$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa File: d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa (raw, json) Hash identifier: hAtjsVoERx1W3c2/V7+ANoBw8FOIV75F+ZNryVvUeZg= Subject key identifier: 7E:CC:D5:5C:DE:AF:7F:9E:CD:E5:5D:C5:BC:4D:31:31:9F:1D:F6:99 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584ED001F19209607F472ABC2280 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 13325 IP address blocks: 199.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f1:92:09:60:7f:47:2a:bc:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=747ddb1b-58e8-46bc-9cf8-078d948b2f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:fc:84:a7:3c:71:bf:6c:92:4f:b7:f6:6f: 1d:00:f4:13:89:64:2f:fe:91:e5:bb:6c:0f:51:7c: e2:a5:fa:6f:cb:94:29:6b:da:60:a6:4e:d5:09:50: 98:4f:9b:5f:6e:d5:6b:ec:ea:ac:30:d6:3d:43:39: 7a:c9:9c:50:21:d4:8e:4b:15:5d:8e:39:39:3d:b1: 5c:bc:2d:8f:02:d1:5a:a9:be:5f:c0:2f:8f:e7:f3: 29:3d:45:30:8c:fc:a8:bc:83:2a:b7:01:e4:bc:74: 22:9f:cb:60:7b:c5:8e:af:f9:a5:8d:23:59:06:eb: 47:9d:27:6a:44:06:b7:4c:a1:15:e4:3d:20:4c:94: 91:87:25:a1:9f:db:8c:36:6a:47:c9:3f:86:c3:0e: e2:ec:71:b0:51:38:65:4e:e3:47:25:6b:cc:5d:c3: 52:27:65:0d:9c:ba:6e:49:0b:8a:a3:99:34:a7:8f: 5a:46:f1:c5:c1:f2:ba:41:d3:0e:93:89:a5:b2:6e: b6:91:bf:80:09:db:64:3d:5d:69:c8:f0:01:6b:ae: 3e:e0:6e:57:3a:79:db:ba:d7:f0:d5:a8:82:8d:f8: 52:94:b8:33:a5:7c:41:c1:b6:8c:3b:7c:ba:16:ca: 14:2e:9d:fc:a3:f9:c5:5f:31:e0:33:a5:26:08:54: 53:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CC:D5:5C:DE:AF:7F:9E:CD:E5:5D:C5:BC:4D:31:31:9F:1D:F6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 199.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:19:7f:3b:18:2d:eb:3c:10:df:b7:11:ed:3e:83:75:92:95: fd:3a:4c:a8:48:d2:dd:f6:fa:14:16:ab:93:ec:66:ba:7a:51: 8f:36:7e:50:fc:19:4f:e3:68:f4:62:f5:90:5a:01:54:12:e7: 1f:66:42:48:5f:46:4e:90:aa:4e:ed:ec:54:42:7e:0b:b8:5f: d5:b1:be:d4:75:45:a0:ef:05:69:23:53:38:bc:36:d3:a1:61: eb:15:b2:10:9c:a2:f0:77:67:16:99:d0:13:81:0a:8a:56:af: a5:43:6e:01:f3:7d:b1:43:87:43:ac:5b:1a:2c:34:d8:b3:3b: 72:43:b1:62:21:97:fd:49:e1:00:48:ad:6a:33:35:2a:d3:6e: 88:b2:7e:b4:38:ab:84:30:42:a2:a7:60:6f:ab:88:72:0f:48: 3c:ab:e6:43:b6:82:87:02:32:6c:c1:57:38:4c:94:7a:50:45: 66:e4:7c:f4:08:a0:be:ba:fa:d1:77:fd:3d:44:b4:4b:c7:b8: 4a:2e:9a:04:00:50:5e:43:31:bc:4f:ce:99:01:2a:c2:19:62: 78:88:01:46:50:c8:5d:c5:91:88:bc:a0:55:b2:f3:74:02:ca: 54:0d:82:f0:18:8e:dd:d9:e1:65:64:27:f2:18:cd:51:f9:ee: e6:65:2f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfGSCWB/Ryq8IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NzQ3ZGRiMWItNThlOC00NmJjLTljZjgtMDc4ZDk0OGIyZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLn8hKc8cb9skk+39m8dAPQTiWQv/pHlu2wP UXzipfpvy5Qpa9pgpk7VCVCYT5tfbtVr7OqsMNY9Qzl6yZxQIdSOSxVdjjk5PbFc vC2PAtFaqb5fwC+P5/MpPUUwjPyovIMqtwHkvHQin8tge8WOr/mljSNZButHnSdq RAa3TKEV5D0gTJSRhyWhn9uMNmpHyT+Gww7i7HGwUThlTuNHJWvMXcNSJ2UNnLpu SQuKo5k0p49aRvHFwfK6QdMOk4mlsm62kb+ACdtkPV1pyPABa64+4G5XOnnbutfw 1aiCjfhSlLgzpXxBwbaMO3y6FsoULp38o/nFXzHgM6UmCFRTqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7M1Vzer3+ezeVdxbxNMTGfHfaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvZDRiOGZiZjgtOTFjNC0z M2YzLWEwZDEtZTRiMWU4MTVkZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEZfzsYLes8EN+3Ee0+g3WSlf06TKhI0t32+hQWq5PsZrp6UY82flD8 GU/jaPRi9ZBaAVQS5x9mQkhfRk6Qqk7t7FRCfgu4X9WxvtR1RaDvBWkjUzi8NtOh YesVshCcovB3ZxaZ0BOBCopWr6VDbgHzfbFDh0OsWxosNNizO3JDsWIhl/1J4QBI rWozNSrTboiyfrQ4q4QwQqKnYG+riHIPSDyr5kO2gocCMmzBVzhMlHpQRWbkfPQI oL66+tF3/T1EtEvHuEoumgQAUF5DMbxPzpkBKsIZYniIAUZQyF3FkYi8oFWy83QC ylQNgvAYjt3Z4WVkJ/IYzVH57uZlL2s= -----END CERTIFICATE-----Generated at Sat Sep 19 02:58:44 2026 by rpki-client