$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa File: 3aa15edc-b7c6-318d-9de6-46d235ff9320.roa (raw, json) Hash identifier: cCkAi1t+zC5AtyKKVFqvWWaKfMmEPI2nHpn4yUIU7Co= Subject key identifier: CB:E9:D6:C7:7D:36:80:FC:29:CE:A3:07:D6:BD:3F:12:AC:5C:C9:EE Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584D4D5A6675F3F344ACC6436F00 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13325 IP address blocks: 136.181.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:66:75:f3:f3:44:ac:c6:43:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=2ed76c80-10b9-43d3-af1f-5ccd3ce23404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:c8:f2:2b:00:53:c2:eb:8b:26:6c:60:dd: cb:d3:da:37:8e:fe:42:12:67:2c:c4:f5:e7:59:5c: 9d:09:0d:e8:10:be:44:a0:b4:53:09:b0:69:a1:33: 8a:6c:0a:01:cf:6b:a5:0c:11:5a:b6:90:22:cd:e0: 4c:de:02:10:ee:d4:5d:fb:53:d2:e0:57:1b:5f:5a: 95:c7:23:05:df:46:38:d8:01:43:a6:c2:c2:6b:20: 79:ca:c0:09:3b:f5:20:2c:24:06:be:4b:67:7d:b8: 69:96:26:ad:42:cf:69:c0:71:b8:66:e2:22:07:e4: 20:5a:26:bd:81:18:b6:5a:ee:9c:89:b8:5e:79:81: 97:96:78:e5:9e:77:6a:8f:56:49:c0:66:41:88:37: 9e:77:70:76:b6:aa:37:56:18:41:16:ea:3e:2c:ac: a3:ae:21:37:34:e0:a4:5f:18:8a:67:4a:fb:20:26: b4:f3:e1:5f:0c:67:a8:ac:a9:f1:dc:45:c6:0e:cd: bd:1c:76:56:40:53:4f:e3:ad:2e:a9:83:b2:06:da: 2b:13:69:8c:58:35:30:4c:4c:92:2a:2c:82:5b:39: c8:f0:ce:e4:12:20:89:d0:46:7e:cc:71:d2:23:42: 8f:e8:ea:cd:99:6c:b6:6a:4d:49:73:ff:e0:2e:a0: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E9:D6:C7:7D:36:80:FC:29:CE:A3:07:D6:BD:3F:12:AC:5C:C9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 136.181.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c5:be:e3:0f:3a:30:62:85:f7:14:4a:d3:45:4b:ad:03:66: 55:65:f3:41:de:5a:07:e2:72:ac:a5:77:77:fa:5a:4c:70:d0: 29:a2:0f:0f:34:01:ab:0c:bc:b7:38:87:ed:0b:8c:11:b8:57: 1e:5c:9d:b3:d2:7f:85:71:bf:a7:1d:7c:1c:d9:e8:bf:df:c0: d1:ae:2a:a0:ba:53:87:13:a1:7a:4d:a3:99:66:2c:90:7f:c3: 4e:c2:be:fd:9a:be:26:2c:6c:d7:45:57:72:0a:78:b3:fb:11: ff:3a:f5:d4:f6:5a:d3:13:c2:a4:1a:72:36:ed:1e:0a:b9:bd: 92:f1:ce:ad:e7:3e:27:d3:c4:80:75:c8:cf:80:1c:4c:0e:09: cc:30:16:fa:49:dc:4d:d8:5b:5c:38:fe:40:c1:c9:79:37:19: 9f:3d:d1:6c:b6:6e:58:98:c8:1d:38:e5:cc:39:a0:4c:64:0e: 69:f9:cc:47:3a:b5:42:3e:95:74:2d:95:3b:60:35:15:12:34: 83:e0:0c:34:f0:2f:20:c3:86:56:ad:8a:55:46:72:b3:ba:20: 1e:f7:ce:6d:2c:b1:00:f1:bd:72:48:c8:82:07:a4:70:da:5c: 0d:05:63:67:62:c6:9f:35:f8:92:63:d3:da:09:ea:f8:3c:cd: 9c:44:42:46 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1NWmZ18/NErMZDbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MmVkNzZjODAtMTBiOS00M2QzLWFmMWYtNWNjZDNjZTIzNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9XI8isAU8LriyZsYN3L09o3jv5CEmcsxPXn WVydCQ3oEL5EoLRTCbBpoTOKbAoBz2ulDBFatpAizeBM3gIQ7tRd+1PS4FcbX1qV xyMF30Y42AFDpsLCayB5ysAJO/UgLCQGvktnfbhpliatQs9pwHG4ZuIiB+QgWia9 gRi2Wu6cibheeYGXlnjlnndqj1ZJwGZBiDeed3B2tqo3VhhBFuo+LKyjriE3NOCk XxiKZ0r7ICa08+FfDGeorKnx3EXGDs29HHZWQFNP460uqYOyBtorE2mMWDUwTEyS KiyCWznI8M7kEiCJ0EZ+zHHSI0KP6OrNmWy2ak1Jc//gLqBznwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMvp1sd9NoD8Kc6jB9a9PxKsXMnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvM2FhMTVlZGMtYjdjNi0z MThkLTlkZTYtNDZkMjM1ZmY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiLUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAm8W+4w86MGKF9xRK00VLrQNmVWXzQd5aB+JyrKV3d/paTHDQKaIPDzQB qwy8tziH7QuMEbhXHlyds9J/hXG/px18HNnov9/A0a4qoLpThxOhek2jmWYskH/D TsK+/Zq+Jixs10VXcgp4s/sR/zr11PZa0xPCpBpyNu0eCrm9kvHOrec+J9PEgHXI z4AcTA4JzDAW+kncTdhbXDj+QMHJeTcZnz3RbLZuWJjIHTjlzDmgTGQOafnMRzq1 Qj6VdC2VO2A1FRI0g+AMNPAvIMOGVq2KVUZys7ogHvfObSyxAPG9ckjIggekcNpc DQVjZ2LGnzX4kmPT2gnq+DzNnERCRg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:01:11 2026 by rpki-client