$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa File: d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa (raw, json) Hash identifier: OpKD2AGXZL+tBlA3IyOBtkCaAndiMLHn0R937GN189M= Subject key identifier: 85:54:DD:99:5C:62:4F:15:0D:B3:22:C9:89:28:65:11:6A:0E:C8:88 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584D4D5A717FE062E1D909C2C2D0 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13325 IP address blocks: 199.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:71:7f:e0:62:e1:d9:09:c2:c2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=c151ff94-b5f0-4174-8b59-ea5b6ce68e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:ae:95:3d:f8:5c:95:a7:f9:6a:ea:aa:c3: 2b:b9:3a:ff:11:be:56:7a:7e:2b:73:d4:f8:aa:0f: cb:35:da:68:c0:e8:90:0c:2b:51:28:cd:4b:07:73: 78:f9:a4:06:24:c4:3a:c2:4a:0d:be:ab:40:7f:12: cb:6d:fb:e3:74:b0:e7:0a:16:98:11:10:9f:b9:73: a4:8b:94:28:20:a9:96:ca:e7:c0:3b:af:d1:5e:6d: c8:23:7f:48:a6:f5:96:0e:1b:82:93:9d:3e:23:a6: 6f:d7:03:d1:b9:38:d2:85:b2:a6:96:6f:1f:84:17: af:3f:f1:97:30:8a:ed:e1:9a:4c:2c:23:4f:01:9c: ad:23:61:df:0f:a8:b9:64:a0:42:aa:8b:72:02:c4: 7e:82:4b:7f:03:7f:18:4c:1b:ba:aa:74:e6:cb:9e: c2:32:9f:19:43:49:03:d0:fb:1b:34:89:77:93:c4: b5:6b:fd:fb:1e:f5:2f:06:71:bd:b5:ad:f8:77:6b: 63:81:c9:54:7a:af:fc:07:9c:c4:6f:c0:26:46:bf: 8b:51:7e:4e:77:24:af:64:90:35:78:7f:dd:d5:83: 08:46:b2:2e:2a:15:90:5e:5f:ff:cc:69:01:bb:29: 7c:ca:71:31:6e:64:2a:2d:0c:b5:5a:b2:f0:9a:6a: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:54:DD:99:5C:62:4F:15:0D:B3:22:C9:89:28:65:11:6A:0E:C8:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 199.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:75:55:59:de:86:bc:ad:d8:20:4b:0f:ea:86:8a:cf:ce:0d: 07:a3:31:0e:59:a7:c3:79:b2:3e:38:c6:b6:19:a4:ea:0f:dc: e2:9c:dd:d9:e1:eb:59:3c:cc:32:57:3a:95:ab:33:4a:41:92: ae:9b:66:bf:cb:93:75:fd:33:4d:f0:98:1f:41:37:26:ad:6a: 4f:c3:b8:95:c1:4a:2b:f1:34:83:41:68:1b:88:f1:21:d0:ce: be:db:01:62:9e:0c:f4:16:fd:86:36:e8:b5:06:fa:79:d4:8e: e6:84:50:67:8d:6c:95:43:79:7c:00:1f:f6:ae:8e:22:21:a6: 99:ee:f8:11:e3:88:12:33:dd:d2:1e:68:97:f3:50:38:ce:96: 60:72:01:cf:5a:aa:26:d8:d5:af:d0:38:6b:c3:78:e7:57:9f: 50:86:bc:96:13:53:3d:4a:f9:5d:15:33:3b:cc:a5:e2:6e:4b: 93:5f:57:61:17:b5:7e:93:c3:0b:81:36:df:a4:08:ad:5e:3f: c0:ba:3a:81:b8:9d:a5:24:c2:a8:56:82:b6:5d:90:86:0d:84: 1a:c3:f0:95:6b:9a:27:30:2f:01:2f:23:98:f0:a4:b3:c7:02: db:78:6c:4f:71:60:36:28:2c:9a:48:22:9b:ab:30:bf:2a:de: 85:5f:fb:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnF/4GLh2QnCwtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YzE1MWZmOTQtYjVmMC00MTc0LThiNTktZWE1YjZjZTY4ZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYWulT34XJWn+WrqqsMruTr/Eb5Wen4rc9T4 qg/LNdpowOiQDCtRKM1LB3N4+aQGJMQ6wkoNvqtAfxLLbfvjdLDnChaYERCfuXOk i5QoIKmWyufAO6/RXm3II39IpvWWDhuCk50+I6Zv1wPRuTjShbKmlm8fhBevP/GX MIrt4ZpMLCNPAZytI2HfD6i5ZKBCqotyAsR+gkt/A38YTBu6qnTmy57CMp8ZQ0kD 0PsbNIl3k8S1a/37HvUvBnG9ta34d2tjgclUeq/8B5zEb8AmRr+LUX5OdySvZJA1 eH/d1YMIRrIuKhWQXl//zGkBuyl8ynExbmQqLQy1WrLwmmqCAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVU3ZlcYk8VDbMiyYkoZRFqDsiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvZDRiOGZiZjgtOTFjNC0z M2YzLWEwZDEtZTRiMWU4MTVkZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ1VVnehryt2CBLD+qGis/ODQejMQ5Zp8N5sj44xrYZpOoP3OKc3dnh 61k8zDJXOpWrM0pBkq6bZr/Lk3X9M03wmB9BNyatak/DuJXBSivxNINBaBuI8SHQ zr7bAWKeDPQW/YY26LUG+nnUjuaEUGeNbJVDeXwAH/aujiIhppnu+BHjiBIz3dIe aJfzUDjOlmByAc9aqibY1a/QOGvDeOdXn1CGvJYTUz1K+V0VMzvMpeJuS5NfV2EX tX6TwwuBNt+kCK1eP8C6OoG4naUkwqhWgrZdkIYNhBrD8JVrmicwLwEvI5jwpLPH Att4bE9xYDYoLJpIIpurML8q3oVf+4M= -----END CERTIFICATE-----Generated at Sat Apr 18 02:30:27 2026 by rpki-client