$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa File: b98046e9-e215-3beb-b627-8d082108f26e.roa (raw, json) Hash identifier: gfRGnBpMh6mrWkJwSoP/g5HTfp4ugdvkrmSL6p52gZA= Subject key identifier: E5:B4:ED:C1:64:60:14:AD:40:C2:DB:6E:90:51:94:A5:1E:72:98:71 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584A3A157CEFDD4B83B61781D300 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 170.203.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7c:ef:dd:4b:83:b6:17:81:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=c142e0e7-ebd6-4100-9c19-7650054ed6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f0:9d:03:7f:e9:de:1c:51:a4:66:c0:3d:66: 87:4e:9a:35:f3:48:0b:9e:5b:41:c0:9b:de:5f:c5: b6:1d:65:8e:38:ea:d8:12:33:70:d1:8f:e8:ad:10: 78:5a:6d:0d:10:7c:22:0a:61:a3:b2:94:52:1c:1b: 13:a4:d9:d5:ac:0a:88:72:ab:e6:eb:32:dd:90:07: af:4d:2f:a0:06:fe:93:1e:af:6c:86:48:1f:b4:7a: d4:8d:af:3a:5c:90:f8:d9:10:6c:b0:18:37:a4:ba: 40:f8:3c:84:27:61:8d:9a:c3:ce:bf:8e:35:2f:d8: bc:22:28:16:5d:af:fa:8a:1d:e5:d2:3b:83:a5:60: 12:ed:36:8c:7c:13:4c:d5:04:b2:6f:d7:e2:2f:d5: 1b:8d:0d:d5:a9:d1:10:07:1e:45:a4:f8:2a:25:44: 8b:21:f8:2e:5f:da:4c:75:76:b4:07:40:33:5d:28: f5:ce:b3:62:91:46:4a:c1:81:31:9e:33:73:1f:4d: 80:79:6e:db:b9:7e:70:7c:4a:1c:b3:b9:dc:ce:b0: d0:f6:77:8b:77:1b:c7:78:64:ab:e4:03:97:b0:32: 79:d6:96:d4:2d:c4:9c:71:b2:9b:eb:01:2e:14:8f: 35:45:76:d7:63:22:89:01:73:0d:d8:c1:23:be:f4: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B4:ED:C1:64:60:14:AD:40:C2:DB:6E:90:51:94:A5:1E:72:98:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 170.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:17:7a:80:44:48:43:0d:58:a9:6f:64:42:6f:db:5f:1e:eb: 75:8f:18:32:cd:a4:1b:93:47:7d:73:31:2e:20:86:9e:1b:e0: c4:ad:69:09:a7:ed:d7:42:49:0c:09:a1:82:25:a9:f2:21:a0: 6b:59:ce:2f:60:c7:8e:31:3b:59:f8:36:02:5e:6f:3d:87:b9: 37:7e:22:8a:4d:46:11:f7:f1:7c:f0:0d:70:17:3f:0d:7a:c6: d9:25:1f:49:f6:d4:26:a2:3f:05:fc:12:0f:06:40:b8:ee:72: 50:30:24:53:c7:4f:d2:8b:31:6e:ae:41:52:b7:a9:c2:95:d7: d1:1c:50:c9:00:bc:22:6f:78:39:6e:3b:04:e9:eb:f2:ac:18: 61:15:28:94:9e:21:3c:05:9a:80:cd:2b:65:65:19:59:f5:d9: 8a:4c:91:d8:76:8e:a5:5e:76:be:11:9c:ab:84:82:a1:1d:a7: 3d:ab:16:ef:62:60:dc:4e:92:12:e6:af:9d:1f:cc:f8:60:8c: ab:37:09:4f:ee:4f:a0:81:94:01:d7:0f:41:1b:0d:90:f8:11: 72:97:e1:94:81:28:12:62:f2:b2:28:ba:02:26:32:b6:87:2e: 23:06:9f:62:e6:49:b5:b3:bf:c0:24:8f:7f:73:86:c8:7d:42: dc:e3:31:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXzv3UuDtheB0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YzE0MmUwZTctZWJkNi00MTAwLTljMTktNzY1MDA1NGVkNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/CdA3/p3hxRpGbAPWaHTpo180gLnltBwJve X8W2HWWOOOrYEjNw0Y/orRB4Wm0NEHwiCmGjspRSHBsTpNnVrAqIcqvm6zLdkAev TS+gBv6THq9shkgftHrUja86XJD42RBssBg3pLpA+DyEJ2GNmsPOv441L9i8IigW Xa/6ih3l0juDpWAS7TaMfBNM1QSyb9fiL9UbjQ3VqdEQBx5FpPgqJUSLIfguX9pM dXa0B0AzXSj1zrNikUZKwYExnjNzH02AeW7buX5wfEocs7nczrDQ9neLdxvHeGSr 5AOXsDJ51pbULcSccbKb6wEuFI81RXbXYyKJAXMN2MEjvvQ4rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW07cFkYBStQMLbbpBRlKUecphxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvYjk4MDQ2ZTktZTIxNS0z YmViLWI2MjctOGQwODIxMDhmMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqssQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIXeoBESEMNWKlvZEJv218e63WPGDLNpBuTR31zMS4ghp4b4MStaQmn 7ddCSQwJoYIlqfIhoGtZzi9gx44xO1n4NgJebz2HuTd+IopNRhH38XzwDXAXPw16 xtklH0n21CaiPwX8Eg8GQLjuclAwJFPHT9KLMW6uQVK3qcKV19EcUMkAvCJveDlu OwTp6/KsGGEVKJSeITwFmoDNK2VlGVn12YpMkdh2jqVedr4RnKuEgqEdpz2rFu9i YNxOkhLmr50fzPhgjKs3CU/uT6CBlAHXD0EbDZD4EXKX4ZSBKBJi8rIougImMraH LiMGn2LmSbWzv8Akj39zhsh9QtzjMbE= -----END CERTIFICATE-----Generated at Tue Jul 1 16:56:57 2025 by rpki-client