:57:c4:f7:d6:25:52:a8:aa:85:e4:87:02:44: 92:c2:1b:9d:31:aa:20:07:8b:c2:de:9e:90:df:b3:c0:97:e1: e6:ff:04:9a:03:f8:cc:06:04:eb:09:48:23:ac:54:97:28:13: 49:51:b1:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDD4jvx92ozMCfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk MWZiNjUwNmMtZmVmYy00ZjQ3LWExNDgtYzg5N2RjM2RkZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Q+31aVR0QLR7Di2yzdrdTEBA/w+M2tibSQ qFJ7dNNnoubNdSwvEpS3zo2t2hS8+ivRDJnKUdrpon1Eh3e/TuVFZaZ94i6vKQqj 7WDyB3hsqG57U8+Bvcb0xRCQMwl1yemqQJXcdB/OPMLjXTRbUDwC+KqX76O7VgBG vENr8oha9WTuoWXWyVcCkXHdyjkLhIbW0kpxEi+75SGhTeil3RF/wQODQo7irBBJ M+jG90FYEIuFB+PBYR/Q89Fmxdz6fZuwR1t+5zyi6enXHRlPvZP/E08Monsb1YrB 4SY2MoGSHiI82xk6twvGebtmleK71pZ3pKFHYqRILv87i9vsuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ708X9cMS/9baDPVcMalLhCpPsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvMWY4MjViNDQtOWM3MC0z M2RkLWIwM2YtNmQ4MDgxNTQyMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS+/wgK1oHkPVZzcX1BOjQRgkJv5vnhSvMD+boywnnNuWs7/AQ1g9c4 qhs3po0USA2Bf1Wh6d3/iXRVj3M2+jgzNF24GD65mU1onVy/A/yHr3kUWLijSFPv OWAvlAq67EHuWBJIR2feZzMgZQxzdF/EPddGzfQBS+fa9cTEsLcfcWx1AwYCwmP8 B7AvyEVdClNHorAZ+Ztka+qf1i8BGu8IgsaY0e7p5OzRwqsZGYeVfs6EyvR++uWm Uu3psVoKaag/lG67ZGFD1hnnV8T31iVSqKqF5IcCRJLCG50xqiAHi8LenpDfs8CX 4eb/BJoD+MwGBOsJSCOsVJcoE0lRsbY= -----END CERTIFICATE-----Generated at Mon Mar 2 14:43:40 2026 by rpki-client