$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/2bdcdbf1-d767-3e2a-8cba-3958624d575f.roa File: 2bdcdbf1-d767-3e2a-8cba-3958624d575f.roa (raw, json) Hash identifier: TYDgub+vzzK9W/leXx+SqhZHAzyzZNs+IfGYZqbIgJ4= Subject key identifier: 46:92:45:F5:65:D7:3E:B6:25:4B:86:32:42:B9:00:CB:04:30:B5:E1 Certificate issuer: /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Certificate serial: 010D0C9F4328584D4D5A4CBC764EBD1FD380DD80 Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/2bdcdbf1-d767-3e2a-8cba-3958624d575f.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 812 IP address blocks: 52.129.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4c:bc:76:4e:bd:1f:d3:80:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=f2eb3f9c-20af-4e74-897e-9d45e9f420ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e2:10:97:3d:71:c8:fb:82:23:83:8d:72:30: 58:43:8a:d5:db:7d:84:9e:b6:50:06:87:5f:50:60: 2b:fe:53:58:b5:7d:ab:23:38:c8:11:e7:54:17:9c: 35:0e:e3:13:be:7d:da:72:dc:a2:80:0b:6b:c5:11: 23:ff:c3:4d:e3:d2:5f:cd:d0:ec:01:f9:06:46:6d: 81:a6:98:3c:a5:73:f2:db:d0:4d:c8:80:ae:55:f5: 71:66:19:93:d8:cf:b8:21:15:66:66:5d:49:de:b1: 23:1e:64:b0:41:c5:1a:42:ee:d5:9f:c4:61:78:60: 40:79:71:ec:83:6c:11:71:e8:62:ad:bc:be:c0:c6: 5d:8c:50:71:e1:58:51:58:97:de:ff:07:73:56:66: 05:16:8a:ff:0e:b5:3b:e4:25:70:d3:9e:71:f0:87: 30:8a:fa:e2:40:22:38:97:de:8b:c8:00:a0:89:71: c9:74:f2:37:ad:42:39:5d:63:2c:87:07:96:f6:ff: d5:96:03:6b:39:e8:f2:cb:e8:93:08:92:fe:a4:b1: 79:3a:99:b6:82:db:1f:55:91:93:e8:0b:41:3a:04: 50:2a:1d:5e:87:a9:28:14:43:a8:7c:26:ce:e8:24: 87:1c:bd:34:c7:9c:3b:e1:73:59:83:76:9c:70:a5: 3b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:92:45:F5:65:D7:3E:B6:25:4B:86:32:42:B9:00:CB:04:30:B5:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/2bdcdbf1-d767-3e2a-8cba-3958624d575f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl X509v3 Authority Key Identifier: keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer sbgp-ipAddrBlock: critical IPv4: 52.129.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8e:ef:aa:cd:13:2e:ca:2a:f3:2b:9a:fc:42:5c:84:17:97: ef:47:08:bd:12:d4:7c:7c:9f:88:58:51:0b:1d:41:a2:d0:35: 13:02:1e:53:e2:2b:d5:78:a6:8e:b0:5a:38:5a:1c:43:a1:4e: 4f:49:45:cf:28:b0:99:bd:35:b2:5b:77:25:ab:dc:68:d5:f0: 1e:45:94:76:af:c3:d1:f9:14:ab:0f:d7:3f:2c:51:4e:9a:26: 65:9a:7f:d6:b5:0a:3c:3b:b7:3c:52:0f:83:f5:08:08:70:d5: 77:41:9a:5a:70:a1:92:38:bb:55:13:aa:f1:5d:8b:b2:b6:85: 11:c6:cf:47:f1:56:ed:11:1a:94:fa:51:06:7e:9b:36:0b:89: d9:82:d9:1a:7f:d5:9d:b3:74:ba:53:17:65:fc:16:28:55:9c: 7e:f7:ce:e6:89:8b:55:6c:18:3b:06:b8:1b:4c:ce:c0:c2:cb: 8f:bf:21:4e:31:09:2d:67:68:22:c3:42:3f:20:6c:1f:7f:74: 2e:90:8d:67:6b:7d:af:2b:2f:16:88:5c:ae:dc:04:99:6a:85: 89:53:ba:14:0d:c1:77:5a:f9:53:e3:04:e6:5c:9e:15:b8:1b: 11:dc:f7:e3:ed:7b:b7:ad:c5:90:6d:ca:89:a2:d5:c4:fe:51: a3:e8:06:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWky8dk69H9OA3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE5MDkzM2UtMjAwNS00YzMzLWFlM2YtNzQ0YjdiNzBl ZDdjMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZjJlYjNmOWMtMjBhZi00ZTc0LTg5N2UtOWQ0NWU5ZjQyMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleIQlz1xyPuCI4ONcjBYQ4rV232EnrZQBodf UGAr/lNYtX2rIzjIEedUF5w1DuMTvn3actyigAtrxREj/8NN49JfzdDsAfkGRm2B ppg8pXPy29BNyICuVfVxZhmT2M+4IRVmZl1J3rEjHmSwQcUaQu7Vn8RheGBAeXHs g2wRcehirby+wMZdjFBx4VhRWJfe/wdzVmYFFor/DrU75CVw055x8IcwivriQCI4 l96LyACgiXHJdPI3rUI5XWMshweW9v/VlgNrOejyy+iTCJL+pLF5Opm2gtsfVZGT 6AtBOgRQKh1eh6koFEOofCbO6CSHHL00x5w74XNZg3accKU7sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaSRfVl1z62JUuGMkK5AMsEMLXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkw OTMzZS0yMDA1LTRjMzMtYWUzZi03NDRiN2I3MGVkN2MvMmJkY2RiZjEtZDc2Ny0z ZTJhLThjYmEtMzk1ODYyNGQ1NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE5MDkzM2UtMjAwNS00YzMzLWFl M2YtNzQ0YjdiNzBlZDdjLzFhOTA5MzNlLTIwMDUtNGMzMy1hZTNmLTc0NGI3Yjcw ZWQ3Yy5jcmwwHwYDVR0jBBgwFoAU1HSrk3fw+jwU6HiojPfAQyQ3aOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkwOTMzZS0yMDA1LTRjMzMtYWUzZi03NDRi N2I3MGVkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCO76rNEy7KKvMrmvxCXIQXl+9HCL0S1Hx8n4hYUQsdQaLQNRMCHlPi K9V4po6wWjhaHEOhTk9JRc8osJm9NbJbdyWr3GjV8B5FlHavw9H5FKsP1z8sUU6a JmWaf9a1Cjw7tzxSD4P1CAhw1XdBmlpwoZI4u1UTqvFdi7K2hRHGz0fxVu0RGpT6 UQZ+mzYLidmC2Rp/1Z2zdLpTF2X8FihVnH73zuaJi1VsGDsGuBtMzsDCy4+/IU4x CS1naCLDQj8gbB9/dC6QjWdrfa8rLxaIXK7cBJlqhYlTuhQNwXda+VPjBOZcnhW4 GxHc9+Pte7etxZBtyomi1cT+UaPoBiQ= -----END CERTIFICATE-----Generated at Fri Apr 17 17:00:06 2026 by rpki-client