$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa File: 4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa (raw, json) Hash identifier: Qi/2vwtYxOP7HXu0mDtczD8z3fxWeMqUk50yzL9s3xw= Subject key identifier: E5:71:22:B9:15:7F:7F:EC:C3:B6:BB:15:99:C0:BB:52:83:37:64:91 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CB039F0E93C2FA33130980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 170.52.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:03:9f:0e:93:c2:fa:33:13:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=472f4232-d690-484b-9992-7f01afef25d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:76:2a:a0:cd:60:c1:8d:87:d8:da:23:a5:13: 49:9f:0b:12:c5:c3:3f:66:05:04:c2:3d:d1:8d:29: 79:0c:12:7f:db:e9:bf:aa:d3:0f:63:44:1c:29:2d: 1b:c3:66:5d:62:50:ce:0f:31:87:51:8f:17:f5:89: 9b:df:6b:b3:c5:bd:c5:03:f4:95:88:ed:85:60:5e: 0a:5b:42:f8:d2:5a:c7:b1:c0:1d:5e:95:a7:cf:ef: a6:7d:43:7b:02:7f:bd:96:04:13:5d:1d:9d:77:75: b8:3a:3f:a1:de:f2:cf:60:8e:15:f7:7a:31:31:0e: 9e:56:57:16:d3:c5:e0:08:e9:41:97:d8:d0:10:c5: 5a:50:19:22:83:e6:64:7a:fb:a2:5e:e9:1c:1e:bd: 97:94:8c:04:e2:83:9c:0a:ff:a4:7c:9c:8a:3d:fa: 2a:d7:27:23:67:6f:54:9e:64:0e:a5:42:8e:6e:6e: 16:18:60:1b:d5:82:f9:35:6c:53:64:93:de:0f:5e: c0:29:7b:e0:e6:10:5e:63:61:e6:cb:1b:fd:f1:ee: bb:9c:a2:86:ee:c9:b7:2d:e4:2e:eb:f7:4e:39:81: 99:7a:cf:c7:86:20:24:71:1a:d6:57:2c:4d:de:80: 0d:ca:9f:1c:4d:e6:66:d6:26:ba:ef:77:9e:06:29: fb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:71:22:B9:15:7F:7F:EC:C3:B6:BB:15:99:C0:BB:52:83:37:64:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4989ecc3-7b1c-3a21-b1d9-cee199ddf8ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.52.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3c:51:a2:bd:fa:cd:7b:bc:c3:4c:7d:44:cc:85:37:0e:9c: 2f:6a:4c:fb:f3:87:db:36:18:3b:b5:6d:c0:78:5b:de:2b:07: 86:05:fd:1b:6a:90:cc:e0:6e:9d:99:be:78:c0:db:2d:3a:ae: 1d:2b:af:e4:a5:dc:40:b2:e8:43:58:16:dc:79:0e:29:47:c8: 2d:b5:a6:1c:0e:f6:de:66:c4:3c:0e:78:d5:84:c8:97:29:b9: 5d:2d:a7:ae:4e:8b:78:35:20:ce:1d:09:b2:7d:75:53:21:73: 94:b8:81:81:79:63:b6:cd:2e:c7:22:6a:0e:bd:68:f9:40:62: df:0d:b5:03:d3:2b:62:bf:89:05:77:c9:27:4b:17:ce:e9:fb: bd:08:f6:04:19:d3:8c:df:dd:e6:2f:9f:8f:b0:ca:e0:cb:9d: 96:4c:52:d2:d2:63:24:bc:6d:c6:5d:71:57:6d:8c:65:9b:8e: db:6b:a2:68:bc:a7:41:86:86:37:61:60:c5:20:5a:78:b4:24: b0:68:71:7f:70:f1:e1:95:8e:df:b8:ef:82:6b:0e:04:84:88: 6c:ba:62:83:ac:f0:fb:92:ae:08:fc:9f:81:6d:ce:f9:7f:05: 12:b5:64:34:94:e3:35:6b:b1:d1:8e:77:0a:c5:66:fe:96:e2: 1c:00:1d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GywOfDpPC+jMTCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk NDcyZjQyMzItZDY5MC00ODRiLTk5OTItN2YwMWFmZWYyNWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnYqoM1gwY2H2NojpRNJnwsSxcM/ZgUEwj3R jSl5DBJ/2+m/qtMPY0QcKS0bw2ZdYlDODzGHUY8X9Ymb32uzxb3FA/SViO2FYF4K W0L40lrHscAdXpWnz++mfUN7An+9lgQTXR2dd3W4Oj+h3vLPYI4V93oxMQ6eVlcW 08XgCOlBl9jQEMVaUBkig+ZkevuiXukcHr2XlIwE4oOcCv+kfJyKPfoq1ycjZ29U nmQOpUKObm4WGGAb1YL5NWxTZJPeD17AKXvg5hBeY2Hmyxv98e67nKKG7sm3LeQu 6/dOOYGZes/HhiAkcRrWVyxN3oANyp8cTeZm1ia673eeBin7IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVxIrkVf3/sw7a7FZnAu1KDN2SRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDk4OWVjYzMtN2IxYy0z YTIxLWIxZDktY2VlMTk5ZGRmOGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM8UaK9+s17vMNMfUTMhTcOnC9qTPvzh9s2GDu1bcB4W94rB4YF/Rtq kMzgbp2ZvnjA2y06rh0rr+Sl3ECy6ENYFtx5DilHyC21phwO9t5mxDwOeNWEyJcp uV0tp65Oi3g1IM4dCbJ9dVMhc5S4gYF5Y7bNLsciag69aPlAYt8NtQPTK2K/iQV3 ySdLF87p+70I9gQZ04zf3eYvn4+wyuDLnZZMUtLSYyS8bcZdcVdtjGWbjttromi8 p0GGhjdhYMUgWni0JLBocX9w8eGVjt+474JrDgSEiGy6YoOs8PuSrgj8n4Ftzvl/ BRK1ZDSU4zVrsdGOdwrFZv6W4hwAHTo= -----END CERTIFICATE-----Generated at Wed May 13 06:50:44 2026 by rpki-client