$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa File: 866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa (raw, json) Hash identifier: sTZb3UVtwb8ORwxyQ5qPhwCqNzbWjD+mgrdecrjAc48= Subject key identifier: 44:40:EE:73:AF:5E:0C:0A:B6:8E:35:D0:F4:8A:C9:E1:B4:36:7F:30 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584D4D5A71AE8A99A4466CC00200 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13325 IP address blocks: 204.25.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:71:ae:8a:99:a4:46:6c:c0:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=74812c92-733c-4b0f-9006-d75ed3bc7c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:13:53:2e:fe:29:50:44:46:30:55:d8:24:4c: a3:00:77:d0:b7:ec:fd:1a:ea:f4:84:37:ee:d4:ca: 14:51:73:2c:64:f9:39:6a:e5:51:22:60:09:14:a4: 19:f7:8a:dc:d0:29:0c:e6:49:08:6d:b4:18:b6:3a: 5f:aa:b0:8d:54:d7:73:fd:f5:f8:62:c1:e1:60:db: 5c:30:f8:ee:49:5e:9d:c2:c3:56:de:31:f4:bf:a5: 7a:eb:55:a4:22:03:30:31:e5:0f:a9:67:fb:4a:70: bb:3d:57:dc:7c:fe:e2:ff:f7:b5:32:91:01:c3:c0: 65:c7:c5:56:3a:3a:ee:0a:5c:90:58:0e:61:c2:35: 52:b4:b7:e7:8a:ae:6c:e8:57:9f:b1:23:c0:f6:30: 08:85:21:a6:e5:ad:c6:26:7e:ee:04:d0:33:ef:76: e1:c6:98:b9:59:bd:02:3a:1f:21:0f:4b:45:48:d2: 3e:d2:9e:8c:ed:06:e9:9d:8d:3a:a0:e2:b4:eb:6f: 7b:36:78:e3:6e:7b:51:be:b1:b8:91:38:86:4e:e1: 8c:d6:e9:93:e2:55:73:8a:b2:1f:2d:86:f4:bb:f0: 53:33:d8:01:11:24:0f:97:34:2c:9e:d3:91:5b:71: 60:99:b1:32:7d:06:66:b6:1b:85:53:c8:e3:0f:82: de:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:40:EE:73:AF:5E:0C:0A:B6:8E:35:D0:F4:8A:C9:E1:B4:36:7F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e6:07:c3:21:18:a7:b2:bb:35:31:ff:3f:1a:6c:9d:ed:96: b0:cf:25:69:b8:e5:c9:af:ad:ef:38:0e:39:19:15:dd:28:a3: 41:dd:29:6f:56:4d:55:fb:b6:ce:39:68:23:53:f8:a1:2c:0e: 61:f7:18:f4:bf:dc:bd:38:b4:d1:b2:25:4d:61:96:7f:34:ab: 78:26:72:73:b5:9d:c2:58:12:ca:ef:fc:a1:7b:25:eb:d5:af: 29:1c:41:ce:0e:43:5f:54:ed:21:4f:0b:65:83:84:7e:f2:2a: ad:2c:75:24:f4:48:cb:41:25:8d:f4:e7:41:35:0e:68:f0:4b: 10:07:a0:61:50:41:e4:24:49:26:51:7d:b8:d0:81:fe:f6:6f: ed:9d:9b:a6:10:28:fc:ff:90:8d:aa:03:03:c0:ef:48:23:41: 41:c4:22:d6:76:21:3a:f6:6e:15:26:9d:e7:9f:63:18:df:bd: 10:06:72:44:93:a3:9f:54:d1:f2:e5:bb:8f:2e:0c:3c:27:bb: 27:e6:d6:a0:88:a7:c3:4e:72:d0:c3:5d:4e:80:e4:32:82:84: 2d:dd:2b:51:d4:4c:20:ec:10:36:02:c3:d8:7c:ff:3f:0d:51: 44:f0:7e:a8:6e:48:19:ef:fc:8c:1f:32:92:58:f2:23:07:6e: a1:41:cc:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnGuipmkRmzAAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NzQ4MTJjOTItNzMzYy00YjBmLTkwMDYtZDc1ZWQzYmM3Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRNTLv4pUERGMFXYJEyjAHfQt+z9Gur0hDfu 1MoUUXMsZPk5auVRImAJFKQZ94rc0CkM5kkIbbQYtjpfqrCNVNdz/fX4YsHhYNtc MPjuSV6dwsNW3jH0v6V661WkIgMwMeUPqWf7SnC7PVfcfP7i//e1MpEBw8Blx8VW OjruClyQWA5hwjVStLfniq5s6FefsSPA9jAIhSGm5a3GJn7uBNAz73bhxpi5Wb0C Oh8hD0tFSNI+0p6M7QbpnY06oOK06297NnjjbntRvrG4kTiGTuGM1umT4lVzirIf LYb0u/BTM9gBESQPlzQsntORW3FgmbEyfQZmthuFU8jjD4LeYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERA7nOvXgwKto410PSKyeG0Nn8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvODY2ZGEzZTAtMGQyZi0z OWU1LTg2OGItMmY2MGU0ZmY5MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbmB8MhGKeyuzUx/z8abJ3tlrDPJWm45cmvre84DjkZFd0oo0HdKW9W TVX7ts45aCNT+KEsDmH3GPS/3L04tNGyJU1hln80q3gmcnO1ncJYEsrv/KF7JevV rykcQc4OQ19U7SFPC2WDhH7yKq0sdST0SMtBJY3050E1DmjwSxAHoGFQQeQkSSZR fbjQgf72b+2dm6YQKPz/kI2qAwPA70gjQUHEItZ2ITr2bhUmneefYxjfvRAGckST o59U0fLlu48uDDwnuyfm1qCIp8NOctDDXU6A5DKChC3dK1HUTCDsEDYCw9h8/z8N UUTwfqhuSBnv/IwfMpJY8iMHbqFBzDs= -----END CERTIFICATE-----Generated at Fri Apr 17 22:14:20 2026 by rpki-client