$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa File: 809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa (raw, json) Hash identifier: Ea/2EG+7jlQgsDF4vQ9LWbqLmCNLPAPGBwn+iZSnZAI= Subject key identifier: 0A:6D:71:13:F9:3C:87:0F:4D:34:FD:4E:BE:2E:9C:77:EE:D6:51:34 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584A3A157871860E0536DB8AFA00 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 170.203.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:78:71:86:0e:05:36:db:8a:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=6d651855-dde1-4854-b05a-f1dcdfe745b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:3e:04:1a:7d:72:3b:e8:50:54:9c:99:ff: 93:fb:fe:b3:fd:35:11:89:0e:c8:f0:6e:97:60:95: 79:fe:9e:97:47:33:7c:74:e8:50:d8:20:93:a4:29: 89:b7:9f:3e:5f:25:1a:6f:6a:4d:56:e4:63:3f:e4: a1:05:ed:74:d8:21:84:73:7d:64:00:81:13:01:54: 4f:f8:74:04:4e:5f:bd:f3:5b:c4:3c:b2:5c:43:4e: 0a:11:1c:4c:6d:03:92:46:0d:ec:5b:36:70:d0:a3: 19:3a:5c:d7:19:9b:c1:26:b7:47:d8:e1:17:6e:a4: 73:b8:02:3e:67:ac:7e:6f:64:9e:88:74:03:a2:a5: ea:a3:7d:1f:7b:22:ad:d5:52:13:32:89:47:3b:1f: 53:5f:43:f8:2a:87:1f:2b:75:6e:ab:47:b2:08:7a: 9f:4b:de:1e:04:15:a7:42:4b:cb:c0:44:73:f0:9f: d1:87:a1:89:d2:a3:28:6b:dc:50:3e:39:1b:43:4c: 92:d5:9a:9d:56:ca:5d:df:6c:99:cf:88:86:a9:44: 15:cd:a4:cf:95:73:fd:75:b7:f6:91:3a:f8:12:8a: de:c1:c8:21:f9:e1:13:4a:ef:bc:0d:4e:78:92:c6: dc:08:89:51:7d:22:78:5f:05:32:70:c1:93:c9:b1: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6D:71:13:F9:3C:87:0F:4D:34:FD:4E:BE:2E:9C:77:EE:D6:51:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 170.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d6:67:17:f0:e7:bf:84:6b:d0:d6:b7:19:33:d8:78:19:e2: b9:29:be:5b:ee:04:26:af:01:6e:6b:a5:d3:8a:97:4a:21:16: 64:a4:83:12:a0:d6:e1:39:fc:79:72:62:f8:bd:87:46:56:cc: e4:ee:96:4f:a7:38:e0:fa:b8:b4:5c:35:87:cd:6b:bc:a9:4d: 81:2c:43:9e:70:7e:eb:4a:63:da:f9:cc:e2:40:6b:58:d7:a6: a4:ba:40:ed:88:f8:c8:d0:ab:d5:6c:52:fa:f6:87:b3:cf:9c: b2:cc:9e:a1:e3:51:6a:76:4f:ba:ed:d1:56:d9:4c:68:00:e2: 38:ef:c0:1a:2c:79:18:54:2b:70:5f:79:19:42:54:68:34:59: ef:7b:b2:25:dc:d8:9f:ab:ae:ce:f4:0a:ac:53:cd:7f:3b:3c: 01:07:35:47:87:f7:36:01:b4:68:34:76:f7:d4:e4:f2:0a:c7: 82:43:89:54:bc:2a:bb:aa:0f:59:69:6a:4a:31:ce:94:68:99: af:2c:e2:ac:d6:c4:20:1a:a4:dd:90:0b:14:5e:02:37:3b:24: 23:0c:7a:c3:ab:75:23:47:9d:3e:84:18:ea:83:40:37:df:39: 8f:b4:3d:57:51:7d:0d:fe:2b:25:37:4a:54:e1:0c:e9:53:8b: af:8f:ff:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXhxhg4FNtuK+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NmQ2NTE4NTUtZGRlMS00ODU0LWIwNWEtZjFkY2RmZTc0NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyM+BBp9cjvoUFScmf+T+/6z/TURiQ7I8G6X YJV5/p6XRzN8dOhQ2CCTpCmJt58+XyUab2pNVuRjP+ShBe102CGEc31kAIETAVRP +HQETl+981vEPLJcQ04KERxMbQOSRg3sWzZw0KMZOlzXGZvBJrdH2OEXbqRzuAI+ Z6x+b2SeiHQDoqXqo30feyKt1VITMolHOx9TX0P4KocfK3Vuq0eyCHqfS94eBBWn QkvLwERz8J/Rh6GJ0qMoa9xQPjkbQ0yS1ZqdVspd32yZz4iGqUQVzaTPlXP9dbf2 kTr4Eorewcgh+eETSu+8DU54ksbcCIlRfSJ4XwUycMGTybFeKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAptcRP5PIcPTTT9Tr4unHfu1lE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvODA5ZjdlMDQtZTJiMi0z YmUxLWFkYzctNWJjYzZmMjdhN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqssQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/WZxfw57+Ea9DWtxkz2HgZ4rkpvlvuBCavAW5rpdOKl0ohFmSkgxKg 1uE5/HlyYvi9h0ZWzOTulk+nOOD6uLRcNYfNa7ypTYEsQ55wfutKY9r5zOJAa1jX pqS6QO2I+MjQq9VsUvr2h7PPnLLMnqHjUWp2T7rt0VbZTGgA4jjvwBoseRhUK3Bf eRlCVGg0We97siXc2J+rrs70CqxTzX87PAEHNUeH9zYBtGg0dvfU5PIKx4JDiVS8 KruqD1lpakoxzpRoma8s4qzWxCAapN2QCxReAjc7JCMMesOrdSNHnT6EGOqDQDff OY+0PVdRfQ3+KyU3SlThDOlTi6+P/7U= -----END CERTIFICATE-----Generated at Sun Jun 29 08:04:00 2025 by rpki-client