$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa File: 809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa (raw, json) Hash identifier: rzxIVwOkVS1n8X+HsUdgwQz9pIB2vLmsO9uotIe7wTQ= Subject key identifier: 51:2C:B3:95:F4:16:97:28:5A:EE:C6:97:73:7C:55:A3:03:10:C7:D3 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584F3E47D6FDA9F05BDD8724C700 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 170.203.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d6:fd:a9:f0:5b:dd:87:24:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=224ba856-d365-4a28-9f38-6e209625e926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:7d:91:3a:6c:38:08:5d:df:ca:34:9d:bc: 38:eb:ef:4a:cc:1f:ba:4e:19:de:1d:e9:75:24:24: 55:8f:db:23:7e:3c:c3:7a:1f:10:1f:d0:01:7e:09: fa:14:62:a6:f8:bd:b4:8c:c7:6f:2c:f3:55:e4:52: 05:75:56:92:5e:4a:3d:40:92:cd:63:d5:f1:61:2e: 75:14:1c:e6:69:d1:46:19:52:ac:e7:4e:3a:d5:8d: 27:44:ee:72:f4:e8:a8:a7:7d:5a:bb:56:ee:d1:28: 0c:73:e7:17:8f:4a:9f:d5:0a:cd:cb:39:ac:0a:cb: 1c:88:86:d8:1b:69:49:2b:2c:13:e0:f5:f2:e8:c7: 8b:ea:b4:64:08:f2:8c:8a:99:e7:ce:3e:b5:31:29: 5b:49:0e:cc:fa:30:68:5e:e7:d7:fa:07:5e:a7:1c: 5f:d9:f9:52:b2:7e:ec:f9:73:ec:80:92:15:58:59: 44:93:05:5c:83:ab:37:67:e5:41:64:bc:81:f2:67: 86:1a:71:23:3d:28:f4:82:cf:88:48:11:04:e5:25: 03:27:ff:cb:9d:a4:0e:03:3c:cb:38:38:46:bf:ba: a0:e9:be:3b:c6:ea:e3:d1:c9:ed:58:cd:ca:89:75: 48:e1:d0:16:5d:a9:38:3a:2f:a9:bd:3f:50:00:76: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2C:B3:95:F4:16:97:28:5A:EE:C6:97:73:7C:55:A3:03:10:C7:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 170.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:8a:ce:48:4c:64:d9:27:1c:d4:00:65:8d:9c:9c:63:30:e0: a5:bd:43:d0:d2:ae:cf:84:08:f8:2e:a0:4b:36:78:e6:f4:f4: 70:4a:08:8a:9b:60:49:12:fd:76:c7:a5:57:2a:99:4d:7c:33: 09:af:cf:0e:f2:e8:d8:0b:eb:df:b5:c2:17:48:94:07:ca:5d: 5f:10:bb:e0:de:7f:b1:ad:8a:65:59:80:7e:90:9d:01:30:be: 9f:f1:57:83:9b:cb:9f:58:e4:c9:c5:16:ac:3b:f0:00:e9:41: 25:e8:57:b6:6c:5d:78:df:15:78:d9:61:1a:2b:24:13:c7:9f: e4:49:47:a9:ba:97:9c:1e:9c:38:32:5d:02:d9:8d:71:ee:4a: 6f:ef:58:73:72:6e:2a:86:3e:71:84:ea:6a:4a:2c:6f:49:f0: fd:3b:a1:c9:a4:83:95:b7:df:07:bc:ef:65:84:22:6d:90:5a: 41:e5:d2:81:85:a9:fd:d4:14:31:d6:d0:62:d2:22:a3:ed:29: f4:42:87:61:e1:09:f2:cc:f9:f7:ad:09:7a:39:59:04:a5:bf: a3:de:02:b4:2b:9c:24:21:5a:b0:c2:78:de:15:b5:b9:a4:e5: 90:49:31:6a:6c:49:df:a7:56:ac:29:45:42:04:bc:80:6e:9e: c6:2b:47:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9b9qfBb3YckxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MjI0YmE4NTYtZDM2NS00YTI4LTlmMzgtNmUyMDk2MjVlOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNF9kTpsOAhd38o0nbw46+9KzB+6ThneHel1 JCRVj9sjfjzDeh8QH9ABfgn6FGKm+L20jMdvLPNV5FIFdVaSXko9QJLNY9XxYS51 FBzmadFGGVKs50461Y0nRO5y9Oiop31au1bu0SgMc+cXj0qf1QrNyzmsCssciIbY G2lJKywT4PXy6MeL6rRkCPKMipnnzj61MSlbSQ7M+jBoXufX+gdepxxf2flSsn7s +XPsgJIVWFlEkwVcg6s3Z+VBZLyB8meGGnEjPSj0gs+ISBEE5SUDJ//LnaQOAzzL ODhGv7qg6b47xurj0cntWM3KiXVI4dAWXak4Oi+pvT9QAHamzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEss5X0FpcoWu7Gl3N8VaMDEMfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvODA5ZjdlMDQtZTJiMi0z YmUxLWFkYzctNWJjYzZmMjdhN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqssQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANKKzkhMZNknHNQAZY2cnGMw4KW9Q9DSrs+ECPguoEs2eOb09HBKCIqb YEkS/XbHpVcqmU18Mwmvzw7y6NgL69+1whdIlAfKXV8Qu+Def7GtimVZgH6QnQEw vp/xV4Oby59Y5MnFFqw78ADpQSXoV7ZsXXjfFXjZYRorJBPHn+RJR6m6l5wenDgy XQLZjXHuSm/vWHNybiqGPnGE6mpKLG9J8P07ocmkg5W33we872WEIm2QWkHl0oGF qf3UFDHW0GLSIqPtKfRCh2HhCfLM+fetCXo5WQSlv6PeArQrnCQhWrDCeN4Vtbmk 5ZBJMWpsSd+nVqwpRUIEvIBunsYrR+g= -----END CERTIFICATE-----Generated at Thu Sep 24 08:43:08 2026 by rpki-client