$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/525df35e-e288-3fe4-aa7e-48f9a311d4f8.roa File: 525df35e-e288-3fe4-aa7e-48f9a311d4f8.roa (raw, json) Hash identifier: CdU4QiNIidgHiJgPudnXlNp1rHq1y7X4eT3lz6tpv+Q= Subject key identifier: 87:DB:F1:CB:14:A4:A8:A1:B5:67:10:90:CC:38:C4:3F:13:84:86:C7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D94AE942936247041DAB0CF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/525df35e-e288-3fe4-aa7e-48f9a311d4f8.roa Signing time: Tue 21 Apr 2026 14:12:58 +0000 ROA not before: Tue 21 Apr 2026 14:12:58 +0000 ROA not after: Mon 20 Jul 2026 14:12:58 +0000 asID: 396550 IP address blocks: 192.52.178.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:94:29:36:24:70:41:da:b0:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 21 14:12:58 2026 GMT Not After : Jul 20 14:12:58 2026 GMT Subject: CN=95e11928-eb34-42fe-9d87-ccc763041d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:08:d9:f5:bd:24:69:61:72:be:97:d5:15:6e: 03:5e:98:20:ab:8b:aa:41:59:cb:d7:c9:f3:44:52: 38:79:44:73:dd:50:15:14:56:d7:6a:83:55:59:4a: 80:1f:86:36:90:65:29:5b:e8:c5:5c:39:01:81:b0: 0d:32:22:b3:e0:52:f3:92:dc:69:f7:01:78:05:fa: 44:d0:a3:c1:24:1c:83:94:2f:31:0e:b1:3c:8c:0e: 2c:ec:2b:1b:56:1e:c0:5e:16:4b:eb:37:77:f2:2b: 85:77:7a:24:1b:26:c8:45:00:67:e6:cc:82:98:fb: 54:64:e1:ef:db:ee:8c:43:dc:b1:b3:2c:15:9d:a6: 08:ba:ec:4c:7b:eb:40:94:2f:18:8a:87:e6:73:41: d4:82:97:5c:bc:fc:76:aa:44:b0:d6:cf:c7:ba:7d: c1:a8:4d:f0:26:b6:12:e2:08:6e:9f:9d:ab:09:45: 00:03:00:cf:67:13:13:67:67:ba:f9:fb:d2:72:d4: 6a:f3:29:8d:61:58:f6:2d:c8:33:a4:3e:f3:0a:3d: 9b:2f:49:c3:9c:be:7f:29:29:81:d1:f4:45:46:a5: 05:03:81:90:9d:98:0e:5d:8a:b8:46:6d:ae:f8:6f: 92:6c:95:2a:1d:34:fc:34:67:85:75:47:fe:6d:14: 7e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DB:F1:CB:14:A4:A8:A1:B5:67:10:90:CC:38:C4:3F:13:84:86:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/525df35e-e288-3fe4-aa7e-48f9a311d4f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.52.178.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4d:0c:6f:05:b9:67:85:5e:8e:32:6b:a2:80:87:25:70:92: 8a:2d:e9:a5:27:7d:99:83:09:ae:c5:e7:ba:22:88:00:15:7e: 0d:3d:26:93:87:49:5d:ca:b2:43:72:21:59:60:4b:c3:7b:b4: 90:b6:77:81:55:85:1d:fb:88:5d:0f:c6:fa:8c:28:c4:83:d0: bc:15:2f:d1:cd:33:8a:51:c1:e9:25:8e:6e:8f:6b:66:9b:04: 22:4d:e4:46:77:e2:20:1d:a8:9d:0d:00:28:a8:67:66:28:d2: fa:e0:30:a2:f7:a8:02:cb:df:3c:f3:de:0d:b5:61:3f:0d:de: c1:a4:53:94:d5:94:4e:e7:78:5a:e4:84:9d:b2:9d:70:06:c1: d5:fa:cc:39:11:ea:17:8d:ef:0b:e7:b9:7a:56:f9:88:51:08: 21:93:7f:de:28:ff:b8:f1:62:19:56:9c:a5:aa:15:e5:9b:bd: 0c:b5:de:90:2e:77:85:43:ec:24:a7:d2:c5:b9:1b:66:7e:44: 8c:b4:a5:cc:a2:f9:02:4b:e7:5f:7a:c8:cc:9d:1d:be:bb:47: c3:38:12:e1:25:d7:b9:a4:4f:40:53:cc:ed:f7:e7:9d:5f:aa: 0b:67:cb:5d:22:39:2b:41:4e:45:a7:ed:73:30:06:a1:d0:7b: ef:ed:9f:ce -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2UrpQpNiRwQdqwz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMTE0MTI1OFoXDTI2MDcyMDE0MTI1OFowLzEtMCsGA1UEAxMk OTVlMTE5MjgtZWIzNC00MmZlLTlkODctY2NjNzYzMDQxZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgjZ9b0kaWFyvpfVFW4DXpggq4uqQVnL18nz RFI4eURz3VAVFFbXaoNVWUqAH4Y2kGUpW+jFXDkBgbANMiKz4FLzktxp9wF4BfpE 0KPBJByDlC8xDrE8jA4s7CsbVh7AXhZL6zd38iuFd3okGybIRQBn5syCmPtUZOHv 2+6MQ9yxsywVnaYIuuxMe+tAlC8Yiofmc0HUgpdcvPx2qkSw1s/Hun3BqE3wJrYS 4ghun52rCUUAAwDPZxMTZ2e6+fvSctRq8ymNYVj2LcgzpD7zCj2bL0nDnL5/KSmB 0fRFRqUFA4GQnZgOXYq4Rm2u+G+SbJUqHTT8NGeFdUf+bRR+cwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIfb8csUpKihtWcQkMw4xD8ThIbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTI1ZGYzNWUtZTI4OC0z ZmU0LWFhN2UtNDhmOWEzMTFkNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDSyHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAcTQxvBblnhV6OMmuigIclcJKKLemlJ32Zgwmuxee6IogAFX4NPSaT h0ldyrJDciFZYEvDe7SQtneBVYUd+4hdD8b6jCjEg9C8FS/RzTOKUcHpJY5uj2tm mwQiTeRGd+IgHaidDQAoqGdmKNL64DCi96gCy988894NtWE/Dd7BpFOU1ZRO53ha 5ISdsp1wBsHV+sw5EeoXje8L57l6VvmIUQghk3/eKP+48WIZVpylqhXlm70Mtd6Q LneFQ+wkp9LFuRtmfkSMtKXMovkCS+dfesjMnR2+u0fDOBLhJde5pE9AU8zt9+ed X6oLZ8tdIjkrQU5Fp+1zMAah0Hvv7Z/O -----END CERTIFICATE-----Generated at Wed May 13 04:51:35 2026 by rpki-client