$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa File: 52b1de85-0442-360b-b96d-bfcab54c4eac.roa (raw, json) Hash identifier: PyHn1RGvW81lEc83OJlt3hhf8oX0fWqtc/F1lPRwB/Q= Subject key identifier: 1E:2E:BB:63:7F:CF:85:7D:FC:02:97:36:A8:94:FC:70:00:00:E6:97 Certificate issuer: /CN=2b52814e-343c-46a0-bf89-2e9064856503 Certificate serial: 010D0C9F4328584D6515083C5B897DE870BB4EA0 Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 393410 IP address blocks: 192.30.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:08:3c:5b:89:7d:e8:70:bb:4e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=618cee78-a76d-4612-90c1-f0548a9c0405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0f:5c:91:9a:f3:66:2d:ef:f8:8e:e6:58:ed: 9b:db:b6:c9:ea:a3:a1:1d:82:da:53:d5:5f:15:c9: 15:fe:fc:46:6b:1f:bc:95:80:32:c2:4e:cf:46:50: 0f:a6:f5:b7:46:7d:43:58:7b:8b:2a:68:bb:4e:f3: 8e:20:af:94:34:7d:a4:5a:d1:ef:be:96:be:a6:c8: d0:72:45:1e:69:5e:75:10:b3:65:5d:94:a8:93:4a: d1:30:6a:02:32:19:37:04:d9:eb:21:c5:10:f6:a6: e0:63:a2:78:da:56:37:79:f0:0a:0e:dc:9f:77:c7: 48:79:c5:39:36:df:76:7b:53:db:83:40:dd:00:2e: 24:74:f2:9d:0c:e9:de:dd:c7:3f:bb:a8:e5:d7:47: e8:6c:27:6a:1e:54:fe:a9:bc:15:07:fb:cb:15:0d: 83:76:b3:30:90:75:0a:62:b2:b3:a1:6b:21:67:8c: ef:ba:20:a9:62:a4:13:f7:4c:af:88:51:22:52:6f: 56:dd:25:64:b4:41:5e:7d:48:43:cb:2d:f4:22:c3: de:37:19:e5:70:31:a3:f8:f6:b0:8d:55:ae:62:d3: 03:0f:cc:01:1d:91:51:51:ad:be:06:ca:d9:7f:7a: 0d:aa:da:45:df:03:4b:41:01:66:36:bc:42:ac:a0: ed:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2E:BB:63:7F:CF:85:7D:FC:02:97:36:A8:94:FC:70:00:00:E6:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl X509v3 Authority Key Identifier: keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer sbgp-ipAddrBlock: critical IPv4: 192.30.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e4:cc:c7:bf:50:02:63:85:62:49:1d:c3:2c:82:eb:8a:6e: 6e:35:41:d4:4c:c3:0c:86:43:61:ec:4e:14:74:58:76:7c:fe: 7d:32:f5:91:ac:b3:ec:e7:fe:61:97:21:34:4d:c8:bc:67:b4: 91:03:30:ae:9b:5a:02:6c:f9:ab:00:81:dc:bb:e3:50:4a:d7: 23:71:60:55:f1:31:03:6c:74:c9:45:2d:a2:04:2d:9b:8d:25: 02:67:78:87:44:b3:e7:74:6b:92:ff:7d:94:f7:83:a0:83:57: db:a7:ce:5d:80:64:d4:1c:91:03:03:28:cc:d3:ae:a7:36:e9: 57:63:de:92:5d:2b:e7:c1:2f:4b:f3:d9:49:46:73:65:58:b0: 3c:5d:b1:c3:d9:e2:35:a4:ee:ec:e1:fc:bb:3b:c8:84:17:48: c9:23:bc:bd:47:16:ca:3c:25:b3:ac:8c:9a:e0:5f:81:20:10: 99:eb:55:2d:46:78:2d:ab:2e:68:e5:9a:01:99:ce:bb:6d:6f: e6:21:81:cf:1c:8f:ed:97:7c:b4:76:67:80:23:54:43:36:06: 47:bf:1a:b4:02:c8:59:c0:4d:25:4e:45:c1:49:43:a8:b7:0a: 31:24:d8:da:3d:0b:04:b6:cb:ed:35:7c:0c:4b:9d:b0:6c:8a: f5:2f:09:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQg8W4l96HC7TqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1MjgxNGUtMzQzYy00NmEwLWJmODktMmU5MDY0ODU2 NTAzMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NjE4Y2VlNzgtYTc2ZC00NjEyLTkwYzEtZjA1NDhhOWMwNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w9ckZrzZi3v+I7mWO2b27bJ6qOhHYLaU9Vf FckV/vxGax+8lYAywk7PRlAPpvW3Rn1DWHuLKmi7TvOOIK+UNH2kWtHvvpa+psjQ ckUeaV51ELNlXZSok0rRMGoCMhk3BNnrIcUQ9qbgY6J42lY3efAKDtyfd8dIecU5 Nt92e1Pbg0DdAC4kdPKdDOne3cc/u6jl10fobCdqHlT+qbwVB/vLFQ2DdrMwkHUK YrKzoWshZ4zvuiCpYqQT90yviFEiUm9W3SVktEFefUhDyy30IsPeNxnlcDGj+Paw jVWuYtMDD8wBHZFRUa2+BsrZf3oNqtpF3wNLQQFmNrxCrKDtqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4uu2N/z4V9/AKXNqiU/HAAAOaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUy ODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkwNjQ4NTY1MDMvNTJiMWRlODUtMDQ0Mi0z NjBiLWI5NmQtYmZjYWI1NGM0ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmI1MjgxNGUtMzQzYy00NmEwLWJm ODktMmU5MDY0ODU2NTAzLzJiNTI4MTRlLTM0M2MtNDZhMC1iZjg5LTJlOTA2NDg1 NjUwMy5jcmwwHwYDVR0jBBgwFoAU6dRwuiGQ7tcv2d+VxyZ/OvYvKE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUyODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkw NjQ4NTY1MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDkzMe/UAJjhWJJHcMsguuKbm41QdRMwwyGQ2HsThR0WHZ8/n0y9ZGs s+zn/mGXITRNyLxntJEDMK6bWgJs+asAgdy741BK1yNxYFXxMQNsdMlFLaIELZuN JQJneIdEs+d0a5L/fZT3g6CDV9unzl2AZNQckQMDKMzTrqc26Vdj3pJdK+fBL0vz 2UlGc2VYsDxdscPZ4jWk7uzh/Ls7yIQXSMkjvL1HFso8JbOsjJrgX4EgEJnrVS1G eC2rLmjlmgGZzrttb+Yhgc8cj+2XfLR2Z4AjVEM2Bke/GrQCyFnATSVORcFJQ6i3 CjEk2No9CwS2y+01fAxLnbBsivUvCVk= -----END CERTIFICATE-----Generated at Fri Apr 17 18:59:22 2026 by rpki-client