$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa File: 51c93d61-da59-3492-9aa3-1e6063528f1f.roa (raw, json) Hash identifier: o2gxP1L2JJMMpqTO2GvzJxWNYjYDZjeoDR5QWCcBdg4= Subject key identifier: 32:7A:02:DC:0A:5F:C7:CC:28:A3:7A:F8:0B:83:75:E0:BB:F4:91:36 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584E2D9F1C77BC9F965720D33040 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 13325 IP address blocks: 148.149.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:1c:77:bc:9f:96:57:20:d3:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=f50ba78d-c271-45a4-adbd-733a5dc120b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:05:c2:54:f7:ba:cc:d6:6a:5d:a1:b8:37: 4d:f7:32:1e:6c:5d:a5:6c:17:f1:fe:2d:79:31:7f: e1:2c:dc:97:a4:68:95:ce:f8:5b:06:fd:58:97:c3: 02:c7:4a:32:19:7d:15:51:dd:66:83:ff:45:9a:72: c3:03:f2:8b:f1:0c:57:5e:81:55:96:80:48:86:c7: bd:31:64:79:1b:a2:27:c3:dc:e4:3a:6c:17:4a:08: 4b:37:5f:89:fb:61:8e:fb:54:5d:af:ca:a9:03:af: 5f:27:7d:88:b3:31:7a:db:31:fe:46:03:53:67:fe: b8:7a:71:55:fd:00:51:dc:71:3a:d7:09:1c:72:81: 6c:03:52:da:ec:d7:c7:17:df:c4:4c:c8:e1:a8:fd: 6f:97:ee:4b:2e:76:72:25:45:39:52:a8:08:29:32: e3:73:75:dc:3a:6d:62:92:56:50:a4:47:4f:68:47: b3:d5:29:24:66:eb:46:82:44:65:c0:e2:8a:31:23: f8:53:0c:f3:45:5d:1c:d7:08:5e:60:1e:8a:94:9b: 8f:26:cb:ff:ad:f5:30:6f:ff:2a:1d:12:94:84:e0: dd:ac:5a:09:0f:f6:2b:58:6f:71:c8:a4:5d:7d:f3: b0:75:aa:e1:eb:7f:a1:f4:d8:77:8f:e7:6a:ac:df: 8c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7A:02:DC:0A:5F:C7:CC:28:A3:7A:F8:0B:83:75:E0:BB:F4:91:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 148.149.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d7:49:ab:c9:57:57:64:c9:b7:82:6d:39:75:2a:4e:e3:16: ae:be:b3:19:df:f0:c7:c6:34:13:64:da:9e:d2:08:8f:24:e0: 07:0e:bd:5f:54:88:47:5f:df:b5:2b:37:0e:83:f9:07:f8:a0: bb:a6:51:b5:a3:0e:57:64:fb:34:91:ba:7e:2d:d4:5a:a7:07: c0:e0:c8:56:41:bc:eb:46:19:ec:e1:cc:11:95:0f:1b:ce:84: 6a:29:01:af:79:4f:f3:32:39:be:0a:64:53:46:e5:6c:d9:36: 36:4f:ae:77:55:51:64:92:65:5b:93:f4:2b:22:43:77:16:12: 8a:a6:e6:b2:46:5a:1b:0f:10:5d:4a:da:5e:02:a0:af:f3:31: 14:34:c0:36:b9:9e:5e:79:e1:ee:ba:44:1d:73:19:af:16:df: 43:f5:55:ec:da:ff:29:5b:37:81:2a:32:bd:cd:d6:4e:92:54: 96:97:16:02:a4:67:c7:03:fd:04:d1:69:6a:ca:a5:81:bd:14: a7:b0:12:7d:31:13:8b:c2:f7:c7:64:23:fd:79:34:f5:9f:29: 84:35:d5:f6:db:1e:c7:fd:ed:25:c1:89:a0:42:2b:dd:ff:9d: f2:47:46:43:94:20:5f:a3:d1:5b:5e:3a:68:9c:9b:b6:3d:5d: 00:1f:e0:4e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4tnxx3vJ+WVyDTMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk ZjUwYmE3OGQtYzI3MS00NWE0LWFkYmQtNzMzYTVkYzEyMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq8FwlT3uszWal2huDdN9zIebF2lbBfx/i15 MX/hLNyXpGiVzvhbBv1Yl8MCx0oyGX0VUd1mg/9FmnLDA/KL8QxXXoFVloBIhse9 MWR5G6Inw9zkOmwXSghLN1+J+2GO+1Rdr8qpA69fJ32IszF62zH+RgNTZ/64enFV /QBR3HE61wkccoFsA1La7NfHF9/ETMjhqP1vl+5LLnZyJUU5UqgIKTLjc3XcOm1i klZQpEdPaEez1SkkZutGgkRlwOKKMSP4UwzzRV0c1wheYB6KlJuPJsv/rfUwb/8q HRKUhODdrFoJD/YrWG9xyKRdffOwdarh63+h9Nh3j+dqrN+MWwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDJ6AtwKX8fMKKN6+AuDdeC79JE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvNTFjOTNkNjEtZGE1OS0z NDkyLTlhYTMtMWU2MDYzNTI4ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlJUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWtdJq8lXV2TJt4JtOXUqTuMWrr6zGd/wx8Y0E2TantIIjyTgBw69X1SI R1/ftSs3DoP5B/igu6ZRtaMOV2T7NJG6fi3UWqcHwODIVkG860YZ7OHMEZUPG86E aikBr3lP8zI5vgpkU0blbNk2Nk+ud1VRZJJlW5P0KyJDdxYSiqbmskZaGw8QXUra XgKgr/MxFDTANrmeXnnh7rpEHXMZrxbfQ/VV7Nr/KVs3gSoyvc3WTpJUlpcWAqRn xwP9BNFpasqlgb0Up7ASfTETi8L3x2Qj/Xk09Z8phDXV9tsex/3tJcGJoEIr3f+d 8kdGQ5QgX6PRW146aJybtj1dAB/gTg== -----END CERTIFICATE-----Generated at Tue Jul 21 16:50:30 2026 by rpki-client