$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa File: 3aa15edc-b7c6-318d-9de6-46d235ff9320.roa (raw, json) Hash identifier: gkQIInsymbcibceMgB09fEMzZP1r1RJwY/BHF2bloCI= Subject key identifier: 12:96:C6:A0:9A:E2:30:01:A7:8A:E4:AC:79:34:AF:B3:39:6A:47:49 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584E2D9F1C6B4C0A09A4BF5CA700 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 13325 IP address blocks: 136.181.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:1c:6b:4c:0a:09:a4:bf:5c:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=2340951b-b79e-4be0-a442-cf81a4458f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:e5:13:52:ac:c1:94:6d:07:7e:f3:e7:6d: 0d:a3:51:ec:42:33:d6:a1:33:bf:84:28:62:0f:59: 55:c5:02:ae:b1:7c:5b:52:dd:1d:19:d9:80:86:1e: 07:30:0e:59:57:ea:cb:c5:b7:3e:a8:bd:72:81:38: 6e:ef:32:31:7f:51:c9:8e:08:0c:35:9b:27:86:09: a3:02:64:f4:83:22:de:ef:c6:eb:c1:22:41:12:83: 72:3d:e0:80:ba:be:36:c2:f7:38:6b:36:72:2b:a9: 5c:b0:ef:3d:dd:ba:c7:42:69:88:62:35:c5:ad:86: 0d:06:d5:a6:5c:43:b5:fb:ce:9d:4b:7e:c9:e5:10: 8d:19:73:0c:e3:e0:15:01:c1:16:37:0c:25:c5:4c: 71:d1:62:2e:f7:f4:b7:0f:69:28:93:55:3e:67:48: 78:be:50:85:5f:c6:6c:05:32:eb:3a:70:f4:5c:8b: cf:bc:79:ac:41:6b:a9:f7:2a:63:60:97:1b:66:ff: 8a:7f:5b:e2:3b:51:ce:64:d4:f5:40:0c:08:19:05: 16:96:c3:93:42:76:5f:7b:f9:2e:30:34:a4:e8:80: ff:63:b3:3a:56:42:bf:97:90:b0:70:58:96:ee:e8: 84:4e:58:32:ec:1b:34:73:58:7f:60:4b:1d:af:a5: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:96:C6:A0:9A:E2:30:01:A7:8A:E4:AC:79:34:AF:B3:39:6A:47:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 136.181.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:79:36:e1:53:e5:37:60:38:02:8c:3a:a7:4c:37:e9:16:dc: 62:d8:45:16:f0:03:e5:85:90:0f:07:d2:39:24:cd:8a:06:97: aa:cf:48:05:bf:65:bc:eb:67:eb:b1:21:a6:67:ac:44:73:f6: 8d:57:54:fc:b8:c6:c0:db:bb:1f:8a:b8:ae:bc:a4:89:1c:b6: be:56:d1:2c:d4:33:65:38:e3:c5:a1:a6:a6:af:d1:4d:84:37: ac:a0:44:81:bb:17:88:a4:53:36:c2:bb:99:0e:e0:79:a8:13: 08:bf:81:af:b6:ba:1d:76:70:1f:3c:9e:d9:1e:d0:e4:02:e8: 9b:c8:c5:d1:1d:48:87:c4:3b:a3:cb:c7:c7:64:d2:2f:2f:62: 33:80:fb:9e:27:ec:65:79:07:b5:a8:87:32:f9:23:12:d6:65: a7:06:51:10:d2:e2:7a:14:d4:69:e9:59:07:e2:81:b5:30:55: ce:7d:62:78:a6:2d:72:f7:82:39:d4:fe:24:7a:0f:e6:56:e7: 48:df:8a:5a:51:f3:5e:9e:f6:f1:60:bc:32:51:0a:b4:37:a8: d7:ee:75:89:09:a0:a0:fe:b5:da:31:b1:b4:4d:da:b1:8d:83: ed:95:1d:5f:05:29:bd:5a:ed:63:d9:da:48:c3:7e:af:98:4c: 18:c9:3a:02 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4tnxxrTAoJpL9cpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MjM0MDk1MWItYjc5ZS00YmUwLWE0NDItY2Y4MWE0NDU4ZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTXlE1KswZRtB37z520No1HsQjPWoTO/hChi D1lVxQKusXxbUt0dGdmAhh4HMA5ZV+rLxbc+qL1ygThu7zIxf1HJjggMNZsnhgmj AmT0gyLe78brwSJBEoNyPeCAur42wvc4azZyK6lcsO893brHQmmIYjXFrYYNBtWm XEO1+86dS37J5RCNGXMM4+AVAcEWNwwlxUxx0WIu9/S3D2kok1U+Z0h4vlCFX8Zs BTLrOnD0XIvPvHmsQWup9ypjYJcbZv+Kf1viO1HOZNT1QAwIGQUWlsOTQnZfe/ku MDSk6ID/Y7M6VkK/l5CwcFiW7uiETlgy7Bs0c1h/YEsdr6VrLwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBKWxqCa4jABp4rkrHk0r7M5akdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvM2FhMTVlZGMtYjdjNi0z MThkLTlkZTYtNDZkMjM1ZmY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiLUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOXk24VPlN2A4Aow6p0w36RbcYthFFvAD5YWQDwfSOSTNigaXqs9IBb9l vOtn67EhpmesRHP2jVdU/LjGwNu7H4q4rrykiRy2vlbRLNQzZTjjxaGmpq/RTYQ3 rKBEgbsXiKRTNsK7mQ7geagTCL+Br7a6HXZwHzye2R7Q5ALom8jF0R1Ih8Q7o8vH x2TSLy9iM4D7nifsZXkHtaiHMvkjEtZlpwZRENLiehTUaelZB+KBtTBVzn1ieKYt cveCOdT+JHoP5lbnSN+KWlHzXp728WC8MlEKtDeo1+51iQmgoP612jGxtE3asY2D 7ZUdXwUpvVrtY9naSMN+r5hMGMk6Ag== -----END CERTIFICATE-----Generated at Tue Jul 21 16:50:31 2026 by rpki-client