$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa File: 51c93d61-da59-3492-9aa3-1e6063528f1f.roa (raw, json) Hash identifier: Q6CcmNsyOz01Zkdjr3h4259YkRIJhhRJGhv2BeSB1XE= Subject key identifier: DC:BD:27:EE:6C:D3:2A:74:D6:33:D2:3C:2F:BA:82:F8:21:65:E6:59 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584D4D5A66862F7139A8A15D2080 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13325 IP address blocks: 148.149.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:66:86:2f:71:39:a8:a1:5d:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=493e4789-fa2d-42c2-b93f-dd94bdfe15cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:36:53:1e:18:f5:03:4a:af:4a:1a:23:ca: 11:9a:7c:94:b5:59:b8:e2:4e:41:b3:fe:67:6c:1c: d1:2c:c3:0a:c2:ad:ce:e2:37:06:0d:4c:c0:e1:0e: 61:49:06:5b:d6:73:ec:db:c4:e2:15:94:d5:bd:fa: cf:e1:e2:29:ba:71:87:bb:b8:57:34:2d:ad:66:b1: c5:de:88:c4:85:7a:ec:01:4a:ad:4d:1c:20:06:e1: 4a:84:8f:ee:0e:bd:a9:dd:41:ae:46:5e:55:e6:45: bc:0a:19:92:37:5f:19:b3:b0:18:cf:39:32:54:f4: f4:af:df:90:02:58:18:4c:3c:e9:bc:49:af:09:4d: 9f:39:51:9b:6f:0d:ad:56:d7:34:f7:cb:b7:1f:13: 34:25:dd:14:5c:c8:fd:69:6e:d7:c4:e5:05:d1:52: 05:2f:ea:e3:f8:e3:d2:83:8e:e8:8c:44:74:a9:6b: 35:bc:f4:c7:30:47:a4:20:32:83:9f:85:57:31:17: ab:ca:98:ad:e0:9a:e9:01:24:ec:78:79:43:9c:e3: e2:29:4d:b2:7c:8c:b5:93:0c:43:b4:0d:3a:15:41: 72:23:2a:85:cb:02:d6:f4:c3:6e:4b:e0:ea:bb:9e: 6e:ff:02:e5:ea:e0:44:4b:c0:01:9c:85:3e:18:74: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BD:27:EE:6C:D3:2A:74:D6:33:D2:3C:2F:BA:82:F8:21:65:E6:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 148.149.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:83:a8:da:0b:d2:0f:f9:b0:55:83:ef:a3:69:dc:87:83:ef: 61:79:b3:ef:8b:86:da:ea:88:1d:34:e6:92:92:c8:4a:be:56: 70:24:49:c5:ac:6f:65:dd:f2:6d:65:a1:20:8b:bf:f5:7f:9c: 36:01:52:0d:48:9e:d1:f1:07:27:cf:53:28:19:da:98:b0:f7: a5:68:4a:96:65:e5:6d:31:6c:e1:a7:ff:a2:14:2c:9c:53:d9: a0:5c:79:10:26:97:a7:2c:33:79:e4:1e:c7:c3:6f:d2:2c:0f: 0d:d3:4b:2d:6c:1f:42:05:c1:0c:24:f3:78:2f:78:be:83:fb: c1:56:98:de:4f:e5:0d:21:c7:8b:f6:42:87:43:c1:2a:86:82: f5:99:a3:27:29:5a:a4:7c:9a:2f:03:79:1e:1c:8f:42:a0:be: 5e:a1:8b:48:78:07:cd:a5:8f:7e:8a:29:3d:23:b1:c3:34:e6: 75:c6:62:48:62:a7:b3:69:50:76:f3:0e:0f:6b:db:d3:06:46: 39:11:24:d1:8b:80:9d:0d:a3:a9:ec:88:e0:6e:88:78:cf:a3: ec:0f:ba:d1:cb:23:ce:1e:ab:5d:ed:91:8a:50:ba:3c:48:0c: e0:4b:8c:1e:d1:a7:66:5d:ef:06:55:a4:50:c6:26:59:8a:bd: 7b:67:1b:4e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1NWmaGL3E5qKFdIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NDkzZTQ3ODktZmEyZC00MmMyLWI5M2YtZGQ5NGJkZmUxNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8k2Ux4Y9QNKr0oaI8oRmnyUtVm44k5Bs/5n bBzRLMMKwq3O4jcGDUzA4Q5hSQZb1nPs28TiFZTVvfrP4eIpunGHu7hXNC2tZrHF 3ojEhXrsAUqtTRwgBuFKhI/uDr2p3UGuRl5V5kW8ChmSN18Zs7AYzzkyVPT0r9+Q AlgYTDzpvEmvCU2fOVGbbw2tVtc098u3HxM0Jd0UXMj9aW7XxOUF0VIFL+rj+OPS g47ojER0qWs1vPTHMEekIDKDn4VXMRerypit4JrpASTseHlDnOPiKU2yfIy1kwxD tA06FUFyIyqFywLW9MNuS+Dqu55u/wLl6uBES8ABnIU+GHRNCQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNy9J+5s0yp01jPSPC+6gvghZeZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvNTFjOTNkNjEtZGE1OS0z NDkyLTlhYTMtMWU2MDYzNTI4ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlJUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARIOo2gvSD/mwVYPvo2nch4PvYXmz74uG2uqIHTTmkpLISr5WcCRJxaxv Zd3ybWWhIIu/9X+cNgFSDUie0fEHJ89TKBnamLD3pWhKlmXlbTFs4af/ohQsnFPZ oFx5ECaXpywzeeQex8Nv0iwPDdNLLWwfQgXBDCTzeC94voP7wVaY3k/lDSHHi/ZC h0PBKoaC9ZmjJylapHyaLwN5HhyPQqC+XqGLSHgHzaWPfoopPSOxwzTmdcZiSGKn s2lQdvMOD2vb0wZGOREk0YuAnQ2jqeyI4G6IeM+j7A+60csjzh6rXe2RilC6PEgM 4EuMHtGnZl3vBlWkUMYmWYq9e2cbTg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:59:14 2026 by rpki-client