$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52c4decf-39fc-390a-88cb-9014145ebb34.roa File: 52c4decf-39fc-390a-88cb-9014145ebb34.roa (raw, json) Hash identifier: 8S+xZ4x+YI08ghc+tsGFpIlQHD4i7BCb24K7pWhIdQo= Subject key identifier: 71:F5:4E:BE:6B:90:77:1E:E3:68:13:CD:89:74:6D:42:20:B2:A5:A6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CA5F7490BECF8B9AFD92A9160 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52c4decf-39fc-390a-88cb-9014145ebb34.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 140224 IP address blocks: 207.56.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:49:0b:ec:f8:b9:af:d9:2a:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=ad5df63e-4a19-43a3-b697-83914eef72f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:d1:ea:9d:6d:76:0b:13:d0:b2:c7:d3:9f: f2:8d:2e:f0:8c:0d:06:9a:17:4e:94:d6:71:f2:93: 20:11:ea:43:ee:c3:04:e9:c3:35:70:1b:ec:1a:a3: ac:d0:6a:6f:15:5e:06:a9:c1:78:8f:06:7d:37:8c: ea:03:22:7b:b1:46:8c:03:db:fb:06:8d:a3:7e:92: 65:47:eb:69:00:25:e0:9b:b6:e5:1f:1f:c7:01:b8: bd:9f:50:e1:af:fb:97:59:7f:47:29:83:3d:21:f9: cf:f6:d1:0f:ba:f1:69:90:6c:e2:0a:ca:0b:e8:9d: bc:51:d4:fd:98:6a:d9:82:23:37:65:d4:ee:a6:c8: b5:ec:a8:1e:ff:ee:51:0e:ee:1e:9a:15:af:21:07: f1:16:ab:fa:35:f4:82:cd:14:41:7c:2b:32:9d:f3: 1b:96:82:72:06:e7:a5:b8:4c:24:b5:d9:87:52:0f: 8e:10:74:08:91:9b:bf:1d:06:1c:87:3a:a9:0f:c8: 2e:ab:6f:19:88:09:db:8d:86:17:a7:15:05:26:c1: ac:1e:60:8a:a9:a3:f6:d0:90:ef:54:f7:94:dd:88: dc:01:33:e9:70:27:a7:d5:b9:50:05:4c:0a:77:b7: bc:33:76:8c:8c:67:60:40:d3:35:13:a1:6a:9f:2c: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F5:4E:BE:6B:90:77:1E:E3:68:13:CD:89:74:6D:42:20:B2:A5:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52c4decf-39fc-390a-88cb-9014145ebb34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.56.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:4e:30:07:df:66:13:19:b1:58:74:d8:db:ca:f6:1d:19:a8: c5:e9:80:65:00:7f:f2:56:b7:02:32:9f:9e:06:07:8a:10:2d: c3:53:2d:56:64:bf:71:ac:d4:9d:64:74:4e:c1:b2:83:85:02: 0a:18:c1:2c:82:14:47:61:9f:12:cd:a0:d6:21:6e:45:a2:51: b7:ba:22:7e:c8:4e:ce:42:33:5f:93:22:8b:37:a5:9d:47:41: 88:75:98:47:14:f9:5a:3f:0b:b9:42:b1:86:4e:1b:89:cc:1a: 01:e3:cb:e8:bb:5e:56:42:f8:21:32:b8:43:75:d1:60:db:0f: bc:b6:74:83:83:d8:80:ce:71:fb:62:5f:76:53:56:81:17:0d: f8:1f:01:d4:14:af:05:a5:48:35:b6:e2:ab:32:3b:a7:dd:d2: 29:8e:82:38:84:88:c8:c8:b5:e3:5e:76:9f:ca:04:b5:0d:1e: 1b:34:dd:68:36:48:44:84:a0:2b:f9:f7:51:20:54:1b:6d:4e: 99:26:98:26:4c:0d:56:0d:8a:00:ba:08:4d:38:80:64:bc:9a: 17:3c:d1:04:c4:04:c0:df:f4:6b:41:be:a3:b1:26:e1:69:11: de:8f:e9:39:cc:77:2b:d7:41:d9:27:57:ce:ea:7a:31:0b:25: 79:4b:0f:e7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEyl90kL7Pi5r9kqkWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YWQ1ZGY2M2UtNGExOS00M2EzLWI2OTctODM5MTRlZWY3MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vTR6p1tdgsT0LLH05/yjS7wjA0GmhdOlNZx 8pMgEepD7sME6cM1cBvsGqOs0GpvFV4GqcF4jwZ9N4zqAyJ7sUaMA9v7Bo2jfpJl R+tpACXgm7blHx/HAbi9n1Dhr/uXWX9HKYM9IfnP9tEPuvFpkGziCsoL6J28UdT9 mGrZgiM3ZdTupsi17Kge/+5RDu4emhWvIQfxFqv6NfSCzRRBfCsynfMbloJyBuel uEwktdmHUg+OEHQIkZu/HQYchzqpD8guq28ZiAnbjYYXpxUFJsGsHmCKqaP20JDv VPeU3YjcATPpcCen1blQBUwKd7e8M3aMjGdgQNM1E6Fqnyz8NQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHH1Tr5rkHce42gTzYl0bUIgsqWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTJjNGRlY2YtMzlmYy0z OTBhLTg4Y2ItOTAxNDE0NWViYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzzgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAyU4wB99mExmxWHTY28r2HRmoxemAZQB/8la3AjKfngYHihAtw1MtVmS/ cazUnWR0TsGyg4UCChjBLIIUR2GfEs2g1iFuRaJRt7oifshOzkIzX5MiizelnUdB iHWYRxT5Wj8LuUKxhk4bicwaAePL6LteVkL4ITK4Q3XRYNsPvLZ0g4PYgM5x+2Jf dlNWgRcN+B8B1BSvBaVINbbiqzI7p93SKY6COISIyMi14152n8oEtQ0eGzTdaDZI RISgK/n3USBUG21OmSaYJkwNVg2KALoITTiAZLyaFzzRBMQEwN/0a0G+o7Em4WkR 3o/pOcx3K9dB2SdXzup6MQsleUsP5w== -----END CERTIFICATE-----Generated at Mon Mar 2 08:33:50 2026 by rpki-client