$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa File: 809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa (raw, json) Hash identifier: t/w0S2IXwH7zmNIRDxZV7Z7lS8Y4U0N6qox53i7gIdE= Subject key identifier: C1:5F:8C:7E:BB:72:F1:B4:BA:A8:0C:CF:3F:0B:85:A4:90:63:5E:D6 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584DBBA04329C58C2B5D644D4D00 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 14618 IP address blocks: 170.203.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:43:29:c5:8c:2b:5d:64:4d:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=58b51826-1dba-4a02-be9f-c4b4dd28aba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:d5:9c:66:41:d9:55:43:88:e7:90:38:55: b1:56:89:49:e6:75:c1:a4:11:77:f9:8f:fe:ae:4c: dd:00:d9:3a:07:0c:74:c6:64:33:2d:0d:f0:32:0b: d6:97:2e:9a:72:66:3b:d7:d2:29:2b:53:4a:3a:9e: bd:d6:48:af:31:8c:d0:07:7a:d4:b5:e8:98:c1:6f: 35:67:20:39:04:61:66:d8:f6:b8:19:f1:58:20:9c: f8:a4:e2:66:d9:b5:52:c0:dc:a1:a1:81:6e:17:c1: 9e:f7:df:96:58:1f:0e:fb:78:44:0e:70:b0:2e:f9: 7e:3e:52:07:96:08:12:1c:18:2b:08:b2:a8:5f:bf: 91:db:16:ad:d6:77:72:e3:d2:24:a9:ad:62:53:d5: fd:ce:b5:20:d5:cd:f1:f6:2f:d3:8f:54:a8:fd:0b: de:5f:26:c5:45:6f:e8:5c:a5:bf:71:47:68:ee:5b: fe:91:77:f2:b7:58:0d:2e:7f:68:18:55:9f:dd:42: 5b:1a:a2:a4:7a:34:ee:dc:d6:38:17:98:72:2a:69: c6:fe:7f:9e:40:61:49:09:dd:c3:1d:10:82:e6:e8: 3e:7f:26:21:70:33:3a:20:e9:3a:23:28:b6:43:84: 71:4f:26:ee:14:f7:dd:b8:44:a1:1d:e0:84:67:e3: 27:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5F:8C:7E:BB:72:F1:B4:BA:A8:0C:CF:3F:0B:85:A4:90:63:5E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 170.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:46:39:fd:78:c8:fd:37:11:26:99:a9:c3:c7:c0:72:98:4e: 02:d5:f1:1e:c2:f6:3a:99:34:32:e9:f8:ab:e5:28:52:a4:f2: 57:3c:a7:6a:68:2e:c9:e8:70:99:20:50:c9:0c:b3:fc:34:9e: 8a:99:30:93:ad:79:ce:88:cb:5f:80:06:36:5a:f5:89:b4:ec: 4c:d5:ba:da:74:b9:67:68:4f:2e:e9:4b:33:9b:3a:50:67:68: e5:a4:a8:04:c2:3f:1a:60:ed:b3:47:dd:b9:c4:8d:49:2b:de: 42:69:19:df:ad:52:04:3d:31:8f:f9:44:25:6c:bf:ce:d1:a6: 08:35:39:8f:94:c6:bd:fd:13:2a:f4:cc:7f:d9:c2:75:0e:bc: 38:25:c7:9d:6a:2e:e0:cd:bd:b1:bf:7c:26:a5:d8:25:cf:fa: 57:fa:b3:43:a7:83:23:2f:0e:88:2b:9a:d1:86:f3:c9:10:73: 73:bf:0a:30:9e:27:0a:12:9b:6d:8c:6e:41:ab:de:70:32:2d: 16:11:c8:9f:d3:1e:d4:23:3b:81:15:e8:7a:65:ec:0a:17:be: 46:a2:17:9a:0c:44:18:1b:af:a3:12:e8:69:1d:5d:50:df:16: cd:96:0d:0f:dd:13:24:5d:ae:74:1a:77:9a:30:17:e2:9e:a7: 5e:5a:2d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oEMpxYwrXWRNTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk NThiNTE4MjYtMWRiYS00YTAyLWJlOWYtYzRiNGRkMjhhYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrjVnGZB2VVDiOeQOFWxVolJ5nXBpBF3+Y/+ rkzdANk6Bwx0xmQzLQ3wMgvWly6acmY719IpK1NKOp691kivMYzQB3rUteiYwW81 ZyA5BGFm2Pa4GfFYIJz4pOJm2bVSwNyhoYFuF8Ge99+WWB8O+3hEDnCwLvl+PlIH lggSHBgrCLKoX7+R2xat1ndy49Ikqa1iU9X9zrUg1c3x9i/Tj1So/QveXybFRW/o XKW/cUdo7lv+kXfyt1gNLn9oGFWf3UJbGqKkejTu3NY4F5hyKmnG/n+eQGFJCd3D HRCC5ug+fyYhcDM6IOk6Iyi2Q4RxTybuFPfduEShHeCEZ+MnOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFfjH67cvG0uqgMzz8LhaSQY17WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvODA5ZjdlMDQtZTJiMi0z YmUxLWFkYzctNWJjYzZmMjdhN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqssQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN1GOf14yP03ESaZqcPHwHKYTgLV8R7C9jqZNDLp+KvlKFKk8lc8p2po LsnocJkgUMkMs/w0noqZMJOtec6Iy1+ABjZa9Ym07EzVutp0uWdoTy7pSzObOlBn aOWkqATCPxpg7bNH3bnEjUkr3kJpGd+tUgQ9MY/5RCVsv87Rpgg1OY+Uxr39Eyr0 zH/ZwnUOvDglx51qLuDNvbG/fCal2CXP+lf6s0OngyMvDogrmtGG88kQc3O/CjCe JwoSm22MbkGr3nAyLRYRyJ/THtQjO4EV6Hpl7AoXvkaiF5oMRBgbr6MS6GkdXVDf Fs2WDQ/dEyRdrnQad5owF+Kep15aLZU= -----END CERTIFICATE-----Generated at Wed May 13 01:43:37 2026 by rpki-client