$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa File: 809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa (raw, json) Hash identifier: wMrL8LUaii6R4c8zC46cJj5oyQ5ft35at0IKRpvJMmA= Subject key identifier: A1:28:AE:1A:46:D3:DF:18:26:E1:91:C2:CB:A4:BB:FA:5D:58:91:1F Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584B1AD1775E6BD3895831C11A00 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 170.203.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:77:5e:6b:d3:89:58:31:c1:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=735f627d-0fb4-4d4d-858f-536fc4d1c095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cd:44:09:45:60:59:76:c3:e5:ce:81:45:80: ad:38:d2:58:b1:c2:2c:27:af:62:af:b6:7f:87:8e: c9:46:ec:f7:c9:fc:61:50:c3:31:b4:82:ec:b9:47: b9:da:57:2a:0e:ef:df:70:1d:fa:a9:2b:99:76:63: 9c:64:b1:de:ea:63:ba:c4:63:d5:d7:78:af:e6:88: 45:33:73:41:dc:09:41:da:1b:e7:de:1d:08:47:f5: 07:e4:79:52:86:7f:d5:a7:6c:11:20:ce:80:68:2b: f7:c1:9f:c8:26:06:2f:65:29:0f:87:2b:12:98:7e: fd:f2:05:25:d7:27:85:58:c3:56:35:ee:70:ff:7f: 9a:f9:a5:82:f5:e0:d0:c5:06:2b:ba:78:d9:8a:20: 6f:5c:c7:a3:5c:4c:28:2e:68:1c:e0:24:3b:55:ac: 11:0c:c4:c0:f1:f6:2f:89:64:72:29:67:58:bb:03: 65:5b:a9:b1:f8:cd:39:96:76:cd:03:51:c9:f4:4a: 1a:cc:d4:6a:e1:0d:aa:b7:d1:53:c0:47:06:84:30: b6:03:f7:b8:95:7e:3f:93:6a:2e:e2:42:db:73:79: 90:5d:4b:c6:21:80:34:58:6d:40:83:b4:03:43:66: 95:31:62:42:f6:ee:40:72:61:d8:aa:4e:b4:a4:29: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:28:AE:1A:46:D3:DF:18:26:E1:91:C2:CB:A4:BB:FA:5D:58:91:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 170.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:1c:60:df:d6:fa:a3:45:f9:2e:ef:c3:98:ed:1e:0c:81:24: ae:86:e6:af:99:35:7d:4d:5d:80:3a:ab:4b:0a:d5:84:84:21: 25:52:7e:1b:fe:9a:99:81:f5:f9:35:ed:43:ff:e0:cf:bc:3e: f9:72:b6:cc:cf:3d:e0:52:3b:d1:dd:91:87:8d:7c:e4:51:6f: a8:8f:5b:f9:fd:9e:86:90:13:bc:bb:cb:1d:6d:64:fe:cc:3b: ec:a4:1d:f6:d5:06:66:15:f3:8c:79:72:f2:37:36:6d:5c:18: 6a:be:cd:ab:56:1a:5f:c1:ca:99:27:22:3e:1f:40:33:54:09: 21:b4:a9:f6:06:4d:e9:9f:db:01:3f:50:b7:5d:fc:4e:fd:eb: 60:2a:e1:c5:53:e7:b3:a1:ec:7d:ea:d9:14:aa:23:df:25:e3: 40:48:3b:47:47:8b:0e:4b:fe:7d:8b:e3:9c:62:c4:68:09:85: e0:5e:a1:44:de:c7:ed:14:aa:87:9b:1d:2d:cc:b8:d5:95:da: 72:d3:eb:ed:fc:19:90:ac:79:38:ca:63:b4:cf:67:c2:f0:62: 55:16:2e:91:56:5e:89:f9:18:6c:61:59:65:58:af:90:0e:08: dc:1b:a2:43:46:32:9d:05:5f:34:a0:6b:91:d8:3a:9e:db:df: a2:ae:d9:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Xdea9OJWDHBGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NzM1ZjYyN2QtMGZiNC00ZDRkLTg1OGYtNTM2ZmM0ZDFjMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj81ECUVgWXbD5c6BRYCtONJYscIsJ69ir7Z/ h47JRuz3yfxhUMMxtILsuUe52lcqDu/fcB36qSuZdmOcZLHe6mO6xGPV13iv5ohF M3NB3AlB2hvn3h0IR/UH5HlShn/Vp2wRIM6AaCv3wZ/IJgYvZSkPhysSmH798gUl 1yeFWMNWNe5w/3+a+aWC9eDQxQYrunjZiiBvXMejXEwoLmgc4CQ7VawRDMTA8fYv iWRyKWdYuwNlW6mx+M05lnbNA1HJ9EoazNRq4Q2qt9FTwEcGhDC2A/e4lX4/k2ou 4kLbc3mQXUvGIYA0WG1Ag7QDQ2aVMWJC9u5AcmHYqk60pCmKNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEorhpG098YJuGRwsuku/pdWJEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvODA5ZjdlMDQtZTJiMi0z YmUxLWFkYzctNWJjYzZmMjdhN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqssQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgcYN/W+qNF+S7vw5jtHgyBJK6G5q+ZNX1NXYA6q0sK1YSEISVSfhv+ mpmB9fk17UP/4M+8PvlytszPPeBSO9HdkYeNfORRb6iPW/n9noaQE7y7yx1tZP7M O+ykHfbVBmYV84x5cvI3Nm1cGGq+zatWGl/BypknIj4fQDNUCSG0qfYGTemf2wE/ ULdd/E7962Aq4cVT57Oh7H3q2RSqI98l40BIO0dHiw5L/n2L45xixGgJheBeoUTe x+0UqoebHS3MuNWV2nLT6+38GZCseTjKY7TPZ8LwYlUWLpFWXon5GGxhWWVYr5AO CNwbokNGMp0FXzSga5HYOp7b36Ku2bY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:17 2025 by rpki-client