$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/52c1482c-d9ab-3fc6-87bf-9490fd73003e.roa File: 52c1482c-d9ab-3fc6-87bf-9490fd73003e.roa (raw, json) Hash identifier: 3I6SDtXDgSyB8/2oEaKjXwMF8e4aLiwZr8qALgCFMJs= Subject key identifier: 45:67:C2:72:86:DE:08:6B:9A:BB:05:2F:5F:67:97:52:36:0D:7D:A2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBDB211148A7719E46F8A2180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/52c1482c-d9ab-3fc6-87bf-9490fd73003e.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 31898 IP address blocks: 209.17.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b2:11:14:8a:77:19:e4:6f:8a:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=cbe4e985-9197-4b0b-9ff0-9812ed9e6076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:32:5b:32:b1:be:9a:2c:ef:fe:3a:1e:94: 3c:2d:ed:df:ce:3f:fc:fc:a7:e1:28:82:74:2e:81: 41:b3:35:f5:7d:58:07:fc:db:29:4b:20:02:2a:31: 17:c0:b2:7d:1b:ac:3c:64:4d:39:06:89:2c:7e:0f: 27:d8:de:01:c3:fe:8c:de:a6:c4:80:fa:45:3a:77: 0a:b3:39:9f:b6:99:f8:1c:6d:27:30:e6:06:35:eb: a5:9f:87:46:a8:c7:fe:3f:f1:5f:ba:2a:90:97:4e: 77:ed:17:8a:5f:b7:c0:aa:9b:3d:51:62:2b:90:72: 82:36:64:a8:a0:65:8e:54:4d:73:b8:9e:b4:1f:59: 1a:47:dd:ad:98:e3:97:e1:13:dd:be:91:09:15:fd: 8e:5d:20:14:aa:d0:e4:6e:90:2b:d6:53:2f:55:0e: c5:67:eb:f5:3b:fd:27:39:0d:69:ef:12:88:34:27: 4a:53:25:58:40:4f:fb:a3:b1:cf:07:dc:f4:01:ac: 18:fa:68:35:2b:6c:1b:6f:cc:c7:f1:6e:a5:49:42: e4:b3:e7:fb:7f:aa:70:f0:fd:a4:ce:3e:9d:ff:41: 2d:88:6a:18:d8:c8:86:f1:5c:a7:cb:28:a4:e4:60: 5e:3f:ef:8b:9f:7e:53:62:41:34:63:88:c5:d1:ea: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:67:C2:72:86:DE:08:6B:9A:BB:05:2F:5F:67:97:52:36:0D:7D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/52c1482c-d9ab-3fc6-87bf-9490fd73003e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 209.17.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:4a:bb:85:67:03:ca:98:3a:c9:33:0c:a6:97:b3:b4:7c:58: 1e:db:67:a8:1f:cd:a9:7a:0c:9b:3f:ee:f3:a0:8b:3d:6f:05: 56:f3:af:13:ce:1f:06:32:2f:82:71:fb:30:8a:d2:d7:5a:7b: 56:a5:6f:b2:2f:e3:df:d8:e7:92:97:21:87:d5:c0:dc:d5:e0: 49:09:13:4e:ef:d3:7a:0d:04:52:3a:37:c3:c8:63:37:b9:f4: 9d:bd:00:b8:1c:ac:ba:3d:36:76:ec:6a:94:0c:6a:88:16:e9: f2:08:66:e9:3d:fb:fd:0e:26:97:86:b3:3f:d0:17:1e:0d:0e: 2f:97:97:aa:71:fc:fe:0e:60:95:0b:a4:96:d2:88:a8:46:7a: 4f:27:66:f5:5f:42:77:27:dd:6e:63:07:bc:48:9c:1e:7e:98: dc:49:8b:41:22:63:aa:a1:2d:ba:af:67:d7:c6:cf:c2:51:32: 3a:a3:47:24:8d:f7:2d:62:fa:b6:e1:84:4c:9e:42:6f:e7:8f: 54:7e:e2:d2:dd:23:8c:c7:ca:9a:b2:bf:6c:86:62:e0:9b:1c: 26:cb:7c:3d:41:11:88:a3:03:83:e6:c3:90:6c:05:8e:9a:23: 19:1f:a3:7e:cc:5d:61:88:92:e8:f2:4c:0b:a4:b9:c5:c8:5d: 00:80:7f:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9shEUincZ5G+KIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk Y2JlNGU5ODUtOTE5Ny00YjBiLTlmZjAtOTgxMmVkOWU2MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljAyWzKxvpos7/46HpQ8Le3fzj/8/KfhKIJ0 LoFBszX1fVgH/NspSyACKjEXwLJ9G6w8ZE05Boksfg8n2N4Bw/6M3qbEgPpFOncK szmftpn4HG0nMOYGNeuln4dGqMf+P/FfuiqQl0537ReKX7fAqps9UWIrkHKCNmSo oGWOVE1zuJ60H1kaR92tmOOX4RPdvpEJFf2OXSAUqtDkbpAr1lMvVQ7FZ+v1O/0n OQ1p7xKINCdKUyVYQE/7o7HPB9z0AawY+mg1K2wbb8zH8W6lSULks+f7f6pw8P2k zj6d/0EtiGoY2MiG8Vynyyik5GBeP++Ln35TYkE0Y4jF0epbCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVnwnKG3ghrmrsFL19nl1I2DX2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTJjMTQ4MmMtZDlhYi0z ZmM2LTg3YmYtOTQ5MGZkNzMwMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0REzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdKu4VnA8qYOskzDKaXs7R8WB7bZ6gfzal6DJs/7vOgiz1vBVbzrxPO HwYyL4Jx+zCK0tdae1alb7Iv49/Y55KXIYfVwNzV4EkJE07v03oNBFI6N8PIYze5 9J29ALgcrLo9NnbsapQMaogW6fIIZuk9+/0OJpeGsz/QFx4NDi+Xl6px/P4OYJUL pJbSiKhGek8nZvVfQncn3W5jB7xInB5+mNxJi0EiY6qhLbqvZ9fGz8JRMjqjRySN 9y1i+rbhhEyeQm/nj1R+4tLdI4zHypqyv2yGYuCbHCbLfD1BEYijA4Pmw5BsBY6a Ixkfo37MXWGIkujyTAukucXIXQCAfx8= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:11 2026 by rpki-client