$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa File: 52d6fb63-d10e-3772-be72-745c1da323dc.roa (raw, json) Hash identifier: 56lUjEnU7gGxWKDop2GshZt7IbNoxrLzp2NQ3oPS1j0= Subject key identifier: 8D:17:37:6C:01:9D:CF:86:10:61:58:AD:2A:E8:69:DC:D8:DA:C6:D3 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584ECD37206E3D6FFB12D7972280 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 33477 IP address blocks: 104.152.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:20:6e:3d:6f:fb:12:d7:97:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=4d1d8948-3c96-4310-92b5-8ad1d3fe440c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:28:82:96:0c:10:f3:6e:d2:11:f7:37:53: f3:74:b1:e7:ad:6e:fb:1f:3a:ce:31:04:31:ec:14: 08:56:f6:1a:45:74:8a:17:f4:3b:b9:68:88:94:8d: bd:a1:a7:48:4c:9d:4a:f5:91:11:ab:57:41:ce:03: a2:02:cd:d5:f8:fc:80:2d:62:e4:26:27:82:6e:cc: a9:09:5d:41:37:a1:7e:e1:3c:06:ff:26:d0:97:83: 7b:05:bb:aa:17:f4:3e:90:5a:d0:88:34:93:f4:54: 88:06:6e:6a:8f:f6:f2:ef:a9:5b:a6:f4:1d:c6:04: 90:83:c8:91:19:b6:d8:c0:72:23:bb:55:5e:df:e0: 47:db:c5:02:1d:c1:1b:ad:da:40:f5:f2:c0:7f:6d: 05:e7:07:e0:66:27:b0:24:4f:ed:b8:f5:06:a1:13: 41:cd:dd:1a:a2:c8:79:f5:ca:c8:fa:a9:c9:95:f5: 4c:d0:d2:c0:10:82:77:ca:1a:66:8a:a6:b6:62:9b: 33:a2:da:3e:f3:c1:7f:a5:b8:64:49:4b:92:c6:9a: a3:37:63:bb:7c:8e:b5:ab:4d:8f:50:13:ed:03:19: dc:1d:91:c6:08:fc:43:43:36:a8:5e:a5:50:04:41: 77:34:1f:34:22:13:b7:98:0e:de:25:e9:33:c9:47: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:17:37:6C:01:9D:CF:86:10:61:58:AD:2A:E8:69:DC:D8:DA:C6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ed:61:f6:22:f2:f2:b1:2f:35:6e:f3:cf:f6:b3:54:e7:f6: 14:83:e5:ae:73:0e:91:fa:84:20:55:66:df:12:ef:81:d1:72: 64:68:db:50:52:64:06:08:16:e1:99:49:4d:f2:ae:e7:00:d0: 0e:e6:85:de:f6:32:74:ec:1d:7c:31:87:e6:99:26:61:2a:67: 80:f4:95:99:c4:8b:1e:e8:aa:a8:9a:32:e5:53:8d:26:44:75: a5:de:8e:a0:d4:2c:39:54:41:da:3c:e9:78:8f:f5:93:d5:38: 1f:c3:17:45:5a:c7:b8:48:a7:86:86:ac:7c:18:00:0d:2a:db: 37:18:b7:1d:fd:56:6a:84:82:19:f1:81:df:6c:71:87:fa:9f: 65:4d:03:4f:a3:17:a6:0f:7a:0f:fc:4f:81:18:ee:be:59:71: dd:d6:fe:61:06:88:35:66:17:c7:3d:07:0e:a9:48:6b:9a:c7: 05:02:84:b4:a7:aa:bd:44:b1:77:48:4f:41:b2:a2:f2:a5:8f: 89:2e:73:80:2d:74:37:a1:09:4a:b1:ca:21:b8:52:03:f5:84: 44:30:3f:58:da:28:61:ac:2d:2d:c4:90:62:b5:33:7a:06:24: 10:e7:0e:21:b2:64:f6:2d:d0:e1:21:26:72:b8:5b:17:02:94: e8:e1:d6:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyBuPW/7EteXIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NGQxZDg5NDgtM2M5Ni00MzEwLTkyYjUtOGFkMWQzZmU0NDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY8ogpYMEPNu0hH3N1PzdLHnrW77HzrOMQQx 7BQIVvYaRXSKF/Q7uWiIlI29oadITJ1K9ZERq1dBzgOiAs3V+PyALWLkJieCbsyp CV1BN6F+4TwG/ybQl4N7BbuqF/Q+kFrQiDST9FSIBm5qj/by76lbpvQdxgSQg8iR GbbYwHIju1Ve3+BH28UCHcEbrdpA9fLAf20F5wfgZiewJE/tuPUGoRNBzd0aosh5 9crI+qnJlfVM0NLAEIJ3yhpmiqa2Ypszoto+88F/pbhkSUuSxpqjN2O7fI61q02P UBPtAxncHZHGCPxDQzaoXqVQBEF3NB80IhO3mA7eJekzyUf1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0XN2wBnc+GEGFYrSroadzY2sbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvNTJkNmZiNjMtZDEwZS0z NzcyLWJlNzItNzQ1YzFkYTMyM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJjHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrtYfYi8vKxLzVu88/2s1Tn9hSD5a5zDpH6hCBVZt8S74HRcmRo21BS ZAYIFuGZSU3yrucA0A7mhd72MnTsHXwxh+aZJmEqZ4D0lZnEix7oqqiaMuVTjSZE daXejqDULDlUQdo86XiP9ZPVOB/DF0Vax7hIp4aGrHwYAA0q2zcYtx39VmqEghnx gd9scYf6n2VNA0+jF6YPeg/8T4EY7r5Zcd3W/mEGiDVmF8c9Bw6pSGuaxwUChLSn qr1EsXdIT0GyovKlj4kuc4AtdDehCUqxyiG4UgP1hEQwP1jaKGGsLS3EkGK1M3oG JBDnDiGyZPYt0OEhJnK4WxcClOjh1jA= -----END CERTIFICATE-----Generated at Mon Sep 28 22:01:26 2026 by rpki-client