$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa File: c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa (raw, json) Hash identifier: a6z7Gti9fnmQ9wY0rNBSsrZJpcoCTmov8U0xq6XpEWk= Subject key identifier: 45:CE:35:66:CE:41:7F:4D:E1:61:41:F4:A9:8A:91:5F:EE:FA:BA:15 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E50115B917911C21334C280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 209.17.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:11:5b:91:79:11:c2:13:34:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=7c125f4d-0ca4-4403-a055-b29fff12c139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:49:69:61:dd:5b:7d:3c:c1:9e:0e:c2:db: b0:0e:ff:0a:88:60:fc:f5:12:2b:4a:d6:d5:86:6d: 21:37:8e:db:bd:81:a9:6e:90:2e:aa:14:fb:b2:64: ce:3d:4e:41:de:e3:b5:8d:82:b1:9e:80:18:15:d5: 17:33:56:64:54:56:82:bb:16:a2:1f:70:4a:51:c4: d7:19:01:49:2e:f5:44:cd:b7:15:ea:08:e7:eb:81: e3:d7:16:d5:2e:9e:19:3f:94:0e:f4:cc:94:c8:ab: 60:fe:25:b7:fc:36:09:6a:53:33:21:32:bd:6c:1a: 88:2f:e0:e1:2e:0c:77:84:80:c8:ef:eb:56:ff:f4: ef:39:48:59:fd:cd:96:c2:dd:d7:23:d1:23:3a:ec: 22:0d:7a:55:61:04:55:cc:e8:42:03:66:d4:5e:55: e9:a4:de:c6:83:dc:85:56:7e:18:cf:e9:d7:8c:5b: bb:d6:96:a4:f6:0e:38:20:1a:74:43:e4:f5:d4:63: ac:ee:8a:7d:d2:1f:f1:2a:14:73:5a:5e:62:a8:8f: 4b:d3:27:b8:d3:71:02:05:bd:fd:4c:18:4a:44:17: 39:ac:a1:e9:8c:49:5c:e9:60:96:1e:26:ac:65:e7: e0:11:ac:7f:f8:ad:57:73:77:33:32:b0:35:b2:7d: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CE:35:66:CE:41:7F:4D:E1:61:41:F4:A9:8A:91:5F:EE:FA:BA:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 209.17.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:98:b5:7f:17:de:95:82:4c:2e:3b:69:38:e8:96:30:9c:ee: 39:3f:aa:e1:7b:23:68:b8:ec:e8:11:35:84:58:21:49:3c:ee: 83:bd:f7:b7:ec:f6:23:28:60:f7:e6:9b:9d:8d:b3:df:b4:ba: ca:de:91:83:f2:7d:d6:72:18:66:d9:db:53:73:c1:2d:80:28: e4:d6:81:41:b9:64:a5:05:e4:20:6a:53:b2:f5:4e:10:fe:1b: c1:9b:4c:36:4b:7e:89:21:b1:27:89:9a:fa:63:a7:26:a9:43: bd:f7:8f:a6:4c:15:69:a9:f1:b3:a3:d3:97:42:6a:95:c3:9d: da:08:52:89:74:fc:f1:52:ba:8e:f7:d3:fb:65:b9:4f:38:e4: 60:b2:65:6d:06:cc:01:3c:ab:66:38:fc:6e:76:87:2a:fa:d7: 73:9c:99:cd:14:5d:49:0f:61:aa:d9:85:65:42:24:c8:a1:ad: 20:c3:fa:f6:f7:59:4c:65:f5:26:bf:08:e6:1d:20:b5:1c:2d: 4f:20:50:49:3d:87:ec:b8:40:40:4c:d5:19:43:ae:ab:2e:a5: 49:51:c3:59:5c:a9:75:52:cf:b0:27:c2:1d:3f:de:22:ca:8e: b3:da:35:b8:cf:28:e3:ab:52:5d:4f:48:d1:a8:c2:e9:61:70: e9:1c:31:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBFbkXkRwhM0woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk N2MxMjVmNGQtMGNhNC00NDAzLWEwNTUtYjI5ZmZmMTJjMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrtJaWHdW308wZ4OwtuwDv8KiGD89RIrStbV hm0hN47bvYGpbpAuqhT7smTOPU5B3uO1jYKxnoAYFdUXM1ZkVFaCuxaiH3BKUcTX GQFJLvVEzbcV6gjn64Hj1xbVLp4ZP5QO9MyUyKtg/iW3/DYJalMzITK9bBqIL+Dh Lgx3hIDI7+tW//TvOUhZ/c2Wwt3XI9EjOuwiDXpVYQRVzOhCA2bUXlXppN7Gg9yF Vn4Yz+nXjFu71pak9g44IBp0Q+T11GOs7op90h/xKhRzWl5iqI9L0ye403ECBb39 TBhKRBc5rKHpjElc6WCWHiasZefgEax/+K1Xc3czMrA1sn2lewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXONWbOQX9N4WFB9KmKkV/u+roVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzNmYjRjMmItMmU4OC0z ZDA4LTg1ZmQtODBlNzkxZWJjNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSYtX8X3pWCTC47aTjoljCc7jk/quF7I2i47OgRNYRYIUk87oO997fs 9iMoYPfmm52Ns9+0usrekYPyfdZyGGbZ21NzwS2AKOTWgUG5ZKUF5CBqU7L1ThD+ G8GbTDZLfokhsSeJmvpjpyapQ733j6ZMFWmp8bOj05dCapXDndoIUol0/PFSuo73 0/tluU845GCyZW0GzAE8q2Y4/G52hyr613Ocmc0UXUkPYarZhWVCJMihrSDD+vb3 WUxl9Sa/COYdILUcLU8gUEk9h+y4QEBM1RlDrqsupUlRw1lcqXVSz7Anwh0/3iLK jrPaNbjPKOOrUl1PSNGowulhcOkcMcc= -----END CERTIFICATE-----Generated at Wed May 13 04:28:37 2026 by rpki-client