$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa File: 3c529cbb-9f8d-34c8-9371-e628e7734516.roa (raw, json) Hash identifier: YlTs2oY5oPF3mCHfC5uhQ0mG9T80FQDqR1yu5R1QIC0= Subject key identifier: D4:E1:FA:C9:FB:64:86:9D:06:BD:32:67:DE:5D:CD:4E:FC:93:F4:DA Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584F3E47D79714E45B7778CE3E20 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 35860 IP address blocks: 63.133.208.0/22 maxlen: 22 74.119.52.0/22 maxlen: 22 74.119.52.0/24 maxlen: 24 74.119.53.0/24 maxlen: 24 192.149.254.0/23 maxlen: 23 192.149.254.0/24 maxlen: 24 192.149.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d7:97:14:e4:5b:77:78:ce:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=93317c88-0462-444f-ba15-98fbeb4892b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b6:d9:f6:9c:c0:d8:19:cd:55:88:c9:de:74: fd:02:1e:8b:e1:0b:5c:7d:98:1c:9b:c5:2e:27:cf: 17:cc:d9:6c:cd:ab:a4:4a:63:fc:d7:24:b6:27:ff: 84:9e:9d:5d:25:48:08:a8:66:03:24:b1:ba:fc:18: 69:fd:ff:a5:8a:68:b5:38:9e:6b:5e:94:6c:d7:6d: bf:bf:26:21:a4:30:57:14:8b:c2:25:38:f9:d1:52: cf:9b:83:77:72:8e:63:fe:86:63:b2:ab:dd:ba:86: d2:2e:d1:93:f6:3d:6d:c8:02:39:89:38:ad:4c:1a: 3b:6e:de:91:45:d1:05:c3:b3:39:85:35:6a:b4:6e: 50:fb:9d:39:c0:d1:c4:b0:6e:7d:e7:68:6b:0b:6b: 82:c6:b1:00:3a:d7:7f:8e:90:92:ff:ca:ac:c2:09: 1d:82:e4:18:1b:2e:9f:94:1b:33:6a:75:14:e1:c6: 00:a1:01:7e:f4:8f:a4:f2:fc:51:8f:93:dd:ff:43: 58:f1:78:ce:73:cc:55:89:4c:61:8c:41:0b:4a:e5: 82:b3:01:7b:64:f2:ee:2f:0d:45:fa:16:94:a2:bb: c8:5f:69:7a:73:75:ce:43:f7:e7:72:0a:c2:43:ec: d0:36:87:e9:b3:8b:03:31:01:8e:f3:9c:70:8b:b2: 6c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E1:FA:C9:FB:64:86:9D:06:BD:32:67:DE:5D:CD:4E:FC:93:F4:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/22 74.119.52.0/22 192.149.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:69:b5:4e:98:b4:8c:6c:63:b0:2d:c6:19:48:6e:2d:e4:5c: 07:12:02:7c:3b:3f:fd:3f:1f:90:5e:33:8f:0b:fa:3e:4e:64: 2b:30:80:f6:9a:f8:73:c3:2f:10:cc:97:52:e4:ed:a6:d4:d6: cc:51:fe:ed:56:33:eb:ed:43:0f:ee:36:32:c7:39:6b:32:91: d2:db:6c:cc:75:c1:52:0b:ab:9d:2a:74:72:86:a3:5d:9a:b3: ee:9e:7a:95:44:26:1e:af:27:35:c2:37:8e:40:70:1e:c9:3b: 2c:f8:34:84:69:32:b6:07:e5:49:fc:c6:04:8f:57:6e:9f:c5: f3:08:91:e5:65:a5:61:c3:b7:42:b0:c8:d6:da:d3:7a:11:75: 20:15:a4:98:c0:f0:f6:36:90:3e:28:ef:14:08:07:91:96:11: e8:b8:ab:aa:20:45:c4:bf:8c:be:b6:e1:dd:8a:47:e0:77:92: e0:8c:43:d0:8e:9a:07:ff:42:d4:e8:ab:e9:f0:fb:06:eb:e8: 6c:d8:12:ad:55:ae:c6:d1:9b:e5:b1:1e:08:5f:ed:0d:d7:20: 6a:2f:e7:7b:84:89:11:08:a4:fe:35:90:2c:07:49:00:46:59: 99:38:a6:18:e2:fb:e3:47:2f:9d:14:2e:98:c4:d2:e0:e8:2e: aa:82:1c:03 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8+R9eXFORbd3jOPiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk OTMzMTdjODgtMDQ2Mi00NDRmLWJhMTUtOThmYmViNDg5MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67bZ9pzA2BnNVYjJ3nT9Ah6L4QtcfZgcm8Uu J88XzNlszaukSmP81yS2J/+Enp1dJUgIqGYDJLG6/Bhp/f+limi1OJ5rXpRs122/ vyYhpDBXFIvCJTj50VLPm4N3co5j/oZjsqvduobSLtGT9j1tyAI5iTitTBo7bt6R RdEFw7M5hTVqtG5Q+505wNHEsG5952hrC2uCxrEAOtd/jpCS/8qswgkdguQYGy6f lBszanUU4cYAoQF+9I+k8vxRj5Pd/0NY8XjOc8xViUxhjEELSuWCswF7ZPLuLw1F +haUorvIX2l6c3XOQ/fncgrCQ+zQNofps4sDMQGO85xwi7Js3QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNTh+sn7ZIadBr0yZ95dzU78k/TaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvM2M1MjljYmItOWY4ZC0z NGM4LTkzNzEtZTYyOGU3NzM0NTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCP4XQAwQC Snc0AwQBwJX+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJlptU6YtIxsY7AtxhlIbi3kXAcSAnw7P/0/H5Be M48L+j5OZCswgPaa+HPDLxDMl1Lk7abU1sxR/u1WM+vtQw/uNjLHOWsykdLbbMx1 wVILq50qdHKGo12as+6eepVEJh6vJzXCN45AcB7JOyz4NIRpMrYH5Un8xgSPV26f xfMIkeVlpWHDt0KwyNba03oRdSAVpJjA8PY2kD4o7xQIB5GWEei4q6ogRcS/jL62 4d2KR+B3kuCMQ9COmgf/QtToq+nw+wbr6GzYEq1VrsbRm+WxHghf7Q3XIGov53uE iREIpP41kCwHSQBGWZk4phji++NHL50ULpjE0uDoLqqCHAM= -----END CERTIFICATE-----Generated at Wed Oct 7 04:58:58 2026 by rpki-client