$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/04c244df-9f55-3c39-a781-590ef8c8097d.roa File: 04c244df-9f55-3c39-a781-590ef8c8097d.roa (raw, json) Hash identifier: K4NhMmhvKBbEyVrpQJTtz5Hq20AiAD6arEd8lOnpwxc= Subject key identifier: F1:AA:49:C7:4C:86:79:3F:B7:BF:5E:95:CD:3D:3D:F8:53:23:BC:BA Certificate issuer: /CN=cd857ccf-b825-416d-8fd1-7332947e606d Certificate serial: 010D0C9F4328584D201058CBE4DD01C3A8CFD940 Authority key identifier: AD:24:3D:43:2A:80:E6:F2:26:A8:C3:91:F6:CD:6D:DF:2C:BA:7D:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/04c244df-9f55-3c39-a781-590ef8c8097d.roa Signing time: Tue 10 Mar 2026 19:40:23 +0000 ROA not before: Tue 10 Mar 2026 19:40:23 +0000 ROA not after: Mon 08 Jun 2026 19:40:23 +0000 asID: 396982 IP address blocks: 162.52.0.0/23 maxlen: 23 162.52.2.0/23 maxlen: 23 162.52.4.0/24 maxlen: 24 162.52.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:10:58:cb:e4:dd:01:c3:a8:cf:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd857ccf-b825-416d-8fd1-7332947e606d Validity Not Before: Mar 10 19:40:23 2026 GMT Not After : Jun 8 19:40:23 2026 GMT Subject: CN=195f21c8-3b3e-4a26-a432-03a5a244c6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:15:8c:a3:2b:41:b3:e1:8f:6a:c7:74:37: a4:2b:61:53:09:44:0c:bd:5c:dc:62:7a:b8:f6:69: 87:e7:fc:9c:e6:9c:79:86:0a:40:23:aa:15:f9:ad: 00:e0:37:24:c6:48:c7:ae:db:f9:04:6c:68:b4:bb: 63:77:c4:1d:cc:ce:fc:7d:51:70:10:89:f6:75:48: e0:2a:b8:54:7c:77:a9:ff:56:62:5c:1e:dd:d0:1a: 0a:f2:35:51:9b:1a:ec:0a:9b:b7:18:55:18:45:dc: 22:a6:76:db:3f:a2:34:82:94:79:6a:f3:1d:3d:99: a1:fd:08:5c:81:d3:45:d4:55:57:de:0d:4f:5e:6f: d2:e4:af:6c:de:b1:d3:8c:93:70:d4:90:78:bd:7f: c3:3a:9c:6d:f7:78:43:44:67:93:70:c8:38:2b:dd: 81:0c:f3:54:49:44:42:9d:61:25:94:ed:81:70:82: 9a:b2:a5:dd:2c:9f:b0:b7:b9:b5:79:c7:a3:2f:34: a4:2e:d8:45:f4:3d:00:66:b1:80:c1:99:b1:80:3b: f7:95:d3:e7:12:ae:69:7d:e5:0c:c3:f7:90:cf:c3: e0:6c:92:1f:58:bd:76:18:70:c1:ce:6d:92:d6:98: 3e:c1:17:da:b6:d2:d9:a4:f0:62:ca:16:c1:6b:e9: f2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AA:49:C7:4C:86:79:3F:B7:BF:5E:95:CD:3D:3D:F8:53:23:BC:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/04c244df-9f55-3c39-a781-590ef8c8097d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.crl X509v3 Authority Key Identifier: keyid:AD:24:3D:43:2A:80:E6:F2:26:A8:C3:91:F6:CD:6D:DF:2C:BA:7D:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer sbgp-ipAddrBlock: critical IPv4: 162.52.0.0-162.52.5.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a6:61:ce:b3:64:f1:9a:5d:bb:25:e3:d3:ac:ad:33:e5:21: c3:df:3d:f8:8c:e3:f4:4e:76:e2:d2:28:b6:61:cf:46:a5:3f: 8c:80:df:13:27:49:d3:b7:c9:30:84:85:7f:29:bd:5c:56:cc: 4e:9d:85:56:49:9f:7c:d2:cc:5b:9f:ee:9c:83:40:31:b4:19: 6e:8e:52:23:bf:3b:51:53:b4:71:ea:e1:42:9f:30:19:f3:97: 82:9d:da:a9:7e:36:d1:0e:24:ce:ce:cc:fb:4e:be:bd:fe:30: bd:28:ce:e3:15:7a:fd:f0:65:b3:d7:99:b4:f3:f4:ae:79:fb: 97:18:cd:f5:cc:ef:b0:e6:34:c4:a0:25:e5:b4:2f:b4:1e:d8: f8:f4:1d:60:e1:26:de:66:a0:8d:47:85:e8:cb:fd:be:f6:70: 6e:3f:b9:52:78:74:56:d4:cc:2d:be:ac:18:6b:41:d1:a9:61: 3f:2e:80:5b:ab:71:5c:e0:93:c6:98:c2:86:85:70:b4:ba:80: 97:d7:ba:4c:4a:2c:57:3e:4c:28:47:b7:b1:a8:71:3e:f9:e3: 44:35:44:60:d6:c4:76:ac:bc:83:21:25:02:14:5b:56:4c:55: 14:4c:75:0a:83:8f:81:74:d1:46:92:95:fa:ce:ee:93:2b:63: e7:c3:1b:67 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE0gEFjL5N0Bw6jP2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q4NTdjY2YtYjgyNS00MTZkLThmZDEtNzMzMjk0N2U2 MDZkMB4XDTI2MDMxMDE5NDAyM1oXDTI2MDYwODE5NDAyM1owLzEtMCsGA1UEAxMk MTk1ZjIxYzgtM2IzZS00YTI2LWE0MzItMDNhNWEyNDRjNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQYVjKMrQbPhj2rHdDekK2FTCUQMvVzcYnq4 9mmH5/yc5px5hgpAI6oV+a0A4DckxkjHrtv5BGxotLtjd8QdzM78fVFwEIn2dUjg KrhUfHep/1ZiXB7d0BoK8jVRmxrsCpu3GFUYRdwipnbbP6I0gpR5avMdPZmh/Qhc gdNF1FVX3g1PXm/S5K9s3rHTjJNw1JB4vX/DOpxt93hDRGeTcMg4K92BDPNUSURC nWEllO2BcIKasqXdLJ+wt7m1ecejLzSkLthF9D0AZrGAwZmxgDv3ldPnEq5pfeUM w/eQz8PgbJIfWL12GHDBzm2S1pg+wRfattLZpPBiyhbBa+nyiwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFPGqScdMhnk/t79elc09PfhTI7y6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDg1 N2NjZi1iODI1LTQxNmQtOGZkMS03MzMyOTQ3ZTYwNmQvMDRjMjQ0ZGYtOWY1NS0z YzM5LWE3ODEtNTkwZWY4YzgwOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4NTdjY2YtYjgyNS00MTZkLThm ZDEtNzMzMjk0N2U2MDZkL2NkODU3Y2NmLWI4MjUtNDE2ZC04ZmQxLTczMzI5NDdl NjA2ZC5jcmwwHwYDVR0jBBgwFoAUrSQ9QyqA5vImqMOR9s1t3yy6fY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDg1N2NjZi1iODI1LTQxNmQtOGZkMS03MzMy OTQ3ZTYwNmQuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwKiNAME AaI0BDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAQpmHOs2Txml27JePTrK0z5SHD3z34jOP0Tnbi0ii2Yc9G pT+MgN8TJ0nTt8kwhIV/Kb1cVsxOnYVWSZ980sxbn+6cg0AxtBlujlIjvztRU7Rx 6uFCnzAZ85eCndqpfjbRDiTOzsz7Tr69/jC9KM7jFXr98GWz15m08/SuefuXGM31 zO+w5jTEoCXltC+0Htj49B1g4SbeZqCNR4Xoy/2+9nBuP7lSeHRW1MwtvqwYa0HR qWE/LoBbq3Fc4JPGmMKGhXC0uoCX17pMSixXPkwoR7exqHE++eNENURg1sR2rLyD ISUCFFtWTFUUTHUKg4+BdNFGkpX6zu6TK2Pnwxtn -----END CERTIFICATE-----Generated at Thu Mar 26 09:36:25 2026 by rpki-client