$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/db43588c-fbe9-3306-8e2a-851b8bd087f1.roa File: db43588c-fbe9-3306-8e2a-851b8bd087f1.roa (raw, json) Hash identifier: jZETYqsu/rEXrg4tvtN7XuMHgK/iC0mOBNY7LSEhFR4= Subject key identifier: BC:3B:45:E9:23:C5:51:D8:E6:A9:F8:16:E3:F9:7F:BE:A6:B9:DE:8E Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584F57682BB68300425361B2DB00 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/db43588c-fbe9-3306-8e2a-851b8bd087f1.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 141.109.249.0/24 maxlen: 24 141.109.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:2b:b6:83:00:42:53:61:b2:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=9367eb4c-d1f9-4490-8fb6-27c8bdff0c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5e:9e:02:32:5a:3f:e4:bf:13:c0:2d:06:2b: 87:fc:cf:35:01:12:5e:1d:76:df:48:8b:fc:37:1d: 48:e1:00:7f:fe:7a:22:fd:29:90:cf:d1:04:8f:04: 57:9b:ab:fa:01:06:2b:4e:df:94:42:04:69:a4:8a: 98:65:44:68:7f:e2:1b:9d:12:81:e0:72:1f:29:50: 0c:cf:e7:42:5a:cf:d0:9e:75:ee:ee:31:b0:76:bf: 63:0f:02:46:f4:8a:b9:1b:df:2f:cc:c8:14:49:ee: a7:da:9e:bc:0b:84:d7:9d:93:c6:f8:51:82:5d:d8: 7f:d5:50:39:e4:e3:f1:53:9e:fa:7f:77:ae:5b:b4: f0:28:22:1c:4f:dc:a0:0e:d9:7e:94:d2:20:6a:7f: cc:20:b2:78:66:f9:06:ca:c8:59:f0:c2:b4:7b:43: 01:20:6d:96:04:39:16:84:25:5c:8c:f5:f9:5e:f1: 55:f4:bc:a5:d6:4d:31:69:f9:2e:17:a2:cd:a0:88: 3d:58:1f:a7:f3:3b:dc:71:7d:e0:d1:f6:c9:74:5e: f9:95:28:1c:0a:40:35:2c:2a:9b:fe:22:c3:b7:f5: 1e:32:0c:96:9c:d3:4d:c3:2d:fd:95:11:1b:8a:68: 7d:f1:6f:a9:61:b3:c3:ee:71:9d:ab:82:80:fe:fe: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3B:45:E9:23:C5:51:D8:E6:A9:F8:16:E3:F9:7F:BE:A6:B9:DE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/db43588c-fbe9-3306-8e2a-851b8bd087f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 141.109.249.0-141.109.250.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:21:0d:b6:a0:6e:dc:df:64:c0:1a:6e:bd:cd:2a:99:b8:db: 93:28:01:a9:88:2a:6a:44:6d:94:91:da:a5:98:2d:d8:3f:3a: 12:90:d6:e1:9f:9f:16:e4:a4:4b:f1:2a:96:59:e8:5d:55:7e: b7:d4:26:51:e7:8b:f1:0c:0a:b1:9c:a4:e7:51:91:6a:77:f0: bc:2f:ea:a7:3a:97:6b:2c:a1:db:13:ef:f6:73:fd:cc:2b:13: 79:54:40:fe:ba:05:46:bd:e6:3f:6d:cc:5d:94:17:97:85:7d: 22:44:ab:45:1e:41:4b:a1:70:b9:03:4a:60:43:94:81:3e:21: b1:9e:1d:be:4b:aa:f4:d2:12:a1:52:b0:da:57:2d:2b:77:7a: 4d:e5:d1:a3:84:cf:51:aa:f6:bd:9a:75:b2:ca:be:64:4d:5a: 3a:ad:ce:d9:01:94:0c:7b:a6:e7:94:2f:b9:bd:b2:dd:23:08: 54:a4:12:16:86:6d:c6:86:52:9d:91:80:1f:ad:3f:10:d6:7c: c5:3d:7b:68:ea:1f:bf:57:1a:8f:9f:29:1a:c1:19:95:c6:e5: 2b:12:23:40:e9:30:1b:4f:1a:2d:31:ae:c7:80:09:03:44:c4: 25:68:26:2d:93:98:75:06:69:0e:a3:d3:03:70:b1:53:c1:7e: bb:61:18:51 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9XaCu2gwBCU2Gy2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk OTM2N2ViNGMtZDFmOS00NDkwLThmYjYtMjdjOGJkZmYwYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV6eAjJaP+S/E8AtBiuH/M81ARJeHXbfSIv8 Nx1I4QB//noi/SmQz9EEjwRXm6v6AQYrTt+UQgRppIqYZURof+IbnRKB4HIfKVAM z+dCWs/QnnXu7jGwdr9jDwJG9Iq5G98vzMgUSe6n2p68C4TXnZPG+FGCXdh/1VA5 5OPxU576f3euW7TwKCIcT9ygDtl+lNIgan/MILJ4ZvkGyshZ8MK0e0MBIG2WBDkW hCVcjPX5XvFV9Lyl1k0xafkuF6LNoIg9WB+n8zvccX3g0fbJdF75lSgcCkA1LCqb /iLDt/UeMgyWnNNNwy39lREbimh98W+pYbPD7nGdq4KA/v4jCQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLw7RekjxVHY5qn4FuP5f76mud6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvZGI0MzU4OGMtZmJlOS0z MzA2LThlMmEtODUxYjhiZDA4N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACNbfkD BACNbfowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAsyENtqBu3N9kwBpuvc0qmbjbkygBqYgqakRtlJHapZgt 2D86EpDW4Z+fFuSkS/EqllnoXVV+t9QmUeeL8QwKsZyk51GRanfwvC/qpzqXayyh 2xPv9nP9zCsTeVRA/roFRr3mP23MXZQXl4V9IkSrRR5BS6FwuQNKYEOUgT4hsZ4d vkuq9NISoVKw2lctK3d6TeXRo4TPUar2vZp1ssq+ZE1aOq3O2QGUDHum55Qvub2y 3SMIVKQSFoZtxoZSnZGAH60/ENZ8xT17aOofv1caj58pGsEZlcblKxIjQOkwG08a LTGux4AJA0TEJWgmLZOYdQZpDqPTA3CxU8F+u2EYUQ== -----END CERTIFICATE-----Generated at Sat Oct 3 15:56:04 2026 by rpki-client