$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa File: 49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa (raw, json) Hash identifier: 3qj/UCmGu+afeqD/jD6u0ZbDXIBFMaHxSfSIPCGddHo= Subject key identifier: 2D:E3:07:45:C7:0A:81:85:3F:DA:FF:95:AE:17:D3:1D:98:EE:08:66 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584CAE5726BC70845CB5BB353100 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 35860 IP address blocks: 63.133.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:26:bc:70:84:5c:b5:bb:35:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=823a1390-b6eb-4452-94b9-9210283693b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:3c:fe:16:a3:74:39:0b:3c:b3:33:e8:03: 1b:a0:6d:77:ed:d3:39:01:33:cd:40:2a:4d:59:f2: ce:f1:bd:48:cf:73:37:04:d2:1d:79:8d:a3:5c:33: 88:6f:73:ab:82:b6:77:53:c7:cc:db:b8:f9:d2:7b: 45:b0:f1:13:6d:17:d7:6a:19:82:5b:40:33:4b:fb: 2e:da:4b:bb:b3:27:68:3c:71:0d:25:24:07:a7:7a: 28:75:7d:d2:38:94:94:1d:c1:ab:d4:19:12:83:81: 5a:72:e4:47:a0:23:98:15:7d:9d:f8:b6:7e:9d:f8: ad:c2:df:26:00:54:8c:9e:c5:69:54:c5:0e:ac:14: 26:79:f2:7c:5e:ed:60:26:f9:42:87:87:31:83:71: e9:15:19:eb:fb:b2:8b:6c:88:42:a5:e7:be:60:0f: b4:4d:e9:d3:0a:ca:76:9e:2e:7f:78:a9:1d:62:b6: 2b:21:fe:31:c3:21:00:7d:fc:26:80:15:74:0e:40: 0b:95:db:8f:2c:e8:0d:4e:f8:e9:6f:06:c3:c5:12: c8:0a:64:db:75:a5:f0:11:2a:41:03:8e:6c:37:cb: bd:82:39:23:86:b7:5b:d5:a8:01:a4:c4:69:10:1b: a8:7b:fa:71:ac:3b:91:70:57:0d:b6:8b:8a:c1:c5: 1b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E3:07:45:C7:0A:81:85:3F:DA:FF:95:AE:17:D3:1D:98:EE:08:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c9:c4:09:9f:58:79:f5:9e:5a:21:2d:80:e9:a7:67:24:08: 49:27:62:57:c9:b9:2d:d4:16:05:91:a4:ef:71:1c:56:ec:0f: 91:b8:19:56:4e:f2:64:ff:56:c3:05:44:1d:42:3b:01:22:3d: 1c:68:99:4f:84:9e:ea:46:7c:e5:3f:f7:eb:6a:33:66:d9:8e: 4a:62:4a:95:18:6e:65:fb:aa:f7:a0:89:55:19:1f:cd:a4:11: 42:b9:74:3f:85:ab:19:ed:76:cd:fa:ef:50:50:da:b9:44:65: b0:e0:be:5a:95:77:fa:2a:bc:e1:04:49:01:ac:00:9b:56:80: 43:cf:7c:17:e8:6f:aa:db:16:c0:62:46:a0:22:dd:e6:f7:ea: 4a:69:9f:d9:d6:d6:a2:df:c7:6f:ef:73:d9:8f:1f:ba:ab:a2: 4f:7f:4c:01:5c:cd:96:92:5c:ec:b9:42:a3:86:d0:3b:cb:68: db:d2:7a:95:21:99:24:6e:1e:77:0b:da:f5:6c:30:a3:8e:7e: 90:35:b2:9a:c6:5a:8d:69:8a:c8:92:4f:2c:00:e5:ec:cb:c1: e7:f3:1e:0b:60:cd:8e:a8:aa:f8:73:37:29:df:af:e4:9d:21: f3:56:7b:76:1f:99:c3:de:81:44:35:a0:2a:b5:5f:c6:7e:f2: b0:46:8d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVya8cIRctbs1MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODIzYTEzOTAtYjZlYi00NDUyLTk0YjktOTIxMDI4MzY5M2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbU8/hajdDkLPLMz6AMboG137dM5ATPNQCpN WfLO8b1Iz3M3BNIdeY2jXDOIb3OrgrZ3U8fM27j50ntFsPETbRfXahmCW0AzS/su 2ku7sydoPHENJSQHp3oodX3SOJSUHcGr1BkSg4FacuRHoCOYFX2d+LZ+nfitwt8m AFSMnsVpVMUOrBQmefJ8Xu1gJvlCh4cxg3HpFRnr+7KLbIhCpee+YA+0TenTCsp2 ni5/eKkdYrYrIf4xwyEAffwmgBV0DkALlduPLOgNTvjpbwbDxRLICmTbdaXwESpB A45sN8u9gjkjhrdb1agBpMRpEBuoe/pxrDuRcFcNtouKwcUbPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3jB0XHCoGFP9r/la4X0x2Y7ghmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvNDljMzA5MmMtMTdmZS0z YTgxLWIzZWQtMTRmNTU2MjBkOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP4XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnJxAmfWHn1nlohLYDpp2ckCEknYlfJuS3UFgWRpO9xHFbsD5G4GVZO 8mT/VsMFRB1COwEiPRxomU+EnupGfOU/9+tqM2bZjkpiSpUYbmX7qvegiVUZH82k EUK5dD+Fqxntds3671BQ2rlEZbDgvlqVd/oqvOEESQGsAJtWgEPPfBfob6rbFsBi RqAi3eb36kppn9nW1qLfx2/vc9mPH7qrok9/TAFczZaSXOy5QqOG0DvLaNvSepUh mSRuHncL2vVsMKOOfpA1sprGWo1pisiSTywA5ezLwefzHgtgzY6oqvhzNynfr+Sd IfNWe3YfmcPegUQ1oCq1X8Z+8rBGjeg= -----END CERTIFICATE-----Generated at Mon Mar 2 18:35:45 2026 by rpki-client