$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa File: b98046e9-e215-3beb-b627-8d082108f26e.roa (raw, json) Hash identifier: NYvdbel2TRN6it1AZ1vC0JkPhGNG+Yhof5PE9JPp+9E= Subject key identifier: D1:E5:02:12:0B:5D:02:DD:7E:AF:CC:60:4A:54:99:97:F1:E6:BE:A2 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584B1AD17C45EDE755353A26FEA0 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 170.203.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:7c:45:ed:e7:55:35:3a:26:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=6495344f-fbe4-44e9-9827-4c826de5d1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bd:d8:b1:8d:3b:6c:33:f2:3d:67:50:06:b2: 2a:2e:d7:32:df:ad:90:d0:19:7e:27:5e:49:d4:0d: 8a:3a:a0:b1:f7:c4:b0:c9:5b:b4:15:1b:25:52:27: 49:50:96:0f:bd:3c:1f:21:46:9a:ec:a6:d5:68:ef: 78:ca:54:da:8b:65:56:a4:2c:bb:1b:51:87:b2:43: b6:8c:8f:7e:82:8b:2c:32:86:00:43:08:09:1c:c8: a6:94:e2:8e:fc:dd:34:21:1f:32:3e:33:0b:95:20: 19:65:19:9a:27:b4:b1:a8:5e:90:04:08:98:cd:b5: 30:f3:dd:8d:c9:f2:9f:02:1b:70:d3:b3:72:4e:f3: 42:a2:34:87:a5:0e:a8:fa:34:d9:eb:4a:9c:3f:98: 17:21:2a:e5:93:e9:2d:3c:a6:e0:74:44:a8:0b:cf: 31:bf:2c:20:d9:0a:a9:36:77:b1:ee:80:e9:4b:db: f0:60:c8:e6:81:d7:50:25:33:28:9e:c8:f7:c0:9e: f3:23:91:11:6c:2d:7b:89:8a:87:12:11:97:2a:35: 68:07:2f:2c:88:79:33:ec:24:c6:31:90:11:9b:da: 1b:c0:c9:83:75:a7:d6:7d:5f:15:a3:87:4f:a9:80: 89:c4:17:73:9e:e7:5b:dc:ac:30:4f:0c:b7:49:50: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E5:02:12:0B:5D:02:DD:7E:AF:CC:60:4A:54:99:97:F1:E6:BE:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 170.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:10:ba:4b:ed:00:b4:3f:ca:49:ef:fa:d1:f8:a4:22:e4:2f: 06:c3:18:3d:25:2a:14:3b:b7:3f:fd:36:5a:b1:a1:e4:f0:06: 15:e3:1a:f4:21:85:6a:51:a1:fd:f4:2e:46:2e:57:0d:dc:44: 75:a6:80:ec:08:56:6b:11:4f:91:00:43:4a:73:13:bc:66:ac: 25:63:3f:11:19:00:68:53:a5:35:b5:bb:3f:a6:9c:8c:0c:d5: 85:14:87:f9:c6:d3:33:5e:5f:00:06:4f:9b:1c:69:eb:1f:5e: a5:20:0f:65:2d:4e:9f:24:cf:b1:c5:3b:59:fb:44:7a:ad:5f: 67:2e:5a:ff:23:75:25:d2:9b:38:df:ac:48:d6:6a:0a:73:96: 46:c7:ab:c2:2d:4e:7a:60:76:43:17:34:fe:ca:61:6c:5f:52: 5c:75:d5:54:ca:6b:89:bb:b3:02:ca:fb:3c:41:27:1b:19:cc: 54:9f:8f:5d:21:ff:aa:df:e5:c4:e6:1b:70:23:12:d8:24:06: 62:90:2f:76:cf:8d:5f:78:c0:46:24:a1:0c:7c:69:ad:b9:22: e4:bf:5a:cb:b5:0a:ec:99:c8:b2:8d:25:75:05:79:b5:a4:17: bd:8b:6c:e4:be:dc:91:6c:04:c9:9f:d7:4a:c3:56:1b:67:35: 33:d0:2b:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XxF7edVNTom/qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NjQ5NTM0NGYtZmJlNC00NGU5LTk4MjctNGM4MjZkZTVkMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b3YsY07bDPyPWdQBrIqLtcy362Q0Bl+J15J 1A2KOqCx98SwyVu0FRslUidJUJYPvTwfIUaa7KbVaO94ylTai2VWpCy7G1GHskO2 jI9+gossMoYAQwgJHMimlOKO/N00IR8yPjMLlSAZZRmaJ7SxqF6QBAiYzbUw892N yfKfAhtw07NyTvNCojSHpQ6o+jTZ60qcP5gXISrlk+ktPKbgdESoC88xvywg2Qqp Nnex7oDpS9vwYMjmgddQJTMonsj3wJ7zI5ERbC17iYqHEhGXKjVoBy8siHkz7CTG MZARm9obwMmDdafWfV8Vo4dPqYCJxBdznudb3KwwTwy3SVAhgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHlAhILXQLdfq/MYEpUmZfx5r6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvYjk4MDQ2ZTktZTIxNS0z YmViLWI2MjctOGQwODIxMDhmMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqssQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANMQukvtALQ/yknv+tH4pCLkLwbDGD0lKhQ7tz/9NlqxoeTwBhXjGvQh hWpRof30LkYuVw3cRHWmgOwIVmsRT5EAQ0pzE7xmrCVjPxEZAGhTpTW1uz+mnIwM 1YUUh/nG0zNeXwAGT5scaesfXqUgD2UtTp8kz7HFO1n7RHqtX2cuWv8jdSXSmzjf rEjWagpzlkbHq8ItTnpgdkMXNP7KYWxfUlx11VTKa4m7swLK+zxBJxsZzFSfj10h /6rf5cTmG3AjEtgkBmKQL3bPjV94wEYkoQx8aa25IuS/Wsu1CuyZyLKNJXUFebWk F72LbOS+3JFsBMmf10rDVhtnNTPQK9Q= -----END CERTIFICATE-----Generated at Wed Oct 8 23:16:34 2025 by rpki-client