$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa File: 7fe96268-b787-3529-9f78-3e3d0ced15ee.roa (raw, json) Hash identifier: HcWFE/HclXesAvZtv6Xe9vso1qqCLMazhFwsb1HDnEU= Subject key identifier: 95:BA:34:1E:9E:42:D3:95:89:F5:17:AA:A4:50:80:A4:AB:24:98:4A Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584ED001F1C1BD8762FDFFAB6280 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 13325 IP address blocks: 204.25.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f1:c1:bd:87:62:fd:ff:ab:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=5e9981e6-c984-486c-a010-4f97fda7ae04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:23:e5:06:b7:7f:e2:9c:7b:0c:a4:14:02: 8f:25:be:97:a9:7e:b1:2b:3a:5e:6a:9f:9c:a8:d5: 3e:31:c3:0d:27:e0:b5:18:22:76:9c:d5:b0:49:7e: 1b:c4:7a:cd:3c:39:ca:7e:ec:c2:ff:ad:73:0e:63: b1:59:fd:da:c4:9b:a6:1e:0f:f6:05:ae:1b:45:47: df:00:78:3a:18:9c:59:13:19:d1:14:6c:79:29:b4: cf:59:74:55:22:ad:7a:e0:6d:a2:13:9c:96:b4:02: 41:cb:51:b7:0b:18:7c:28:59:06:34:c2:91:e3:44: 6e:0e:15:07:81:20:08:67:e3:ff:9f:f6:6f:00:9e: 9e:d2:68:e3:ce:9d:45:90:7c:42:c2:b3:87:a5:74: c4:aa:e3:94:c9:28:1d:01:e2:e7:60:ad:4d:6b:c3: f6:de:08:4d:e2:d1:dc:aa:17:68:40:13:5a:e1:6b: 70:0f:f1:f0:6f:e6:be:5b:8b:d9:ac:b9:96:c5:44: 5f:1d:a5:aa:d9:75:1c:3e:f1:0b:1d:fa:2c:31:60: af:59:25:1d:c4:92:cc:44:3e:01:a7:93:c3:d6:2e: 85:27:28:3c:3a:57:c8:47:78:0e:1c:a5:ef:eb:53: c2:78:7f:c4:db:36:8c:96:75:20:4e:96:5b:f3:23: 29:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BA:34:1E:9E:42:D3:95:89:F5:17:AA:A4:50:80:A4:AB:24:98:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:bb:ff:54:df:02:38:b2:1b:c0:6a:58:4f:70:c8:f7:8c:65: 25:e2:6e:fd:3c:8c:99:5b:43:f8:f8:04:7b:a9:b4:34:6c:3a: 8b:27:db:43:f6:6e:5e:f7:57:20:4b:0c:aa:da:8d:0b:40:00: d1:9d:4b:24:41:be:83:99:49:26:21:b8:27:87:99:ee:2c:95: 52:8c:d2:40:36:20:1b:42:e4:1c:1a:dc:b8:0f:c9:35:ea:66: b7:f2:7c:56:e0:62:ad:a4:3e:a9:c1:29:d5:62:e8:3f:ee:71: 98:33:8e:cb:44:66:5e:ac:d2:70:79:4e:3c:44:1b:ab:15:b6: 98:5b:8f:c1:38:b7:f9:30:9c:96:1d:b8:93:c4:f2:9d:b8:e3: df:1c:53:5e:40:90:17:86:57:8c:7e:9d:81:19:8d:8d:db:d0: 99:dd:92:af:bf:b4:da:66:d2:22:97:f8:4d:a6:8f:dd:3d:02: 79:f8:84:3f:03:a0:6a:fc:a6:4f:02:02:7f:5b:ec:e8:2c:b9: 07:20:0b:88:ae:ab:3c:c3:0d:06:58:2c:b5:c2:ae:f7:fe:31: 35:1d:09:ea:fb:68:31:69:b8:7b:f1:f5:68:96:ba:11:13:15: 84:96:38:f5:25:8a:b0:7d:5e:42:2c:a6:09:ea:25:5c:c7:15: c5:ce:0c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfHBvYdi/f+rYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NWU5OTgxZTYtYzk4NC00ODZjLWEwMTAtNGY5N2ZkYTdhZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQkj5Qa3f+KcewykFAKPJb6XqX6xKzpeap+c qNU+McMNJ+C1GCJ2nNWwSX4bxHrNPDnKfuzC/61zDmOxWf3axJumHg/2Ba4bRUff AHg6GJxZExnRFGx5KbTPWXRVIq164G2iE5yWtAJBy1G3Cxh8KFkGNMKR40RuDhUH gSAIZ+P/n/ZvAJ6e0mjjzp1FkHxCwrOHpXTEquOUySgdAeLnYK1Na8P23ghN4tHc qhdoQBNa4WtwD/Hwb+a+W4vZrLmWxURfHaWq2XUcPvELHfosMWCvWSUdxJLMRD4B p5PD1i6FJyg8OlfIR3gOHKXv61PCeH/E2zaMlnUgTpZb8yMp/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW6NB6eQtOVifUXqqRQgKSrJJhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvN2ZlOTYyNjgtYjc4Ny0z NTI5LTlmNzgtM2UzZDBjZWQxNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG7/1TfAjiyG8BqWE9wyPeMZSXibv08jJlbQ/j4BHuptDRsOosn20P2 bl73VyBLDKrajQtAANGdSyRBvoOZSSYhuCeHme4slVKM0kA2IBtC5Bwa3LgPyTXq ZrfyfFbgYq2kPqnBKdVi6D/ucZgzjstEZl6s0nB5TjxEG6sVtphbj8E4t/kwnJYd uJPE8p24498cU15AkBeGV4x+nYEZjY3b0Jndkq+/tNpm0iKX+E2mj909Ann4hD8D oGr8pk8CAn9b7OgsuQcgC4iuqzzDDQZYLLXCrvf+MTUdCer7aDFpuHvx9WiWuhET FYSWOPUlirB9XkIspgnqJVzHFcXODIc= -----END CERTIFICATE-----Generated at Sat Sep 19 02:59:30 2026 by rpki-client