$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa File: 866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa (raw, json) Hash identifier: tH3DTOh2bjUgP1RcMMjgQvYkK43YmKLr2G/cxU9sW0M= Subject key identifier: 5D:5B:77:3C:2A:75:08:E6:AA:A8:34:F3:07:6A:74:8F:95:38:F8:67 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584E2D9F2475A19B5155BDF73A40 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 13325 IP address blocks: 204.25.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:24:75:a1:9b:51:55:bd:f7:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=4cd5941c-4e48-4459-bf9f-4f128dcc1399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:d1:a1:d2:ee:b3:a3:ae:53:33:d8:91:a7: 00:6d:63:01:1c:d3:e1:c9:a2:ab:72:1c:26:6d:89: 79:6b:14:e7:f7:f6:4a:20:fe:aa:d7:5d:b4:65:6f: 47:d8:ae:95:c6:53:9c:54:b5:0e:4a:8c:44:c2:7a: 59:d7:08:61:c8:ce:94:3c:f8:53:1b:6d:58:cd:6a: ff:a7:85:76:12:e6:3e:5b:ab:73:68:d4:07:ae:66: 3f:ab:29:b5:14:5b:8a:90:8c:8b:82:fe:17:d7:f9: 31:a0:9a:03:82:dd:59:25:14:79:c4:f2:36:61:20: 1d:35:1e:ce:4e:92:bf:02:64:f0:66:2b:68:31:20: 8d:95:59:ec:29:02:d4:20:14:69:33:4f:8a:5d:bc: 64:2a:b0:58:2a:97:f3:0f:72:37:91:a7:1f:56:1b: b2:59:13:be:fa:6f:c7:5d:c1:54:a1:15:8e:27:fe: da:7c:48:c9:2e:f6:8d:fd:47:4e:7f:dd:2c:f9:80: ae:54:36:e0:37:04:06:5e:93:56:ee:02:66:0a:5c: 8c:71:27:73:c3:86:d4:d4:6b:ce:01:1d:2c:49:ac: cd:e0:6d:dc:f8:99:33:9b:ae:9a:9e:48:41:e3:1c: 38:a2:ec:77:2f:e9:42:12:1d:cc:67:35:a4:35:71: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5B:77:3C:2A:75:08:E6:AA:A8:34:F3:07:6A:74:8F:95:38:F8:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/866da3e0-0d2f-39e5-868b-2f60e4ff9061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:12:cc:62:d6:3a:45:b3:38:14:94:58:2b:6c:02:9f:4e:51: bf:54:5a:65:3e:62:b8:1d:b4:82:cc:c7:ff:df:49:6e:59:f6: cf:40:80:22:ab:71:18:77:a7:de:16:80:b1:9f:8e:4c:a3:1e: 63:49:06:5c:fc:35:d0:0e:88:f4:1d:16:11:cc:38:5c:47:87: 36:ce:d3:fb:f4:db:9f:00:83:43:ba:27:70:15:dc:ad:41:9a: 4d:61:86:9a:13:a1:94:d0:80:6f:10:e5:1f:54:26:2a:c7:b6: d0:ef:e0:20:9a:40:4a:0c:fa:a6:73:80:75:53:98:2b:17:9e: 87:05:13:d0:0b:d5:24:70:10:02:84:9b:7a:5c:b6:e4:e3:30: ca:0d:c7:d0:25:be:a6:12:29:c8:db:c4:3b:43:4b:82:7c:74: f3:3a:86:ad:00:31:da:30:20:b5:79:ff:c2:b5:be:4c:c1:5b: bd:44:ab:95:1a:97:a8:38:1d:66:b4:2c:47:42:68:d3:80:27: 9c:7e:dd:7f:e9:83:a9:28:d4:ae:ab:cf:71:53:1d:a5:0f:1e: 15:50:01:d2:e7:e8:2d:79:28:c0:46:6b:2d:e7:9a:74:5b:e1: b0:b8:32:1c:18:a5:1e:1a:3a:20:6a:19:e8:80:81:5b:ae:cd: 98:97:4d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyR1oZtRVb33OkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk NGNkNTk0MWMtNGU0OC00NDU5LWJmOWYtNGYxMjhkY2MxMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2jRodLus6OuUzPYkacAbWMBHNPhyaKrchwm bYl5axTn9/ZKIP6q1120ZW9H2K6VxlOcVLUOSoxEwnpZ1whhyM6UPPhTG21YzWr/ p4V2EuY+W6tzaNQHrmY/qym1FFuKkIyLgv4X1/kxoJoDgt1ZJRR5xPI2YSAdNR7O TpK/AmTwZitoMSCNlVnsKQLUIBRpM0+KXbxkKrBYKpfzD3I3kacfVhuyWRO++m/H XcFUoRWOJ/7afEjJLvaN/UdOf90s+YCuVDbgNwQGXpNW7gJmClyMcSdzw4bU1GvO AR0sSazN4G3c+Jkzm66ankhB4xw4oux3L+lCEh3MZzWkNXEeiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1bdzwqdQjmqqg08wdqdI+VOPhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvODY2ZGEzZTAtMGQyZi0z OWU1LTg2OGItMmY2MGU0ZmY5MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYSzGLWOkWzOBSUWCtsAp9OUb9UWmU+YrgdtILMx//fSW5Z9s9AgCKr cRh3p94WgLGfjkyjHmNJBlz8NdAOiPQdFhHMOFxHhzbO0/v0258Ag0O6J3AV3K1B mk1hhpoToZTQgG8Q5R9UJirHttDv4CCaQEoM+qZzgHVTmCsXnocFE9AL1SRwEAKE m3pctuTjMMoNx9AlvqYSKcjbxDtDS4J8dPM6hq0AMdowILV5/8K1vkzBW71Eq5Ua l6g4HWa0LEdCaNOAJ5x+3X/pg6ko1K6rz3FTHaUPHhVQAdLn6C15KMBGay3nmnRb 4bC4MhwYpR4aOiBqGeiAgVuuzZiXTQk= -----END CERTIFICATE-----Generated at Tue Jul 21 16:49:54 2026 by rpki-client