$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa File: 7fe96268-b787-3529-9f78-3e3d0ced15ee.roa (raw, json) Hash identifier: RM/jd8YjgkO4ZPH4/+rSCbZE+8jWHhMGmk1NnwnwN5k= Subject key identifier: 39:65:52:0F:9D:81:8A:8E:50:CF:90:3F:16:48:DD:CF:16:4A:33:61 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584D4D5A71BB83208CB18A32A000 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13325 IP address blocks: 204.25.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:71:bb:83:20:8c:b1:8a:32:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=c8ccd7dd-c3b2-4dd0-98b7-879e172bb344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:34:18:a2:67:ed:fa:12:99:d3:b7:4f:47: 55:d9:1a:79:bf:71:d1:dd:c8:04:dd:ed:4d:2f:a8: da:ef:5f:54:d3:47:35:82:10:41:09:21:2f:20:63: fa:53:01:a2:05:57:56:8a:04:fa:a2:25:91:69:47: 7b:e1:bf:6c:46:04:bb:0a:24:ed:4f:4f:f0:6a:ef: a3:4f:d8:50:7f:85:a9:ec:e9:ee:7c:aa:13:2f:fe: 69:79:5b:ef:99:31:37:ec:9c:85:3a:f0:bd:ee:29: c6:bf:bd:55:69:cc:55:94:43:25:5b:65:73:29:d4: d6:4d:51:76:7e:37:c9:83:9a:d7:8b:54:09:c5:8d: 30:be:6e:02:94:90:69:be:75:94:20:b0:af:0e:83: 82:e9:55:79:29:84:e6:fd:bd:ca:5f:4d:3e:16:e3: 00:0b:3c:06:db:42:19:7e:28:a6:d8:a2:ab:81:55: 66:79:86:35:51:92:c9:63:8c:69:d8:47:3a:71:55: 3a:8b:03:41:48:65:bc:c6:06:8a:b1:4f:51:9d:88: 4b:a0:eb:6b:11:68:86:95:32:58:5c:9d:f7:fc:76: 4c:73:47:fb:fc:08:49:ec:86:11:58:1d:db:38:5f: d5:87:0e:ab:99:b7:fd:9b:1f:fa:fa:8e:d2:f1:f8: 6d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:52:0F:9D:81:8A:8E:50:CF:90:3F:16:48:DD:CF:16:4A:33:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:1a:0a:26:f7:b0:d8:57:4f:5f:81:65:e8:09:a5:42:4e:48: 7c:e8:39:67:91:40:4e:3e:17:9c:15:32:fa:91:bd:e7:b2:d4: ac:07:96:36:27:c8:a1:9b:09:cc:f5:bd:fa:c7:be:0f:70:e6: 55:ca:45:5c:8b:68:17:db:cc:4e:07:2e:a7:95:1b:49:87:49: 3d:11:fb:3f:44:33:16:0b:d6:cf:c5:b1:ff:80:6e:cd:69:cc: b6:db:15:b0:78:fa:7f:14:de:1b:3e:47:f4:5f:5b:ae:1b:9f: 93:24:05:f2:1f:96:28:e9:7d:a2:5f:a8:44:bc:c1:af:11:39: bf:9f:09:e0:93:d6:05:c3:c9:ef:68:a1:5f:19:7a:7f:8f:79: e8:5b:8f:86:c9:4b:fd:c7:ce:b9:d6:80:73:2a:70:49:fb:76: 9b:37:e5:67:33:7f:d5:d0:f7:db:4c:dc:96:bf:17:a4:c7:f4: 30:59:75:12:4b:fb:18:73:05:1d:58:b2:0b:4c:dc:57:50:b6: 9a:29:2f:09:e2:85:fd:0a:32:de:ae:d4:50:b4:aa:ab:37:5b: b1:19:8e:aa:e0:5b:87:53:3b:43:95:e9:5c:95:ef:16:7e:3f: b1:00:e3:5c:7a:a2:2b:64:76:4a:1d:73:6a:0b:5f:e4:04:18: d0:fe:ba:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnG7gyCMsYoyoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YzhjY2Q3ZGQtYzNiMi00ZGQwLTk4YjctODc5ZTE3MmJiMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Y0GKJn7foSmdO3T0dV2Rp5v3HR3cgE3e1N L6ja719U00c1ghBBCSEvIGP6UwGiBVdWigT6oiWRaUd74b9sRgS7CiTtT0/wau+j T9hQf4Wp7OnufKoTL/5peVvvmTE37JyFOvC97inGv71VacxVlEMlW2VzKdTWTVF2 fjfJg5rXi1QJxY0wvm4ClJBpvnWUILCvDoOC6VV5KYTm/b3KX00+FuMACzwG20IZ fiim2KKrgVVmeYY1UZLJY4xp2Ec6cVU6iwNBSGW8xgaKsU9RnYhLoOtrEWiGlTJY XJ33/HZMc0f7/AhJ7IYRWB3bOF/Vhw6rmbf9mx/6+o7S8fhtVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDllUg+dgYqOUM+QPxZI3c8WSjNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvN2ZlOTYyNjgtYjc4Ny0z NTI5LTlmNzgtM2UzZDBjZWQxNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwaCib3sNhXT1+BZegJpUJOSHzoOWeRQE4+F5wVMvqRveey1KwHljYn yKGbCcz1vfrHvg9w5lXKRVyLaBfbzE4HLqeVG0mHST0R+z9EMxYL1s/Fsf+Abs1p zLbbFbB4+n8U3hs+R/RfW64bn5MkBfIflijpfaJfqES8wa8ROb+fCeCT1gXDye9o oV8Zen+Peehbj4bJS/3HzrnWgHMqcEn7dps35Wczf9XQ99tM3Ja/F6TH9DBZdRJL +xhzBR1YsgtM3FdQtpopLwnihf0KMt6u1FC0qqs3W7EZjqrgW4dTO0OV6VyV7xZ+ P7EA41x6oitkdkodc2oLX+QEGND+ujE= -----END CERTIFICATE-----Generated at Fri Apr 17 18:58:53 2026 by rpki-client