$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa File: 3d97d649-dd61-39e8-94b1-2e5a345cf305.roa (raw, json) Hash identifier: vUSP1aO5FYf1LfVoYCAbPjo9JSMiEedxgEIticK+z0g= Subject key identifier: FF:8E:BD:7C:CA:A7:ED:C5:75:5D:A4:6D:E5:73:18:BE:79:7A:E2:BB Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584D4D5A6B9546BFEFE07F9FD080 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 11775 IP address blocks: 192.149.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:6b:95:46:bf:ef:e0:7f:9f:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=5db94d57-88ab-4a8d-a550-8215d7cb9326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:14:01:a9:c3:17:78:20:6e:fe:0c:5f:ca:63: 14:e3:c6:d5:01:a8:f0:cb:c3:be:78:d5:73:ec:03: c0:69:45:17:d3:72:06:6f:57:a2:44:5e:23:86:b5: 93:a1:e3:71:e3:81:63:24:26:e4:4b:bf:7a:17:1d: 42:5f:d2:1a:a9:dc:dc:f1:b5:0f:70:2e:7e:79:18: f2:0d:ec:5b:52:84:0b:0d:b4:69:ad:3a:ed:46:10: ec:ac:8a:21:d7:c4:95:36:79:50:f0:aa:e2:f3:fd: 3f:4c:26:eb:53:a3:c8:52:77:79:9c:bd:b4:14:7f: e2:99:7f:2c:a8:73:60:25:41:eb:63:69:e5:07:0e: d0:84:22:2f:3d:12:45:96:00:bc:21:fe:ff:f5:aa: 29:8c:14:9e:c3:3e:86:8f:fb:dc:08:86:d7:b2:91: 93:b8:48:06:49:d8:42:41:eb:15:d7:61:36:54:a5: ab:20:eb:29:c1:9f:06:87:36:59:4b:88:8d:49:fd: 80:92:5f:c2:48:a5:f4:f0:34:d2:a1:88:98:fc:8c: f3:c5:0e:42:77:d6:ce:a1:cd:77:34:a2:a5:f4:19: f0:a5:22:97:9f:ed:f1:08:75:21:b0:83:80:3d:f4: 6a:17:41:6c:e0:a8:6b:a6:d8:ad:f5:0c:b8:98:cf: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8E:BD:7C:CA:A7:ED:C5:75:5D:A4:6D:E5:73:18:BE:79:7A:E2:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 192.149.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d6:9f:5e:ab:3a:8e:6f:18:ac:5a:d8:52:75:bb:42:11:e9: bf:e6:4b:7d:2d:dd:e8:b7:60:93:ac:be:90:27:d4:81:a9:22: a2:7a:45:80:68:6f:b6:16:0c:7b:00:2f:76:a4:84:b2:8e:98: c6:ff:49:b9:e6:02:34:86:48:61:fa:3c:6c:92:b6:60:f5:3e: 73:55:f3:39:48:84:54:f6:82:d5:bd:01:8d:1d:29:1f:eb:af: 84:5b:6e:2b:c9:b4:f0:f8:4c:c4:fb:45:69:53:b3:e5:59:0e: 40:a8:c7:38:d3:0c:c8:93:b3:70:f6:fc:1e:dc:ac:7a:bd:c5: 65:7b:1e:46:9c:18:23:0a:77:05:b8:7a:4c:2e:09:c9:81:d1: b4:e7:87:9c:a5:1d:5d:92:18:8c:cb:db:1a:1a:45:ba:f3:b0: ff:9d:39:d4:f1:db:b3:8c:2e:01:30:8b:e0:bb:fb:81:ee:2d: a5:93:c8:b6:fa:77:a4:b8:c6:eb:e2:2f:0b:85:81:c7:41:3a: aa:07:0e:d0:7f:0a:32:2d:98:b2:0f:65:ef:e2:d9:13:05:f6: 9c:4f:86:3f:62:53:3d:69:7e:bb:e7:c1:76:99:2a:11:2f:33: e0:d4:ae:e3:e1:5e:43:2e:5e:bf:f0:9b:6f:64:41:2b:a3:d8: e9:81:1c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmuVRr/v4H+f0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NWRiOTRkNTctODhhYi00YThkLWE1NTAtODIxNWQ3Y2I5MzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhQBqcMXeCBu/gxfymMU48bVAajwy8O+eNVz 7APAaUUX03IGb1eiRF4jhrWToeNx44FjJCbkS796Fx1CX9Iaqdzc8bUPcC5+eRjy DexbUoQLDbRprTrtRhDsrIoh18SVNnlQ8Kri8/0/TCbrU6PIUnd5nL20FH/imX8s qHNgJUHrY2nlBw7QhCIvPRJFlgC8If7/9aopjBSewz6Gj/vcCIbXspGTuEgGSdhC QesV12E2VKWrIOspwZ8GhzZZS4iNSf2Akl/CSKX08DTSoYiY/IzzxQ5Cd9bOoc13 NKKl9BnwpSKXn+3xCHUhsIOAPfRqF0Fs4Khrptit9Qy4mM/CKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+OvXzKp+3FdV2kbeVzGL55euK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvM2Q5N2Q2NDktZGQ2MS0z OWU4LTk0YjEtMmU1YTM0NWNmMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATWn16rOo5vGKxa2FJ1u0IR6b/mS30t3ei3YJOsvpAn1IGpIqJ6RYBo b7YWDHsAL3akhLKOmMb/SbnmAjSGSGH6PGyStmD1PnNV8zlIhFT2gtW9AY0dKR/r r4RbbivJtPD4TMT7RWlTs+VZDkCoxzjTDMiTs3D2/B7crHq9xWV7HkacGCMKdwW4 ekwuCcmB0bTnh5ylHV2SGIzL2xoaRbrzsP+dOdTx27OMLgEwi+C7+4HuLaWTyLb6 d6S4xuviLwuFgcdBOqoHDtB/CjItmLIPZe/i2RMF9pxPhj9iUz1pfrvnwXaZKhEv M+DUruPhXkMuXr/wm29kQSuj2OmBHNs= -----END CERTIFICATE-----Generated at Sun Mar 29 03:31:51 2026 by rpki-client