$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/7bce5189-501e-3792-a9a8-fd8a7a143649.roa File: 7bce5189-501e-3792-a9a8-fd8a7a143649.roa (raw, json) Hash identifier: s4ekeLhusSR5ic7154vqnV7HOpG4jadwXs/NsA3Zoqg= Subject key identifier: 43:D3:FF:40:46:46:A4:DC:D6:B8:21:E3:B7:F9:5D:8D:CD:75:01:46 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CD9BA7C029C07BD19780 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/7bce5189-501e-3792-a9a8-fd8a7a143649.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 170.52.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cd:9b:a7:c0:29:c0:7b:d1:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=44a6ed6f-2f79-41a9-b3a4-1c447ca442ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4b:52:7e:06:8e:1c:42:3b:79:67:ed:31:4f: 5f:35:f5:f8:2d:26:b6:46:16:20:60:e7:5c:04:9a: d8:6a:e9:10:bc:8e:73:80:08:51:7c:a3:2b:0d:76: 4c:f1:3f:c6:80:8f:b1:15:c1:29:d0:11:20:97:82: ff:f5:74:28:71:c3:31:4a:7f:b9:1d:26:9c:f0:7d: 4a:4e:44:71:45:47:73:25:4a:d5:01:c9:3e:8d:b2: 4a:31:b8:08:e7:70:16:37:9b:04:51:61:ab:38:ad: 83:08:bb:51:6c:cd:fc:fd:82:35:dd:52:ab:7c:35: 68:60:f0:16:25:9c:4d:2d:6c:af:53:0f:c4:b0:c0: f5:a9:80:76:da:94:77:4a:38:2c:ca:d2:ff:3f:61: 5f:21:4b:a0:f9:c0:5d:47:24:91:30:bb:93:fd:4a: 7f:74:31:0f:84:54:84:f6:40:0d:4b:53:e3:f4:19: ab:bb:cc:31:75:70:9b:3f:b9:27:4c:65:00:36:a9: 32:63:ce:55:0a:31:0e:44:4d:b0:72:4d:29:be:0d: a3:a2:23:80:36:2b:4c:e4:f3:6c:6b:48:8c:bb:92: 13:37:7f:24:5d:0c:6a:d1:3d:e7:1e:43:80:fb:c9: b5:f8:ad:1c:39:39:72:b2:33:85:35:bf:c7:7c:84: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D3:FF:40:46:46:A4:DC:D6:B8:21:E3:B7:F9:5D:8D:CD:75:01:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/7bce5189-501e-3792-a9a8-fd8a7a143649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 170.52.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5a:71:58:83:05:0c:65:9e:57:32:11:a3:42:2e:7d:bf:b1: 95:cc:21:9c:04:0b:94:e5:78:12:73:76:09:aa:f7:46:bf:5a: ee:ed:17:c6:b2:29:ae:56:96:52:66:63:7c:66:28:6e:a9:a5: 11:54:cd:54:fd:2f:bb:59:a7:c7:76:fd:1c:c6:73:d4:96:b2: 66:35:08:f4:bd:64:25:55:13:69:2c:a8:39:37:83:1f:1f:61: b8:af:de:28:98:d8:26:0f:92:1d:f1:38:31:64:65:fe:f1:c0: 43:ff:4f:06:0c:1e:27:28:7e:9a:bd:b1:db:69:04:8a:18:7a: 82:cb:70:81:49:0b:9d:78:96:e9:37:df:aa:a2:cd:f6:80:4a: 43:74:e8:4a:48:10:6e:9c:6e:ef:1a:6d:3a:71:04:f4:6d:e8: 5e:c0:9c:25:bb:10:20:c0:08:7d:75:0d:06:d0:b5:e4:c6:c3: 80:b6:19:8b:e7:f8:bb:b5:2b:77:42:8f:05:80:b4:7a:84:60: 41:e2:f4:24:d7:0e:61:1f:a7:24:1b:06:ef:74:d4:aa:5e:97: fb:41:65:6a:9a:b3:00:6d:c6:e2:18:11:cb:28:e4:72:e1:88: f9:66:24:67:af:a9:33:eb:ff:9c:1e:b7:bf:4c:53:60:a1:a1: e8:4a:e5:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZM2bp8ApwHvRl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NDRhNmVkNmYtMmY3OS00MWE5LWIzYTQtMWM0NDdjYTQ0MmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0tSfgaOHEI7eWftMU9fNfX4LSa2RhYgYOdc BJrYaukQvI5zgAhRfKMrDXZM8T/GgI+xFcEp0BEgl4L/9XQoccMxSn+5HSac8H1K TkRxRUdzJUrVAck+jbJKMbgI53AWN5sEUWGrOK2DCLtRbM38/YI13VKrfDVoYPAW JZxNLWyvUw/EsMD1qYB22pR3SjgsytL/P2FfIUug+cBdRySRMLuT/Up/dDEPhFSE 9kANS1Pj9Bmru8wxdXCbP7knTGUANqkyY85VCjEORE2wck0pvg2joiOANitM5PNs a0iMu5ITN38kXQxq0T3nHkOA+8m1+K0cOTlysjOFNb/HfIRYUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPT/0BGRqTc1rgh47f5XY3NdQFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvN2JjZTUxODktNTAxZS0z NzkyLWE5YTgtZmQ4YTdhMTQzNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlacViDBQxlnlcyEaNCLn2/sZXMIZwEC5TleBJzdgmq90a/Wu7tF8ay Ka5WllJmY3xmKG6ppRFUzVT9L7tZp8d2/RzGc9SWsmY1CPS9ZCVVE2ksqDk3gx8f Ybiv3iiY2CYPkh3xODFkZf7xwEP/TwYMHicofpq9sdtpBIoYeoLLcIFJC514luk3 36qizfaASkN06EpIEG6cbu8abTpxBPRt6F7AnCW7ECDACH11DQbQteTGw4C2GYvn +Lu1K3dCjwWAtHqEYEHi9CTXDmEfpyQbBu901Kpel/tBZWqaswBtxuIYEcso5HLh iPlmJGevqTPr/5wet79MU2ChoehK5UE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:57 2026 by rpki-client