$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa File: 5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa (raw, json) Hash identifier: KyOlJAj7RJrcjtrUdAjjzAw1EKA3BxYOzLxLw1DkQW4= Subject key identifier: 80:1C:95:28:77:F7:02:6A:E9:1A:B8:18:FF:86:CE:8B:7B:BF:5F:5A Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584D4D5A66A748695BF2BE3DB500 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13325 IP address blocks: 167.240.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:66:a7:48:69:5b:f2:be:3d:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=070e8111-47fe-46d6-a410-f2d84c2d1fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:1e:b6:0e:49:c0:a4:fa:ae:79:24:7b:b5: 53:d2:32:56:0e:21:ae:b7:1f:ff:d2:6c:19:2a:73: fa:1c:45:39:9d:29:ef:04:94:f9:08:12:49:88:de: f7:ab:1a:72:34:a8:a0:6d:1a:3e:08:00:38:40:4c: fc:87:2d:7c:02:d0:7a:c4:55:3e:fd:e3:36:e6:0a: 08:9e:02:ac:b6:4d:24:bc:4b:7c:01:52:07:e8:fd: c6:ce:a8:d5:2b:e9:64:36:9f:fa:e6:41:56:de:44: 8e:e8:e1:5f:24:d7:0c:3a:33:8d:7f:84:aa:51:d5: 9a:69:e3:44:e7:77:91:09:be:db:b3:03:2d:bd:e1: 93:af:be:b0:6f:2b:bd:18:b6:e6:d8:96:2c:24:66: 0f:f7:62:98:ae:e3:87:c2:2d:59:11:80:cb:a1:a1: ff:77:36:cf:c4:94:b7:f6:e5:1e:8b:c6:74:20:c2: 9d:98:c1:55:cb:90:06:8a:ea:c2:46:5d:55:7e:3a: 46:cb:6b:ba:dd:7c:e6:1d:63:11:36:d3:52:09:9f: 0b:29:34:9b:79:3e:87:00:d1:49:7e:c7:eb:37:4b: ee:cc:22:c4:74:b4:38:f7:18:22:0f:19:30:56:c5: c6:0f:08:80:41:94:43:02:21:a0:28:60:71:6a:c3: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:95:28:77:F7:02:6A:E9:1A:B8:18:FF:86:CE:8B:7B:BF:5F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 167.240.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5d:2f:4c:59:e9:5e:c1:cd:6c:26:69:c4:7a:59:d3:64:43: 9f:60:cb:f2:83:69:1c:6a:17:37:3d:0e:ba:1b:17:28:af:3d: 24:29:98:b1:bd:e6:25:80:72:5b:e8:4f:8d:0e:fb:d4:ac:47: 25:7b:11:b4:7f:16:ad:5e:7e:5b:a0:b1:e5:f6:66:f2:77:cf: 39:88:e5:86:1d:9d:f7:cd:7f:b7:9c:4d:a7:01:91:c0:ba:48: 2f:e1:f2:11:fb:73:a1:1e:c3:03:92:21:1b:05:11:77:1b:63: 16:4e:55:69:f1:bb:78:15:cb:5b:62:b5:d5:cb:b4:e9:a6:8d: 32:25:6b:cf:bc:49:6c:e8:9f:19:b4:0d:70:68:5a:a7:32:a6: 52:43:8b:b9:33:39:dd:54:98:17:0f:d1:5c:4a:1e:a0:43:f4: 9f:0e:f1:0e:2c:98:9a:80:59:92:6f:a9:cb:ba:c2:01:c0:9c: 5e:94:d8:ba:64:b1:3c:d2:32:d3:e5:c3:3a:20:d2:9f:a5:89: d9:19:37:be:f5:42:41:ed:fc:81:fa:22:ca:4b:1c:61:48:54: 34:9d:e5:ad:91:91:f0:0e:33:6e:f4:9c:5e:95:b8:d7:24:26: 6f:b6:51:f1:24:b4:26:3a:29:38:e2:a7:f6:2e:5e:6c:30:2b: 71:ea:bf:66 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1NWmanSGlb8r49tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MDcwZTgxMTEtNDdmZS00NmQ2LWE0MTAtZjJkODRjMmQxZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWMetg5JwKT6rnkke7VT0jJWDiGutx//0mwZ KnP6HEU5nSnvBJT5CBJJiN73qxpyNKigbRo+CAA4QEz8hy18AtB6xFU+/eM25goI ngKstk0kvEt8AVIH6P3GzqjVK+lkNp/65kFW3kSO6OFfJNcMOjONf4SqUdWaaeNE 53eRCb7bswMtveGTr76wbyu9GLbm2JYsJGYP92KYruOHwi1ZEYDLoaH/dzbPxJS3 9uUei8Z0IMKdmMFVy5AGiurCRl1VfjpGy2u63XzmHWMRNtNSCZ8LKTSbeT6HANFJ fsfrN0vuzCLEdLQ49xgiDxkwVsXGDwiAQZRDAiGgKGBxasPHNwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIAclSh39wJq6Rq4GP+Gzot7v19aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvNTEzNWQwYmYtMmZjMi0z ZDU0LTgyMzEtNzBmNDU3NGViZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp/AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAA10vTFnpXsHNbCZpxHpZ02RDn2DL8oNpHGoXNz0OuhsXKK89JCmYsb3m JYByW+hPjQ771KxHJXsRtH8WrV5+W6Cx5fZm8nfPOYjlhh2d981/t5xNpwGRwLpI L+HyEftzoR7DA5IhGwURdxtjFk5VafG7eBXLW2K11cu06aaNMiVrz7xJbOifGbQN cGhapzKmUkOLuTM53VSYFw/RXEoeoEP0nw7xDiyYmoBZkm+py7rCAcCcXpTYumSx PNIy0+XDOiDSn6WJ2Rk3vvVCQe38gfoiykscYUhUNJ3lrZGR8A4zbvScXpW41yQm b7ZR8SS0JjopOOKn9i5ebDArceq/Zg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:58:25 2026 by rpki-client