$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa File: 388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa (raw, json) Hash identifier: Vj8LGlIYSQuo1ApdfDnLwLUxOtzLgB/3tdv+1DscPjQ= Subject key identifier: DA:39:7A:42:95:BC:F6:8C:31:91:80:69:96:1F:A9:6C:37:04:4F:05 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584B821CCD597C29EAA353BE9180 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 16509 IP address blocks: 207.211.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:cd:59:7c:29:ea:a3:53:be:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=416638ae-cc41-4697-9a41-226e3d28db75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cc:98:38:36:bc:e9:95:64:3c:fe:e6:08:5e: 1f:91:c7:8f:63:89:7b:96:19:a1:bb:20:13:4f:e8: 1b:cd:6a:41:a4:e4:53:3e:e3:c8:31:e8:c8:f7:78: 69:46:2b:24:bd:26:45:71:a7:dd:bf:78:b2:0a:7c: 29:10:88:a5:77:bc:51:28:d6:fe:ea:20:bf:cb:ca: 6d:e2:50:78:66:09:98:e3:6e:eb:3d:3a:08:93:f1: 9b:6b:15:ac:08:30:a6:06:47:2f:9f:83:a6:27:7a: fa:50:c5:f6:b4:e2:fb:7b:d0:db:4b:47:22:92:e9: 80:00:f7:6a:c8:cd:32:d1:7b:db:79:dc:a8:32:fb: b9:a0:2e:38:7c:53:64:72:27:e2:63:11:81:47:60: 7e:3e:cb:fd:52:ec:46:20:d1:d1:6c:09:54:6a:60: a4:17:67:bb:34:26:9a:f9:2b:f9:d4:b5:94:41:ea: 2b:cc:c1:c7:e8:60:d2:86:60:cc:c6:14:cf:8e:fc: 11:cb:71:d2:f4:a4:bc:dd:bc:ff:87:a8:8f:17:5c: d6:00:37:e6:23:75:dc:e9:3e:93:f8:12:b1:e9:ee: c5:b7:3a:86:30:8d:a1:ef:19:92:2b:7e:9a:6c:16: 75:34:2b:3b:6f:bf:62:9c:b7:a1:17:3f:38:8b:2d: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:39:7A:42:95:BC:F6:8C:31:91:80:69:96:1F:A9:6C:37:04:4F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 207.211.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:47:e0:82:89:dc:74:47:c9:2b:b0:05:a7:6d:27:78:ce:38: 19:d5:52:53:a8:31:c7:5e:5d:c4:dc:f8:6e:74:cd:bf:75:ec: ad:cc:7b:5b:3b:35:c9:3b:4c:af:35:d1:ed:0a:6e:0e:82:3c: 73:40:9c:6f:7a:d7:e6:0c:a7:85:79:2f:e2:7f:9f:c8:0c:05: 06:3c:ad:f2:b7:b4:34:c3:09:89:fc:ed:48:16:df:39:8a:ed: 57:dc:33:15:bb:c6:10:2c:f2:c8:02:84:b5:8a:1f:8f:a3:28: 37:46:28:b9:9a:6c:a0:d3:59:c4:4e:46:9b:4d:9a:73:52:bd: 74:1e:97:0f:6b:7e:ea:20:6f:a6:d2:78:ad:a4:75:1d:56:85: 11:17:37:73:b2:97:f5:06:29:ea:f0:5f:33:d9:05:ca:82:fc: d3:9c:a3:80:b4:5c:e3:bd:6c:0f:2c:a5:ef:56:ec:1f:fc:02: 69:b7:fa:59:fd:de:8b:6a:8e:95:29:25:1a:71:67:6c:a8:8b: 2a:ed:13:e1:8d:49:2b:fb:24:85:df:49:56:59:78:13:1c:e7: 1a:1a:70:a2:1c:5b:43:a4:07:f5:b0:d8:04:1d:e1:3d:82:89: 08:8f:d7:84:18:0d:8b:6b:1d:6b:af:1a:4d:b8:25:27:45:02: 0a:a7:da:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHM1ZfCnqo1O+kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NDE2NjM4YWUtY2M0MS00Njk3LTlhNDEtMjI2ZTNkMjhkYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMyYODa86ZVkPP7mCF4fkcePY4l7lhmhuyAT T+gbzWpBpORTPuPIMejI93hpRiskvSZFcafdv3iyCnwpEIild7xRKNb+6iC/y8pt 4lB4ZgmY427rPToIk/GbaxWsCDCmBkcvn4OmJ3r6UMX2tOL7e9DbS0cikumAAPdq yM0y0XvbedyoMvu5oC44fFNkcifiYxGBR2B+Psv9UuxGINHRbAlUamCkF2e7NCaa +Sv51LWUQeorzMHH6GDShmDMxhTPjvwRy3HS9KS83bz/h6iPF1zWADfmI3Xc6T6T +BKx6e7FtzqGMI2h7xmSK36abBZ1NCs7b79inLehFz84iy2gcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo5ekKVvPaMMZGAaZYfqWw3BE8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvMzg4Y2U5NWEtMGU1ZC0z MzlkLWI4MTAtY2Y1OWIxYjAwZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1H4IKJ3HRHySuwBadtJ3jOOBnVUlOoMcdeXcTc+G50zb917K3Me1s7 Nck7TK810e0Kbg6CPHNAnG961+YMp4V5L+J/n8gMBQY8rfK3tDTDCYn87UgW3zmK 7VfcMxW7xhAs8sgChLWKH4+jKDdGKLmabKDTWcRORptNmnNSvXQelw9rfuogb6bS eK2kdR1WhREXN3Oyl/UGKerwXzPZBcqC/NOco4C0XOO9bA8spe9W7B/8Amm3+ln9 3otqjpUpJRpxZ2yoiyrtE+GNSSv7JIXfSVZZeBMc5xoacKIcW0OkB/Ww2AQd4T2C iQiP14QYDYtrHWuvGk24JSdFAgqn2ro= -----END CERTIFICATE-----Generated at Mon Oct 20 08:45:37 2025 by rpki-client