$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa File: 52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa (raw, json) Hash identifier: 7p14aSsegNjDUJ+5Qa9w4PLbLTpthtD0TG1KdXiiE5A= Subject key identifier: 81:B2:8A:0D:D1:61:35:D1:08:6C:09:81:B8:86:C7:57:73:93:F0:28 Certificate issuer: /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7 Certificate serial: 010D0C9F4328584D386A34B1A6FC196AD22E1880 Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 170.205.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:34:b1:a6:fc:19:6a:d2:2e:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=b52a891c-4e18-418f-97f4-8fda64673e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:29:fa:eb:53:cc:94:e7:2f:d4:d5:d0:5b: 2b:51:8e:30:11:14:9b:f0:97:98:25:76:6b:ec:6a: 06:4c:ad:52:a7:a3:26:88:59:e7:f1:54:70:76:b2: 96:ad:7c:9f:9a:0d:19:5a:59:65:7b:ea:a0:49:3f: 1e:9b:84:ae:90:ac:16:6e:b3:9c:67:22:c9:48:b9: 7a:23:60:24:62:d6:34:cf:a7:cf:41:a2:52:93:cf: ce:34:8d:cc:09:de:ad:03:91:21:1d:83:7d:a8:db: 8e:b0:7e:b7:ac:c9:79:3c:24:bb:d8:ae:ce:4e:13: c5:13:0b:bb:bc:f5:5c:8d:3d:5d:a8:43:a0:ab:e7: 59:36:36:5c:4a:e1:e4:b4:9f:94:18:6f:92:7b:4f: e5:1d:14:2d:cd:8c:36:58:2e:c7:de:e6:3c:77:8c: 6c:80:72:3c:86:e5:35:6b:73:13:b5:c0:76:37:a8: 9d:a4:62:1a:7b:a1:42:76:5d:db:48:4a:2b:2a:2a: 76:dc:d8:43:d0:eb:4a:f9:c1:54:9b:b3:e8:05:32: 03:d5:11:58:1d:b0:e0:ea:32:f9:ef:ab:76:5d:de: 06:22:d3:45:e9:06:32:33:7e:aa:86:58:d2:72:38: 8a:71:6e:02:19:0f:23:ee:6a:66:c6:21:46:ad:b5: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B2:8A:0D:D1:61:35:D1:08:6C:09:81:B8:86:C7:57:73:93:F0:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl X509v3 Authority Key Identifier: keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer sbgp-ipAddrBlock: critical IPv4: 170.205.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d4:44:98:ef:80:02:a3:0b:44:f1:5d:93:ae:66:95:42:c0: 20:93:8c:b3:6d:ed:8f:eb:8e:34:9c:67:e9:d1:42:1e:ff:8b: c8:4f:b9:70:0f:7c:4c:03:45:8a:9a:d3:0f:05:d1:ed:2e:19: fa:5e:04:e7:74:1b:4d:c3:87:d6:fc:3f:00:9c:2a:02:ee:3b: be:4d:b3:6b:7e:62:59:67:78:c9:16:4a:da:7b:09:fe:29:86: 18:2d:92:75:8e:62:b7:94:3f:dd:54:10:02:b9:27:d3:54:8a: 37:44:3d:fe:66:71:bc:14:11:fb:43:0f:52:85:92:f3:ea:21: 75:dc:be:74:8b:06:27:a4:81:70:66:cc:98:6f:2d:25:3b:61: 8b:51:ee:e5:13:5a:77:92:15:60:da:8f:fa:06:fc:1b:71:ee: 2c:de:00:bd:84:43:b1:f8:51:a9:60:e5:b3:37:a7:d7:44:c8: b7:7f:03:9c:02:06:cc:9d:09:14:71:7d:68:0e:d1:a8:e9:82: a6:dd:a0:13:c2:7b:49:ba:3f:6b:4d:0a:43:ff:b1:71:63:63: 41:1d:7f:b8:df:39:5e:08:7a:de:43:1f:1c:6d:0a:cf:4e:25: 1e:39:6e:6c:46:4b:fe:28:18:38:0a:65:95:34:33:26:2c:1b: 86:49:ac:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajSxpvwZatIuGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMwMWM3OTAtYzFmNC00ZmQ3LWE5MzktMWE4ZDI2Njli NWI3MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YjUyYTg5MWMtNGUxOC00MThmLTk3ZjQtOGZkYTY0NjczZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikQp+utTzJTnL9TV0FsrUY4wERSb8JeYJXZr 7GoGTK1Sp6MmiFnn8VRwdrKWrXyfmg0ZWllle+qgST8em4SukKwWbrOcZyLJSLl6 I2AkYtY0z6fPQaJSk8/ONI3MCd6tA5EhHYN9qNuOsH63rMl5PCS72K7OThPFEwu7 vPVcjT1dqEOgq+dZNjZcSuHktJ+UGG+Se0/lHRQtzYw2WC7H3uY8d4xsgHI8huU1 a3MTtcB2N6idpGIae6FCdl3bSEorKip23NhD0OtK+cFUm7PoBTID1RFYHbDg6jL5 76t2Xd4GItNF6QYyM36qhljScjiKcW4CGQ8j7mpmxiFGrbVfHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGyig3RYTXRCGwJgbiGx1dzk/AoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMzAx Yzc5MC1jMWY0LTRmZDctYTkzOS0xYThkMjY2OWI1YjcvNTJiNGQ2MTgtN2I0My0z ZGZjLWIxZmUtZGU3YTUxMzVkZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDMwMWM3OTAtYzFmNC00ZmQ3LWE5 MzktMWE4ZDI2NjliNWI3L2QzMDFjNzkwLWMxZjQtNGZkNy1hOTM5LTFhOGQyNjY5 YjViNy5jcmwwHwYDVR0jBBgwFoAUNhVcMeA33FGXyNmKpO5YWngWySwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMzAxYzc5MC1jMWY0LTRmZDctYTkzOS0xYThk MjY2OWI1YjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqs0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELURJjvgAKjC0TxXZOuZpVCwCCTjLNt7Y/rjjScZ+nRQh7/i8hPuXAP fEwDRYqa0w8F0e0uGfpeBOd0G03Dh9b8PwCcKgLuO75Ns2t+YllneMkWStp7Cf4p hhgtknWOYreUP91UEAK5J9NUijdEPf5mcbwUEftDD1KFkvPqIXXcvnSLBiekgXBm zJhvLSU7YYtR7uUTWneSFWDaj/oG/Btx7izeAL2EQ7H4Ualg5bM3p9dEyLd/A5wC BsydCRRxfWgO0ajpgqbdoBPCe0m6P2tNCkP/sXFjY0Edf7jfOV4Iet5DHxxtCs9O JR45bmxGS/4oGDgKZZU0MyYsG4ZJrE8= -----END CERTIFICATE-----Generated at Sun Mar 22 18:24:32 2026 by rpki-client