$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa File: d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa (raw, json) Hash identifier: 8Gm5xXscFLMIZpQHdO+e9k5+nHEDX6t6DQ17GamcDRs= Subject key identifier: CB:1F:FD:1A:6B:C1:7F:B2:3A:D2:C5:D0:13:32:D2:D2:1B:2F:57:DE Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584E2D9F245265A0675BB7B44940 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 13325 IP address blocks: 199.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:24:52:65:a0:67:5b:b7:b4:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=afdd71ab-2a24-4cf6-b073-8d9dbeb144ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:68:4c:f0:07:60:ae:72:15:f6:7a:28:2b: 52:df:2e:77:d4:53:6b:ab:d2:74:66:50:59:fe:c3: b1:25:ac:50:52:89:c2:89:82:69:ec:f8:fd:06:cb: df:3e:3b:04:cc:cc:db:0f:b1:cb:1c:ca:cb:ae:16: 84:2e:c7:df:27:20:62:db:d5:9b:e4:a4:05:fc:4c: c7:49:2c:98:7e:04:c2:e0:57:97:d2:9b:7d:b3:4a: 05:07:90:50:ba:99:f8:61:23:32:2d:c3:6a:da:9b: 01:c9:a0:f3:8f:27:cc:19:b5:7f:b1:7a:ea:09:ef: f8:3b:2c:1d:a3:b3:59:65:de:d7:f3:80:9c:cb:cf: e7:e2:90:ef:26:00:ec:98:02:fc:30:d7:60:2c:6b: 85:bd:77:18:d4:c4:96:a7:fa:90:7a:a3:7d:8d:b0: 6f:e5:98:c8:08:6b:e2:39:28:8f:ad:ef:f0:91:90: fb:39:f1:0d:b5:27:a4:93:a0:cc:10:19:80:94:cb: 22:12:e4:62:b2:00:b4:a0:02:4d:78:ba:23:7e:35: aa:1c:4c:07:fa:20:d5:f3:53:e2:bd:25:e3:0b:fc: 6b:f2:25:e7:56:fc:84:00:cc:2a:19:e8:37:42:d1: 5b:5c:ed:07:c5:48:fe:51:d6:92:bc:16:0e:e7:7e: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1F:FD:1A:6B:C1:7F:B2:3A:D2:C5:D0:13:32:D2:D2:1B:2F:57:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 199.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:22:3d:91:9c:b8:10:7f:0a:15:f4:0b:a9:e9:20:37:e0:40: 0f:1d:fa:df:c6:72:af:3b:88:58:3d:59:df:df:86:78:3d:99: b9:4f:12:d1:53:89:b5:5e:21:a7:2f:c8:82:e0:5b:a3:46:17: e1:6f:92:f9:d1:ed:54:b1:d6:e8:7c:5e:be:16:2a:62:82:b2: 44:24:9f:03:e8:a5:35:32:f4:ae:2a:02:4c:dc:10:14:b7:9f: 66:94:c6:2a:b2:fe:89:0f:2c:f3:cf:2b:29:da:65:63:d9:77: bd:c9:0e:5f:73:c0:ec:81:48:42:f3:cf:12:61:10:42:53:75: f1:8e:8a:6f:e8:f1:43:e1:26:fb:60:65:7d:2d:8b:37:f9:ad: 71:15:d3:8f:24:b2:e6:db:da:5a:23:96:2d:7e:6e:63:f2:8f: 54:5a:cc:35:5b:76:48:62:f8:07:59:09:09:61:2a:b0:11:e0: 15:65:af:f3:ad:ee:d4:0c:90:20:8f:5f:42:70:d5:a3:9a:12: 2a:93:e9:2e:b6:43:8d:d5:8f:7c:26:78:bb:7a:2a:a4:5f:42: 56:11:41:d1:99:fe:2f:26:10:00:99:2f:21:4c:c8:ba:9a:6c: 3e:78:6d:25:28:ba:f7:fc:01:6a:86:5c:e0:d5:2f:4c:ea:40: 8a:34:cc:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyRSZaBnW7e0SUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk YWZkZDcxYWItMmEyNC00Y2Y2LWIwNzMtOGQ5ZGJlYjE0NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUZoTPAHYK5yFfZ6KCtS3y531FNrq9J0ZlBZ /sOxJaxQUonCiYJp7Pj9BsvfPjsEzMzbD7HLHMrLrhaELsffJyBi29Wb5KQF/EzH SSyYfgTC4FeX0pt9s0oFB5BQupn4YSMyLcNq2psByaDzjyfMGbV/sXrqCe/4Oywd o7NZZd7X84Ccy8/n4pDvJgDsmAL8MNdgLGuFvXcY1MSWp/qQeqN9jbBv5ZjICGvi OSiPre/wkZD7OfENtSekk6DMEBmAlMsiEuRisgC0oAJNeLojfjWqHEwH+iDV81Pi vSXjC/xr8iXnVvyEAMwqGeg3QtFbXO0HxUj+UdaSvBYO534sbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsf/RprwX+yOtLF0BMy0tIbL1feMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvZDRiOGZiZjgtOTFjNC0z M2YzLWEwZDEtZTRiMWU4MTVkZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAciPZGcuBB/ChX0C6npIDfgQA8d+t/Gcq87iFg9Wd/fhng9mblPEtFT ibVeIacvyILgW6NGF+FvkvnR7VSx1uh8Xr4WKmKCskQknwPopTUy9K4qAkzcEBS3 n2aUxiqy/okPLPPPKynaZWPZd73JDl9zwOyBSELzzxJhEEJTdfGOim/o8UPhJvtg ZX0tizf5rXEV048ksubb2lojli1+bmPyj1RazDVbdkhi+AdZCQlhKrAR4BVlr/Ot 7tQMkCCPX0Jw1aOaEiqT6S62Q43Vj3wmeLt6KqRfQlYRQdGZ/i8mEACZLyFMyLqa bD54bSUouvf8AWqGXODVL0zqQIo0zAM= -----END CERTIFICATE-----Generated at Tue Jul 21 16:49:50 2026 by rpki-client