$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa File: 866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa (raw, json) Hash identifier: QmgxP5sC8gn0mz/p2ng2MtUQbGLKz4SaZobas0k0M2k= Subject key identifier: 7C:CA:3E:94:F7:09:BB:8D:3C:B8:95:EC:C5:DC:01:F9:20:42:E8:39 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584ED001F1B53FE7667D9E363B40 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 13325 IP address blocks: 204.25.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f1:b5:3f:e7:66:7d:9e:36:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=4340c902-2261-400b-a647-e61a462b8c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:25:8a:45:3d:b3:d6:b2:b7:46:a6:44:0d:ab: 92:42:56:c3:2b:14:b3:8b:69:9e:87:86:26:64:67: 49:5a:1c:b2:bf:bb:6c:3e:75:35:44:ae:fd:f2:28: da:57:8d:6b:35:9c:36:c6:31:d9:7c:55:6c:7c:20: dc:8d:ce:de:29:14:18:16:3e:7a:8f:f4:29:24:29: bd:f0:d3:94:2d:15:a7:3f:8d:7c:e4:a6:8c:f0:ac: 92:dd:a8:fc:80:a8:79:f7:7b:da:4d:ed:34:b7:fa: 95:59:f6:19:60:88:d2:95:3b:c0:1d:77:6d:4c:a1: 0a:db:2e:28:39:09:6e:13:99:7a:e3:ce:36:64:7a: 11:6b:09:f3:76:bd:a5:65:01:d5:83:b9:fd:1f:4f: 9a:a6:48:13:65:cd:a8:be:7a:c8:82:ea:dd:96:f8: 28:f7:53:7b:e3:f0:d3:e0:25:92:e8:f8:3f:f0:fe: be:7c:8a:66:ca:2a:22:fa:c0:59:69:06:e0:76:6e: 0c:90:69:e5:1e:1a:3b:3c:59:4d:f4:54:e7:c4:87: 81:be:32:c3:18:79:7d:65:de:94:9c:ac:26:89:6e: 5c:3b:04:6e:2c:28:ef:96:55:4b:c8:58:e9:3c:7b: 97:fb:12:fa:da:3e:7a:37:e9:12:5b:6b:a7:20:5f: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:3E:94:F7:09:BB:8D:3C:B8:95:EC:C5:DC:01:F9:20:42:E8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:69:79:63:4d:83:20:f6:0c:dc:90:04:f3:18:db:b2:36:d2: 5f:b9:fb:21:fd:09:a9:9d:0a:b3:08:c9:9d:6e:85:c3:48:d4: a1:85:55:9b:a0:3f:13:95:c2:32:06:7d:53:b8:0a:fa:2f:0b: ce:ec:2a:98:c5:8b:51:b8:14:42:65:61:89:77:7e:13:c2:07: 1d:0b:ed:3f:eb:8a:4d:d0:c3:1a:28:c5:5b:04:10:f4:48:86: 7a:e8:15:b9:e4:49:86:21:d4:b0:21:f2:28:ba:80:70:0d:e9: 9b:82:b4:0e:39:03:88:62:a6:c6:a6:db:53:c3:62:8c:cf:9b: 3d:32:cf:9c:33:bb:a6:f6:12:91:c2:b0:ed:99:1a:e2:38:e4: 43:39:17:74:72:6f:83:15:1e:32:7c:56:e3:c0:ea:b9:29:c2: d8:ff:38:dd:22:c1:d3:50:1b:07:e6:02:08:c6:2a:06:ff:37: 9b:80:1e:4e:89:6c:58:7e:37:37:0d:e0:14:94:be:b2:47:8d: 68:98:15:74:13:e7:26:1b:5b:64:50:d8:0f:72:91:42:d0:70: 7f:e4:8f:08:f9:a2:49:47:38:03:21:b2:1e:d2:fd:e9:e4:ef: f2:d4:1f:52:13:28:3b:63:ef:be:a9:05:6a:5a:79:36:da:90: 29:e6:e9:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfG1P+dmfZ42O0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NDM0MGM5MDItMjI2MS00MDBiLWE2NDctZTYxYTQ2MmI4YzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCWKRT2z1rK3RqZEDauSQlbDKxSzi2meh4Ym ZGdJWhyyv7tsPnU1RK798ijaV41rNZw2xjHZfFVsfCDcjc7eKRQYFj56j/QpJCm9 8NOULRWnP4185KaM8KyS3aj8gKh593vaTe00t/qVWfYZYIjSlTvAHXdtTKEK2y4o OQluE5l64842ZHoRawnzdr2lZQHVg7n9H0+apkgTZc2ovnrIgurdlvgo91N74/DT 4CWS6Pg/8P6+fIpmyioi+sBZaQbgdm4MkGnlHho7PFlN9FTnxIeBvjLDGHl9Zd6U nKwmiW5cOwRuLCjvllVLyFjpPHuX+xL62j56N+kSW2unIF9G+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzKPpT3CbuNPLiV7MXcAfkgQug5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvODY2ZGEzZTAtMGQyZi0z OWU1LTg2OGItMmY2MGU0ZmY5MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhpeWNNgyD2DNyQBPMY27I20l+5+yH9CamdCrMIyZ1uhcNI1KGFVZug PxOVwjIGfVO4CvovC87sKpjFi1G4FEJlYYl3fhPCBx0L7T/rik3QwxooxVsEEPRI hnroFbnkSYYh1LAh8ii6gHAN6ZuCtA45A4hipsam21PDYozPmz0yz5wzu6b2EpHC sO2ZGuI45EM5F3Ryb4MVHjJ8VuPA6rkpwtj/ON0iwdNQGwfmAgjGKgb/N5uAHk6J bFh+NzcN4BSUvrJHjWiYFXQT5yYbW2RQ2A9ykULQcH/kjwj5oklHOAMhsh7S/enk 7/LUH1ITKDtj776pBWpaeTbakCnm6TI= -----END CERTIFICATE-----Generated at Sat Sep 19 02:58:51 2026 by rpki-client