$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa File: 52d6fb63-d10e-3772-be72-745c1da323dc.roa (raw, json) Hash identifier: YRP3TbmoDWC5bG22F1oL2tycbkGB1Dx1ZT5USnWeUbA= Subject key identifier: 21:F4:B2:D9:F3:85:75:3F:F2:0E:D9:0E:1A:46:E5:89:89:0A:7D:4D Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584C6B56A1114856C4E8158B1080 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa Signing time: Mon 05 Jan 2026 02:00:31 +0000 ROA not before: Mon 05 Jan 2026 02:00:31 +0000 ROA not after: Sun 05 Apr 2026 01:00:31 +0000 asID: 33477 IP address blocks: 104.152.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:56:a1:11:48:56:c4:e8:15:8b:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jan 5 02:00:31 2026 GMT Not After : Apr 5 01:00:31 2026 GMT Subject: CN=afc811d0-9e70-47bc-80cb-6ea6e9177c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:79:18:54:94:bc:8e:e0:d8:11:96:69:3b:d4: 35:ec:11:1c:db:ea:fa:86:89:40:16:18:c8:96:46: d1:27:87:80:99:56:09:7a:05:f4:8e:35:b2:d4:49: df:0d:3d:ea:f5:1e:2a:8c:38:6a:04:ea:e1:57:0b: 7d:e0:f0:5e:be:f0:2c:93:28:bd:4d:40:6d:10:a2: 2c:6a:b4:0b:87:1b:90:87:e8:15:10:d5:e4:4d:b2: 61:5a:0d:60:8f:30:50:6c:f9:2e:64:e3:7b:cc:a4: be:e3:56:bd:41:80:1a:1c:03:79:ca:ef:be:33:49: c6:87:91:85:80:08:aa:74:41:e5:25:b3:39:29:1a: 0d:65:12:40:b8:7e:e4:f3:84:ab:b0:5c:db:d7:68: 09:23:53:35:ac:4f:e4:ce:66:14:9e:a3:1e:f9:96: 79:bd:2b:5b:91:c6:5f:43:a3:f5:a9:41:8b:f2:25: 8c:3b:dc:a8:51:8c:99:e7:8b:83:8d:92:2b:49:06: 06:2e:39:fc:a3:b5:06:d8:42:72:59:ea:14:be:47: 84:34:25:22:f9:f0:50:d0:b3:4d:c9:6e:07:ab:70: 78:5c:93:33:03:82:53:c3:78:e1:69:70:92:20:aa: c3:48:5e:07:6d:72:77:3d:bb:99:8b:4b:50:7b:47: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F4:B2:D9:F3:85:75:3F:F2:0E:D9:0E:1A:46:E5:89:89:0A:7D:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:54:ae:71:e3:bc:7e:82:38:a9:dc:5e:a5:0f:8b:6b:00:9e: 60:ac:92:aa:5e:42:0b:e7:67:8e:ae:07:f1:19:22:73:fa:52: a8:34:40:92:98:3c:15:5d:7e:86:cc:ce:a5:dc:09:bc:30:21: 30:b8:a8:25:0b:f5:aa:db:60:d2:59:72:91:09:d0:ae:8a:e8: b9:28:2f:12:d6:c3:27:a0:ac:8b:6c:d4:7a:e8:64:41:b4:25: f6:df:a8:58:1a:53:94:13:e4:6a:ff:a9:99:02:7b:34:46:23: 92:3b:f0:3e:32:6b:24:69:89:a8:3b:4d:80:6c:0a:8f:5b:80: 8b:8c:90:d8:50:b3:d4:71:18:ed:63:c1:eb:f9:14:4d:a1:87: b6:94:94:54:5e:92:2a:ef:c4:e3:2f:ef:92:88:bd:80:93:c2: 52:d5:44:59:2b:00:a3:54:0c:19:61:83:63:29:df:da:8b:36: 2b:2b:bf:f7:f3:41:ce:c6:66:1a:0b:4c:23:04:ed:60:69:38: f7:36:6b:71:44:e2:42:f6:5c:a8:86:40:bf:33:e7:5e:02:16: 55:f7:3a:89:16:61:53:53:fa:ad:50:eb:d5:28:1a:59:95:87: 9b:8d:15:fb:f8:48:8a:de:2b:62:cf:bb:6e:ff:a4:1d:e1:f0: 5a:c5:d8:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExrVqERSFbE6BWLEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk YWZjODExZDAtOWU3MC00N2JjLTgwY2ItNmVhNmU5MTc3YzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nkYVJS8juDYEZZpO9Q17BEc2+r6holAFhjI lkbRJ4eAmVYJegX0jjWy1EnfDT3q9R4qjDhqBOrhVwt94PBevvAskyi9TUBtEKIs arQLhxuQh+gVENXkTbJhWg1gjzBQbPkuZON7zKS+41a9QYAaHAN5yu++M0nGh5GF gAiqdEHlJbM5KRoNZRJAuH7k84SrsFzb12gJI1M1rE/kzmYUnqMe+ZZ5vStbkcZf Q6P1qUGL8iWMO9yoUYyZ54uDjZIrSQYGLjn8o7UG2EJyWeoUvkeENCUi+fBQ0LNN yW4Hq3B4XJMzA4JTw3jhaXCSIKrDSF4HbXJ3PbuZi0tQe0eowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH0stnzhXU/8g7ZDhpG5YmJCn1NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvNTJkNmZiNjMtZDEwZS0z NzcyLWJlNzItNzQ1YzFkYTMyM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJjHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlUrnHjvH6COKncXqUPi2sAnmCskqpeQgvnZ46uB/EZInP6Uqg0QJKY PBVdfobMzqXcCbwwITC4qCUL9arbYNJZcpEJ0K6K6LkoLxLWwyegrIts1HroZEG0 JfbfqFgaU5QT5Gr/qZkCezRGI5I78D4yayRpiag7TYBsCo9bgIuMkNhQs9RxGO1j wev5FE2hh7aUlFRekirvxOMv75KIvYCTwlLVRFkrAKNUDBlhg2Mp39qLNisrv/fz Qc7GZhoLTCME7WBpOPc2a3FE4kL2XKiGQL8z514CFlX3OokWYVNT+q1Q69UoGlmV h5uNFfv4SIreK2LPu27/pB3h8FrF2Iw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:50 2026 by rpki-client