$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa File: bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa (raw, json) Hash identifier: JzO6dPygPZJ9yt/YJX1PpCjkL373Fu7s70BP8BCPJRM= Subject key identifier: B0:45:A9:13:73:F0:25:EE:0F:A7:4D:B1:4C:0C:FA:14:79:CE:62:D0 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F4328584E9D4A68A0A8A49891D0F7D8C0 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 14618 IP address blocks: 52.129.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:68:a0:a8:a4:98:91:d0:f7:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=9cec307b-7d3b-4c94-8689-8dc98706befc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a6:45:be:8b:1a:34:b7:fa:04:99:0d:f2:28: fb:98:64:41:4c:e6:06:52:6a:6c:ba:d8:7b:b9:fa: c3:e0:f6:23:ae:63:59:1b:b9:96:65:3f:58:f4:cf: ce:ea:c6:1b:58:8b:84:2c:8e:8c:ae:4e:90:e7:7c: 79:aa:39:4d:a7:21:6b:38:b4:12:13:13:a9:a2:89: 02:f9:c3:70:d3:cf:22:4a:a6:9f:a3:12:c0:6e:5d: f3:b8:3c:cd:87:cd:b2:d0:12:09:32:19:24:f5:45: ab:af:0b:1a:6e:71:53:7d:77:60:60:b1:5b:15:28: 9c:ca:32:28:f9:74:d6:45:4f:63:43:0b:fd:ca:33: 9f:6d:7f:67:45:9a:1e:25:2d:1b:b4:66:c7:83:bb: f9:e3:99:de:8c:33:84:73:68:f3:a9:48:af:89:ad: 7e:74:82:21:fe:e7:0f:82:aa:fc:63:3f:6f:e2:f1: d5:97:81:8d:78:4d:1a:29:51:2d:12:1f:e7:7c:65: 57:60:27:40:95:50:f0:f4:5b:5a:b4:b2:82:c8:cd: 25:01:d4:4c:67:45:a9:ff:cc:16:72:a9:e3:e8:43: b8:a2:40:a0:2e:76:56:45:f2:8a:73:c8:b3:4c:66: 77:aa:16:37:b1:27:cd:d5:9c:01:41:a5:1d:d1:56: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:45:A9:13:73:F0:25:EE:0F:A7:4D:B1:4C:0C:FA:14:79:CE:62:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b8:03:f2:b5:ee:bc:de:70:27:25:03:8b:79:ed:61:1e:65: eb:7c:eb:1d:f2:b7:79:3c:52:13:4e:bb:b7:8f:2a:70:31:10: 77:5f:72:3b:38:c0:79:1e:62:4d:5d:e4:29:cf:2e:13:37:e7: b0:23:5b:54:86:3a:e7:da:a0:f7:d9:c9:a7:88:92:8b:7d:93: 7e:7c:c5:14:10:5f:c0:3a:14:04:59:11:d0:f6:34:df:60:20: c3:6f:f0:97:47:fd:39:4a:1a:07:bb:df:0b:8b:29:0c:39:ba: f4:6f:31:ba:36:6c:87:92:9e:3c:ef:f3:2d:75:33:f5:7a:fc: b0:c2:51:ef:32:1f:5b:e6:6d:68:0b:f8:28:d7:a8:5e:28:61: b8:9b:a9:78:de:70:7f:25:93:87:e7:ed:82:e5:c6:75:92:70: a9:0e:56:99:59:56:cc:b7:7c:79:da:ef:df:d3:59:51:71:bd: bd:17:53:18:f6:2b:df:0b:ec:93:48:a1:e4:1f:62:66:19:b3: 1e:68:03:06:d6:f0:d5:9e:96:bd:e3:4f:96:85:88:20:70:f8: 91:ab:75:9c:09:5b:05:9a:16:5a:67:06:04:f9:92:18:7b:fb: 61:39:83:f2:15:18:3d:1c:70:09:17:87:37:ba:e0:6a:f6:66: 9b:8e:83:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmigqKSYkdD32MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk OWNlYzMwN2ItN2QzYi00Yzk0LTg2ODktOGRjOTg3MDZiZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6ZFvosaNLf6BJkN8ij7mGRBTOYGUmpsuth7 ufrD4PYjrmNZG7mWZT9Y9M/O6sYbWIuELI6Mrk6Q53x5qjlNpyFrOLQSExOpookC +cNw088iSqafoxLAbl3zuDzNh82y0BIJMhkk9UWrrwsabnFTfXdgYLFbFSicyjIo +XTWRU9jQwv9yjOfbX9nRZoeJS0btGbHg7v545nejDOEc2jzqUivia1+dIIh/ucP gqr8Yz9v4vHVl4GNeE0aKVEtEh/nfGVXYCdAlVDw9FtatLKCyM0lAdRMZ0Wp/8wW cqnj6EO4okCgLnZWRfKKc8izTGZ3qhY3sSfN1ZwBQaUd0VYmIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBFqRNz8CXuD6dNsUwM+hR5zmLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvYmFkMDMxMWItYjFhMi0z N2E2LTlhNTQtYTRiMjVlNDE0YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG4A/K17rzecCclA4t57WEeZet86x3yt3k8UhNOu7ePKnAxEHdfcjs4 wHkeYk1d5CnPLhM357AjW1SGOufaoPfZyaeIkot9k358xRQQX8A6FARZEdD2NN9g IMNv8JdH/TlKGge73wuLKQw5uvRvMbo2bIeSnjzv8y11M/V6/LDCUe8yH1vmbWgL +CjXqF4oYbibqXjecH8lk4fn7YLlxnWScKkOVplZVsy3fHna79/TWVFxvb0XUxj2 K98L7JNIoeQfYmYZsx5oAwbW8NWelr3jT5aFiCBw+JGrdZwJWwWaFlpnBgT5khh7 +2E5g/IVGD0ccAkXhze64Gr2ZpuOg1s= -----END CERTIFICATE-----Generated at Tue Jul 28 20:23:53 2026 by rpki-client