$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa File: ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa (raw, json) Hash identifier: Cwq9I6Q5nfT0OBGIEZIeXnSIh2jMbF5YhNqEqdoTjx8= Subject key identifier: 8F:71:2B:B6:A9:DC:EA:96:61:70:BF:8C:03:70:7B:9F:8A:3F:4E:7D Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584CEBC233776B08E1C924BB0288 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 35860 IP address blocks: 63.133.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:33:77:6b:08:e1:c9:24:bb:02:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=534729d0-0e60-4a4f-b800-dc7c98197151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:3d:f4:be:9c:46:73:a3:ea:c8:01:02:94: b5:9e:db:96:d1:b3:e6:48:e9:52:7b:bc:cb:b2:7a: f8:c6:74:5f:39:3e:2d:56:1a:8b:85:77:ae:ab:bd: be:e6:3e:84:4c:54:ff:cc:e9:65:ec:14:72:da:a7: af:a4:1f:8c:16:46:f4:38:ce:2c:94:4a:ce:de:92: 80:51:9c:fd:b3:2f:cb:2e:dd:a5:09:bb:e4:63:1b: b5:9f:0d:a2:3a:d8:97:1a:66:e4:0c:f2:a3:f9:e1: f2:9a:fc:02:a3:2e:a0:64:9f:bc:4f:3a:2b:78:bc: 21:5c:f6:6b:d5:b3:21:d6:c1:82:4e:3f:94:36:10: d0:19:e2:30:77:43:ec:1c:77:d6:9c:b7:16:00:73: 72:35:f2:12:96:56:b5:76:18:ad:4e:e8:90:39:ed: 7e:0c:d4:8a:37:76:47:09:71:9c:d9:a3:20:4a:01: 6e:3a:bd:13:fb:86:1f:b6:76:09:2d:5d:51:dc:fc: bd:be:d1:d8:e0:99:37:ed:b3:20:79:75:2d:a2:b7: ea:50:e9:f7:e5:e1:8a:a4:fd:a4:ce:f0:ac:6b:dd: 6a:ca:14:01:64:a9:88:59:ed:74:8a:ff:af:06:50: 36:c9:7e:a2:1b:4d:82:54:3e:71:eb:9e:fa:fa:6f: d6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:71:2B:B6:A9:DC:EA:96:61:70:BF:8C:03:70:7B:9F:8A:3F:4E:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:7b:8b:e8:60:7d:83:9f:a0:66:3f:f4:4d:5a:93:a4:1d:bb: 7f:51:08:14:8d:06:1b:cb:34:62:50:84:9e:aa:39:4c:42:6f: 3b:73:5d:36:ca:57:f9:c7:a2:0c:09:22:dd:f0:e3:c8:16:38: b4:53:01:b7:d3:a2:dd:f4:ae:76:5d:74:9e:4a:31:f0:e7:ca: 5c:06:6d:24:77:33:ac:ee:c0:d9:cd:a0:eb:38:2a:a3:81:a8: 9c:33:47:59:5f:a6:02:c9:38:06:20:02:85:f2:00:17:f6:f3: 6d:05:76:b4:92:bd:9f:6b:02:fd:b7:b5:3f:e0:43:50:60:4e: fb:3c:1b:12:90:83:c7:5a:82:7f:96:21:8d:eb:d3:7e:a2:6b: d0:c8:49:9b:20:09:8b:84:46:46:8b:4b:51:70:c8:a3:c8:0f: ed:ab:2a:5d:33:3d:eb:ad:77:f2:a5:48:79:64:4f:d6:24:60: c5:eb:d6:46:35:a0:da:7d:73:05:af:f4:b7:e9:ff:16:9d:50: cd:a6:74:47:fa:7b:b7:63:83:39:8a:84:69:c6:4c:d5:e1:46: e2:6a:04:4b:d6:5c:16:8a:d0:90:bb:27:c1:30:17:41:85:50: f0:21:8c:b3:2f:da:bf:33:25:6e:ce:ac:0a:cd:40:ec:0f:3d: 3d:98:90:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwjN3awjhySS7AogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk NTM0NzI5ZDAtMGU2MC00YTRmLWI4MDAtZGM3Yzk4MTk3MTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KM99L6cRnOj6sgBApS1ntuW0bPmSOlSe7zL snr4xnRfOT4tVhqLhXeuq72+5j6ETFT/zOll7BRy2qevpB+MFkb0OM4slErO3pKA UZz9sy/LLt2lCbvkYxu1nw2iOtiXGmbkDPKj+eHymvwCoy6gZJ+8TzoreLwhXPZr 1bMh1sGCTj+UNhDQGeIwd0PsHHfWnLcWAHNyNfISlla1dhitTuiQOe1+DNSKN3ZH CXGc2aMgSgFuOr0T+4YftnYJLV1R3Py9vtHY4Jk37bMgeXUtorfqUOn35eGKpP2k zvCsa91qyhQBZKmIWe10iv+vBlA2yX6iG02CVD5x6576+m/WMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9xK7ap3OqWYXC/jANwe5+KP059MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvZmY2NWFmNDEtZWNkMy0z ODk1LWJjY2QtNmYxYjU1NDQ4YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp7i+hgfYOfoGY/9E1ak6Qdu39RCBSNBhvLNGJQhJ6qOUxCbztzXTbK V/nHogwJIt3w48gWOLRTAbfTot30rnZddJ5KMfDnylwGbSR3M6zuwNnNoOs4KqOB qJwzR1lfpgLJOAYgAoXyABf2820FdrSSvZ9rAv23tT/gQ1BgTvs8GxKQg8dagn+W IY3r036ia9DISZsgCYuERkaLS1FwyKPID+2rKl0zPeutd/KlSHlkT9YkYMXr1kY1 oNp9cwWv9Lfp/xadUM2mdEf6e7djgzmKhGnGTNXhRuJqBEvWXBaK0JC7J8EwF0GF UPAhjLMv2r8zJW7OrArNQOwPPT2YkKc= -----END CERTIFICATE-----Generated at Sun Mar 1 21:07:41 2026 by rpki-client