$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/db43588c-fbe9-3306-8e2a-851b8bd087f1.roa File: db43588c-fbe9-3306-8e2a-851b8bd087f1.roa (raw, json) Hash identifier: lDUMF4q4THI5P1sNdK26o6MHtNGcxs/7qSfzFNwdNM8= Subject key identifier: E2:42:0B:E6:AA:1C:58:61:86:F6:32:19:B6:A4:46:6E:D1:C1:11:6D Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584EB57C459DC0A136ABD6556280 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/db43588c-fbe9-3306-8e2a-851b8bd087f1.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 16509 IP address blocks: 141.109.249.0/24 maxlen: 24 141.109.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:45:9d:c0:a1:36:ab:d6:55:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=138a3cfe-c8d0-44f9-adb3-f9ea2b0e09b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:68:14:98:f8:68:eb:6c:17:27:8b:ef:9c:95: 8d:72:6d:3a:ba:b5:95:73:12:78:9b:05:bf:83:7d: c6:75:69:1f:d3:1b:cc:6b:02:7b:b4:54:e6:fc:26: 78:10:f6:39:23:af:42:f7:50:2e:e3:15:28:b5:77: e7:d0:70:40:94:0d:d0:a4:f7:84:df:ff:9a:df:13: 91:71:e3:48:ee:aa:49:44:25:b4:dd:ce:8d:2e:c6: 4b:3b:4e:87:b2:2a:58:16:6d:4a:cb:f9:6f:de:31: b8:d3:c3:93:67:fb:22:7f:3c:ed:1e:2e:be:86:d9: d6:86:92:18:f6:26:41:0d:2b:1d:c3:94:ac:17:3d: 68:54:6b:02:af:32:76:91:c4:bc:0d:d7:fa:f2:f1: 54:64:2e:68:2b:5e:18:55:a1:0f:f1:5a:cf:5d:ac: 19:92:95:d9:6d:17:7e:b4:55:c7:c4:48:f2:46:91: 3b:51:b2:5f:b8:26:c1:e9:b4:ce:9a:52:63:42:a8: f3:94:be:f9:b5:31:5d:b6:32:6f:c3:0f:85:e6:ec: 41:a0:90:b8:c0:38:be:1e:65:02:95:21:9b:ed:fd: 57:de:26:fb:38:29:ae:20:32:9c:1b:19:d0:17:1a: ed:a4:51:6d:71:ef:2f:1b:8b:42:5c:cc:1e:8b:92: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:42:0B:E6:AA:1C:58:61:86:F6:32:19:B6:A4:46:6E:D1:C1:11:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/db43588c-fbe9-3306-8e2a-851b8bd087f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 141.109.249.0-141.109.250.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0f:42:cd:b9:f3:2c:12:3a:f5:89:cf:41:83:b5:d2:1b:76: b1:f6:7c:76:de:4a:a3:7f:b0:8d:db:c4:aa:94:71:4d:fa:e8: a6:ec:36:71:e5:44:77:8e:de:01:72:b6:6e:f5:7e:17:7b:ae: 32:cb:b4:9b:59:8c:0d:40:09:7c:6b:55:94:4b:07:fa:d9:f0: 06:1f:0e:cc:bb:92:4f:33:44:27:3c:08:f8:40:b6:cb:4d:1d: 52:54:de:ac:d1:79:e8:b8:da:1c:0e:b6:30:57:77:d4:85:4e: 24:5b:1f:d7:35:ff:f4:af:d4:bd:43:fa:78:1a:fb:c1:d5:e7: d7:ac:ff:aa:ca:cd:94:8d:a2:d7:77:67:8e:be:51:a4:70:b0: d3:1f:30:d0:aa:16:ff:5e:4c:b2:46:f1:c2:7a:d3:07:d0:9b: 4d:e4:6b:53:c5:4c:4a:8b:f5:b3:73:fc:8e:06:88:21:c3:45: 19:85:5d:6d:10:6f:a7:42:32:f9:b3:81:f7:52:f1:0e:e0:79: fc:fe:12:f3:9b:28:18:e0:ed:ed:32:36:05:1a:23:fb:19:07: 97:69:22:43:a7:cf:b2:d9:82:54:85:6c:62:62:fa:53:95:fc: 98:29:3f:b3:65:f9:95:4f:b2:06:1e:e7:e3:cc:0e:3a:6f:c6: 45:18:dd:36 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE61fEWdwKE2q9ZVYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk MTM4YTNjZmUtYzhkMC00NGY5LWFkYjMtZjllYTJiMGUwOWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2gUmPho62wXJ4vvnJWNcm06urWVcxJ4mwW/ g33GdWkf0xvMawJ7tFTm/CZ4EPY5I69C91Au4xUotXfn0HBAlA3QpPeE3/+a3xOR ceNI7qpJRCW03c6NLsZLO06HsipYFm1Ky/lv3jG408OTZ/sifzztHi6+htnWhpIY 9iZBDSsdw5SsFz1oVGsCrzJ2kcS8Ddf68vFUZC5oK14YVaEP8VrPXawZkpXZbRd+ tFXHxEjyRpE7UbJfuCbB6bTOmlJjQqjzlL75tTFdtjJvww+F5uxBoJC4wDi+HmUC lSGb7f1X3ib7OCmuIDKcGxnQFxrtpFFtce8vG4tCXMwei5L44QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOJCC+aqHFhhhvYyGbakRm7RwRFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvZGI0MzU4OGMtZmJlOS0z MzA2LThlMmEtODUxYjhiZDA4N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACNbfkD BACNbfowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAHQ9CzbnzLBI69YnPQYO10ht2sfZ8dt5Ko3+wjdvEqpRx Tfropuw2ceVEd47eAXK2bvV+F3uuMsu0m1mMDUAJfGtVlEsH+tnwBh8OzLuSTzNE JzwI+EC2y00dUlTerNF56LjaHA62MFd31IVOJFsf1zX/9K/UvUP6eBr7wdXn16z/ qsrNlI2i13dnjr5RpHCw0x8w0KoW/15MskbxwnrTB9CbTeRrU8VMSov1s3P8jgaI IcNFGYVdbRBvp0Iy+bOB91LxDuB5/P4S85soGODt7TI2BRoj+xkHl2kiQ6fPstmC VIVsYmL6U5X8mCk/s2X5lU+yBh7n48wOOm/GRRjdNg== -----END CERTIFICATE-----Generated at Mon Aug 10 10:00:39 2026 by rpki-client