$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa File: 1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa (raw, json) Hash identifier: X9ERY7vv0H6VfFzkZ/4t4X/gy+1irUMj381+FpR4naA= Subject key identifier: 1D:D1:58:99:BD:D5:BD:76:69:5F:A6:BF:D5:D4:96:DA:62:31:63:6D Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584D39CF8BED1200EA22E628B940 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 35860 IP address blocks: 142.248.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:8b:ed:12:00:ea:22:e6:28:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=d3d145d8-0d6e-439d-a5f0-096a8b37d834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1f:e2:b6:66:a2:1c:55:c4:02:0e:4a:35:c5: 36:c4:92:64:e5:5b:63:42:31:f2:e9:c2:50:d1:f4: fa:cf:3d:46:0b:59:47:43:cc:ae:95:5a:f1:bf:d7: bb:62:e3:9b:7e:57:7a:c0:19:bd:90:20:b7:9e:04: 9f:63:74:05:47:75:5d:1a:dc:77:3e:49:73:ac:c9: 2b:be:ad:61:b1:a3:34:a8:b0:60:fe:df:e4:86:9d: 2d:48:55:07:1a:54:ed:be:56:9d:3e:ec:00:b2:63: e7:e0:f2:3a:86:6a:a0:d4:eb:9e:ab:03:f8:cd:f8: 44:17:d1:be:c1:6d:f9:ef:b8:df:d9:43:74:4a:75: 81:bb:84:20:cb:31:5e:5f:83:86:d3:6a:a0:36:86: 55:85:22:5b:42:fb:96:66:d7:b3:72:63:6c:7e:c2: 74:d8:48:f5:ec:63:77:8a:3f:8b:cf:21:b3:64:d6: c2:77:6e:64:c1:d1:ab:58:fa:99:d2:23:da:76:5c: 3c:bd:e8:6c:b3:90:cb:bb:3e:fb:2b:d2:ea:6a:6b: 63:98:6f:ad:5f:3b:4b:d1:5e:13:33:d1:5f:74:7c: e2:4e:79:e7:0b:22:9c:f2:41:de:18:f5:03:b2:cb: 6a:23:e9:7a:e7:74:d7:9b:27:46:7f:d3:1b:e2:8e: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D1:58:99:BD:D5:BD:76:69:5F:A6:BF:D5:D4:96:DA:62:31:63:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 142.248.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d7:fa:e3:05:74:bd:ca:80:f8:c9:98:be:f2:25:41:4f:20: 25:1a:e7:24:e0:3a:f8:12:a5:6d:e7:a2:79:a1:a0:6e:dd:b1: ec:54:e7:5b:76:35:87:fe:42:c3:17:2c:68:c9:53:b9:dd:e3: ef:a7:0d:2a:e8:18:23:1f:3a:ba:84:5b:8b:f2:cb:51:b0:06: 2c:30:1c:e7:29:64:15:6a:bd:a5:57:c7:f8:46:f0:80:65:a5: 3b:05:54:17:32:f5:c2:20:3e:3f:9e:73:d2:12:32:2c:07:a4: 5b:0b:c3:1a:0e:75:2e:0a:ba:c5:10:06:bb:09:c6:3a:3e:3d: 26:5e:cd:44:0b:d2:ee:7c:b7:01:c1:49:44:2c:d6:0a:4e:b1: 80:3a:27:67:c5:ad:7f:dc:6d:f1:f3:cc:85:ce:ea:06:1c:3e: 91:be:fe:4a:0a:e7:ba:61:bb:de:06:80:ea:66:d7:c2:0a:8b: 74:49:11:58:94:35:25:b1:92:be:53:eb:69:1d:19:94:d3:d8: 0f:d8:70:03:45:13:2c:3c:fc:7b:72:fe:68:de:b6:9f:ed:a2: df:24:48:62:2d:04:16:f4:ee:12:ab:e4:a9:1f:08:3b:3b:d4: 97:16:f7:11:a6:8a:b4:c0:3c:88:4a:5e:96:c5:55:bb:d6:c7: e4:fd:c9:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4vtEgDqIuYouUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk ZDNkMTQ1ZDgtMGQ2ZS00MzlkLWE1ZjAtMDk2YThiMzdkODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB/itmaiHFXEAg5KNcU2xJJk5VtjQjHy6cJQ 0fT6zz1GC1lHQ8yulVrxv9e7YuObfld6wBm9kCC3ngSfY3QFR3VdGtx3PklzrMkr vq1hsaM0qLBg/t/khp0tSFUHGlTtvladPuwAsmPn4PI6hmqg1OueqwP4zfhEF9G+ wW3577jf2UN0SnWBu4QgyzFeX4OG02qgNoZVhSJbQvuWZtezcmNsfsJ02Ej17GN3 ij+LzyGzZNbCd25kwdGrWPqZ0iPadlw8vehss5DLuz77K9LqamtjmG+tXztL0V4T M9FfdHziTnnnCyKc8kHeGPUDsstqI+l653TXmydGf9Mb4o7ysQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3RWJm91b12aV+mv9XUltpiMWNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvMWE0NTkxMGItNWY0NC0z MGNlLTlkZmEtOWZkYzFmZTg2Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbX+uMFdL3KgPjJmL7yJUFPICUa5yTgOvgSpW3nonmhoG7dsexU51t2 NYf+QsMXLGjJU7nd4++nDSroGCMfOrqEW4vyy1GwBiwwHOcpZBVqvaVXx/hG8IBl pTsFVBcy9cIgPj+ec9ISMiwHpFsLwxoOdS4KusUQBrsJxjo+PSZezUQL0u58twHB SUQs1gpOsYA6J2fFrX/cbfHzzIXO6gYcPpG+/koK57phu94GgOpm18IKi3RJEViU NSWxkr5T62kdGZTT2A/YcANFEyw8/Hty/mjetp/tot8kSGItBBb07hKr5KkfCDs7 1JcW9xGmirTAPIhKXpbFVbvWx+T9yfM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:15 2026 by rpki-client