$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/032db2cf-b879-3203-867a-fedba2c1f577.roa File: 032db2cf-b879-3203-867a-fedba2c1f577.roa (raw, json) Hash identifier: i/ETJoYCgRtV+6H5c4HyYtqk8vEHLzWa1D9Y3Q9nn34= Subject key identifier: 77:1C:5C:26:AA:75:F2:FF:C3:24:9A:23:70:60:B5:6B:9C:9C:60:6E Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CDAE13EC4EBEB4AE9080 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/032db2cf-b879-3203-867a-fedba2c1f577.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 170.52.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cd:ae:13:ec:4e:be:b4:ae:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=9b7c671c-e3c6-46ab-b877-15204e490842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:30:18:cf:e0:35:3b:d7:4e:c4:f8:a7:1a:e4: c5:33:e5:42:26:1e:fd:eb:c6:e1:0e:97:e1:a4:40: 0c:42:a7:27:47:64:5c:eb:c3:42:e0:19:f5:ae:52: d5:0a:e1:95:98:b4:a5:73:0c:66:f5:b9:52:62:ef: 5a:83:10:c4:06:0c:8b:cb:2a:de:42:46:c1:e3:9a: ce:d4:ba:ce:3e:1e:fe:33:ce:b9:89:23:e8:f5:24: 78:31:57:c8:a8:ce:ea:4a:07:70:93:88:4f:07:ac: 0c:9b:1a:8b:25:b6:c0:64:2d:37:63:0d:56:a7:e2: 17:37:87:8b:47:03:34:e6:2b:74:e3:81:72:74:9c: 22:8b:0c:3f:29:e5:3e:62:e1:b6:0a:76:3b:0f:70: 83:93:20:aa:0f:6e:fe:e8:4a:07:d6:48:8d:16:dd: 81:96:d5:17:d0:5b:f4:57:21:dd:de:56:f9:cb:13: f7:ca:70:38:a1:b8:12:64:c6:1f:3f:b4:9c:51:a3: 69:a8:54:3f:57:f9:70:60:a1:b4:31:9c:bb:ee:b5: 7d:7b:d3:b9:52:c6:a5:a4:9f:67:86:bc:05:12:ac: 52:93:ac:0e:5e:f3:64:be:bc:2f:c9:3b:fa:29:b1: 1a:4d:9d:1d:71:3e:5b:89:92:c7:bd:46:bc:62:08: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1C:5C:26:AA:75:F2:FF:C3:24:9A:23:70:60:B5:6B:9C:9C:60:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/032db2cf-b879-3203-867a-fedba2c1f577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 170.52.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:eb:46:34:a0:02:05:8b:f5:cb:33:07:07:ad:cf:98:bc:8f: 1b:74:c6:1d:f1:49:de:3b:69:38:80:15:3b:27:d5:d4:eb:c0: 59:46:e9:e2:5c:11:0a:2b:37:54:17:bd:53:33:f9:2a:f7:c5: 9a:f1:81:7c:92:5c:7f:f0:a1:6d:af:bf:cd:8a:65:eb:f8:a1: 0e:28:1c:c6:5d:28:dc:18:40:a9:b1:d9:de:1e:51:c8:e6:43: 4f:62:fb:f2:5c:95:93:90:95:e4:c2:e1:d5:8f:a4:42:1f:38: d7:50:12:ee:e0:1e:1b:36:8d:7e:72:34:2d:6c:77:c6:c8:8d: 9d:e1:c4:25:a9:75:7c:0f:7c:9c:c4:b3:31:3e:33:b7:82:88: 40:c1:16:ae:18:8b:7d:5e:9b:b6:6c:39:a6:a0:53:51:8d:53: e3:be:e5:1f:fa:99:f8:e7:6c:a4:72:d1:07:ce:f5:cc:09:23: 3e:a0:d7:b6:b7:26:64:10:fd:a2:4f:b5:c7:ac:21:dc:5e:59: 18:b2:be:97:2e:20:4a:b8:4c:38:78:fa:3c:0e:e8:01:8d:f6: 2e:ae:b5:d3:99:dc:7f:f9:98:21:b8:a9:24:b5:79:be:7e:d2: 58:25:53:f1:06:b3:3d:a8:3e:63:37:f2:a2:07:a7:b8:ad:90: 9f:57:b1:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZM2uE+xOvrSukIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OWI3YzY3MWMtZTNjNi00NmFiLWI4NzctMTUyMDRlNDkwODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTAYz+A1O9dOxPinGuTFM+VCJh7968bhDpfh pEAMQqcnR2Rc68NC4Bn1rlLVCuGVmLSlcwxm9blSYu9agxDEBgyLyyreQkbB45rO 1LrOPh7+M865iSPo9SR4MVfIqM7qSgdwk4hPB6wMmxqLJbbAZC03Yw1Wp+IXN4eL RwM05it044FydJwiiww/KeU+YuG2CnY7D3CDkyCqD27+6EoH1kiNFt2BltUX0Fv0 VyHd3lb5yxP3ynA4obgSZMYfP7ScUaNpqFQ/V/lwYKG0MZy77rV9e9O5UsalpJ9n hrwFEqxSk6wOXvNkvrwvyTv6KbEaTZ0dcT5biZLHvUa8YggyKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHccXCaqdfL/wySaI3BgtWucnGBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMDMyZGIyY2YtYjg3OS0z MjAzLTg2N2EtZmVkYmEyYzFmNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqjQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbrRjSgAgWL9cszBwetz5i8jxt0xh3xSd47aTiAFTsn1dTrwFlG6eJc EQorN1QXvVMz+Sr3xZrxgXySXH/woW2vv82KZev4oQ4oHMZdKNwYQKmx2d4eUcjm Q09i+/JclZOQleTC4dWPpEIfONdQEu7gHhs2jX5yNC1sd8bIjZ3hxCWpdXwPfJzE szE+M7eCiEDBFq4Yi31em7ZsOaagU1GNU+O+5R/6mfjnbKRy0QfO9cwJIz6g17a3 JmQQ/aJPtcesIdxeWRiyvpcuIEq4TDh4+jwO6AGN9i6utdOZ3H/5mCG4qSS1eb5+ 0lglU/EGsz2oPmM38qIHp7itkJ9XsR0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:09 2026 by rpki-client