$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa File: 388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa (raw, json) Hash identifier: +srbNk4BwDzrBelnL+vXthQ9+WgQL7slqsO3wkkIdrU= Subject key identifier: 0C:A7:30:4A:6D:C5:E4:C0:06:CC:43:D1:1F:48:AE:6C:A3:6A:20:A0 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584EC371C47B5A0A338AFE0A11B0 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 16509 IP address blocks: 207.211.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:c4:7b:5a:0a:33:8a:fe:0a:11:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=dd6bb769-d4f8-4fae-b284-ea7d2312852b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:98:76:17:96:fa:1b:f9:bd:b0:52:57:c1: 50:e0:7c:26:fc:d0:21:ea:32:8c:35:84:a5:5b:b5: a3:bc:eb:bb:3e:7c:9f:96:25:d8:a4:29:bc:b8:6e: 0d:a3:21:fe:90:a9:64:47:92:c6:02:6c:63:4d:9d: 65:cc:d4:48:91:bd:1f:82:81:87:6e:af:c6:ed:82: 46:0b:b7:8a:0e:aa:91:23:00:eb:c5:8e:21:46:68: 0c:ca:1d:9d:f5:fa:22:9e:32:d5:c9:1c:e2:de:b3: 35:48:e9:14:28:35:ed:43:d6:e3:f4:33:a8:b7:d6: f4:fa:08:87:d5:91:fd:94:e0:62:66:cb:37:e3:9f: 46:45:b7:68:b8:0c:f9:ec:a1:b5:b1:15:46:97:17: 56:20:b5:f4:cc:18:40:52:18:1b:82:b1:5b:dd:70: fc:70:10:96:e0:e3:3f:5b:21:10:3e:39:9f:c7:f0: cd:af:10:b5:21:12:ad:26:e6:3b:7e:de:dc:35:55: 3e:d8:b8:b2:d1:7b:e8:b2:a3:33:71:20:54:f5:57: f7:0c:5e:dd:81:ea:42:f3:c3:94:c3:59:31:72:85: b7:fb:fa:e2:be:1d:f4:d1:da:10:d0:ac:97:d5:a7: 95:4d:14:71:c1:df:73:03:fd:d2:a3:b3:25:04:2e: 5f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A7:30:4A:6D:C5:E4:C0:06:CC:43:D1:1F:48:AE:6C:A3:6A:20:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 207.211.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:53:65:f2:43:e2:b0:d1:49:4e:ca:fb:b5:a7:14:4f:8b:8d: c3:9d:67:bd:6a:77:3c:55:85:46:e6:da:0b:76:2b:57:e8:f7: 12:6c:d8:4b:9b:56:55:c7:19:c9:20:ed:be:6b:64:15:11:25: a6:ea:4f:99:4c:5d:9c:92:37:7f:46:1b:c4:49:bf:3d:cf:5c: 37:f1:01:89:41:50:e8:30:ed:c9:c4:5c:d0:17:75:df:34:4b: 44:88:e9:e6:cf:e7:14:f8:1a:12:f1:e6:c2:be:af:76:3f:9f: 12:b6:56:50:85:6a:fb:02:67:eb:51:af:0c:8c:61:7b:49:6c: db:7c:84:bc:12:4a:ed:e3:95:21:44:7e:d6:11:8a:e0:b5:4b: 92:a9:4f:7f:2b:e8:4e:f9:65:fe:03:10:5b:ab:92:70:81:3c: db:46:a9:95:88:2b:53:06:94:d1:21:30:5d:0a:26:7a:ba:28: a5:c7:da:7b:01:cd:10:8e:25:b5:b1:73:c6:f2:9b:e8:6d:20: 1d:62:2e:de:e0:9e:2e:06:91:04:07:99:8d:44:4b:17:0b:63: 46:c9:14:a8:66:c1:e5:d1:a9:dc:ca:84:16:f7:0a:94:49:f9: 7d:4c:98:c3:6e:83:8c:8c:f5:5c:45:fa:c4:6e:55:2b:38:2c: d4:1b:1f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccR7Wgoziv4KEbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZGQ2YmI3NjktZDRmOC00ZmFlLWIyODQtZWE3ZDIzMTI4NTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbWYdheW+hv5vbBSV8FQ4Hwm/NAh6jKMNYSl W7WjvOu7PnyfliXYpCm8uG4NoyH+kKlkR5LGAmxjTZ1lzNRIkb0fgoGHbq/G7YJG C7eKDqqRIwDrxY4hRmgMyh2d9foinjLVyRzi3rM1SOkUKDXtQ9bj9DOot9b0+giH 1ZH9lOBiZss3459GRbdouAz57KG1sRVGlxdWILX0zBhAUhgbgrFb3XD8cBCW4OM/ WyEQPjmfx/DNrxC1IRKtJuY7ft7cNVU+2Liy0XvosqMzcSBU9Vf3DF7dgepC88OU w1kxcoW3+/rivh300doQ0KyX1aeVTRRxwd9zA/3So7MlBC5f1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAynMEptxeTABsxD0R9IrmyjaiCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvMzg4Y2U5NWEtMGU1ZC0z MzlkLWI4MTAtY2Y1OWIxYjAwZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZTZfJD4rDRSU7K+7WnFE+LjcOdZ71qdzxVhUbm2gt2K1fo9xJs2Eub VlXHGckg7b5rZBURJabqT5lMXZySN39GG8RJvz3PXDfxAYlBUOgw7cnEXNAXdd80 S0SI6ebP5xT4GhLx5sK+r3Y/nxK2VlCFavsCZ+tRrwyMYXtJbNt8hLwSSu3jlSFE ftYRiuC1S5KpT38r6E75Zf4DEFurknCBPNtGqZWIK1MGlNEhMF0KJnq6KKXH2nsB zRCOJbWxc8bym+htIB1iLt7gni4GkQQHmY1ESxcLY0bJFKhmweXRqdzKhBb3CpRJ +X1MmMNug4yM9VxF+sRuVSs4LNQbH8k= -----END CERTIFICATE-----Generated at Mon Aug 10 09:57:53 2026 by rpki-client