$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa File: 91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa (raw, json) Hash identifier: h4j7bOKUT2PNnCZGpqnClDK6S5rxKyL28h+sJxUJXjM= Subject key identifier: 0C:30:9C:89:13:9E:DB:D2:EB:F7:2E:88:8E:7C:6E:2A:EA:F3:15:87 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F4328584B970CD2B3B90337B814FE2600 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 52.129.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d2:b3:b9:03:37:b8:14:fe:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=38b91d55-f21c-4a01-bba1-fd9c093bc205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2a:b7:67:c1:34:20:3e:c5:e4:ff:b7:0e:e4: 6d:5c:1a:92:16:de:95:a2:27:4c:b4:6d:16:ca:86: 95:2f:50:7d:5f:3f:d0:2f:7d:81:a6:ec:d5:0e:cb: 0e:71:62:62:60:c1:3c:6f:f5:d1:86:1b:16:47:da: 39:00:15:38:10:1d:88:52:37:c6:35:93:d1:b1:7a: 51:4a:fb:03:96:e6:fa:e9:f9:f0:e2:e1:47:84:c0: ef:cd:df:20:e2:7b:58:ea:58:b0:87:be:ff:3f:c1: c4:0d:78:95:49:fb:83:b0:2a:6c:ea:e1:6a:2a:36: c7:29:49:da:e4:2f:2b:0b:19:fd:a2:68:a5:47:26: b7:22:65:7d:58:d0:85:5d:3b:3e:97:0b:af:c6:0a: 86:a1:0d:29:51:a9:39:67:ce:69:d9:aa:80:f7:5c: f9:30:1c:e9:ef:8a:96:ee:be:c8:4a:b3:ff:92:0b: 12:7c:5c:02:8a:dc:fe:27:74:ad:db:2b:f8:d1:49: c8:e0:bf:11:f7:c1:6e:49:6b:44:d2:d5:83:8c:d7: 13:15:c0:48:8a:b6:23:65:5b:81:06:6c:a2:b3:19: b5:64:8b:ed:d9:59:00:e2:08:4a:91:b4:1c:14:b2: fd:5d:38:f6:bc:ab:40:9b:6e:f3:43:f0:21:e1:6f: 78:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:30:9C:89:13:9E:DB:D2:EB:F7:2E:88:8E:7C:6E:2A:EA:F3:15:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/91e453cb-be5a-3d2c-a0ec-8f261cd08703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4c:cf:74:a7:d2:11:bf:bc:c1:75:ff:f2:2c:28:6f:e5:97: bb:44:79:de:4b:a8:8d:12:1f:c4:36:a7:83:45:fe:f2:9f:a1: 35:e5:52:3e:4b:bc:40:24:dd:87:9d:f9:44:93:4c:6e:17:07: 04:bd:67:5e:9b:dc:8b:ad:d1:15:a7:40:65:ba:a2:12:51:13: ce:c5:9b:c3:fe:7b:14:d6:da:4f:77:67:1c:b4:42:7e:64:c9: ee:ab:b7:7d:2a:a9:b8:5d:5d:b6:e4:8b:2f:1f:94:35:35:ca: 47:2d:18:ca:88:f0:3e:6d:42:c0:aa:bc:62:22:97:db:a4:b4: ca:72:73:6a:14:78:ea:50:b7:6b:08:da:ae:ae:a7:33:2d:c3: 89:d0:da:74:15:16:17:18:85:5b:6e:22:56:2f:a2:3d:df:bf: 3d:f8:00:44:b3:74:1d:72:3b:01:de:9c:1f:7b:9b:e2:5b:fe: 0a:f6:c1:99:eb:1a:f9:05:41:9f:5b:41:3a:6d:9d:0d:0a:39: 49:5b:c8:0e:53:11:61:6c:40:3b:5a:a9:ee:19:9f:e4:8e:66: 06:86:c1:db:dd:91:23:79:a9:aa:bb:24:ec:d1:80:4d:d3:a2: e9:68:77:f6:7a:05:9b:78:e2:a8:d9:4d:2f:ba:cf:63:30:30: 12:76:2c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNKzuQM3uBT+JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MzhiOTFkNTUtZjIxYy00YTAxLWJiYTEtZmQ5YzA5M2JjMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Sq3Z8E0ID7F5P+3DuRtXBqSFt6VoidMtG0W yoaVL1B9Xz/QL32BpuzVDssOcWJiYME8b/XRhhsWR9o5ABU4EB2IUjfGNZPRsXpR SvsDlub66fnw4uFHhMDvzd8g4ntY6liwh77/P8HEDXiVSfuDsCps6uFqKjbHKUna 5C8rCxn9omilRya3ImV9WNCFXTs+lwuvxgqGoQ0pUak5Z85p2aqA91z5MBzp74qW 7r7ISrP/kgsSfFwCitz+J3St2yv40UnI4L8R98FuSWtE0tWDjNcTFcBIirYjZVuB Bmyisxm1ZIvt2VkA4ghKkbQcFLL9XTj2vKtAm27zQ/Ah4W943wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwwnIkTntvS6/cuiI58birq8xWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvOTFlNDUzY2ItYmU1YS0z ZDJjLWEwZWMtOGYyNjFjZDA4NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtMz3Sn0hG/vMF1//IsKG/ll7tEed5LqI0SH8Q2p4NF/vKfoTXlUj5L vEAk3Yed+USTTG4XBwS9Z16b3Iut0RWnQGW6ohJRE87Fm8P+exTW2k93Zxy0Qn5k ye6rt30qqbhdXbbkiy8flDU1ykctGMqI8D5tQsCqvGIil9uktMpyc2oUeOpQt2sI 2q6upzMtw4nQ2nQVFhcYhVtuIlYvoj3fvz34AESzdB1yOwHenB97m+Jb/gr2wZnr GvkFQZ9bQTptnQ0KOUlbyA5TEWFsQDtaqe4Zn+SOZgaGwdvdkSN5qaq7JOzRgE3T oulod/Z6BZt44qjZTS+6z2MwMBJ2LLs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:39 2025 by rpki-client