$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa File: b98046e9-e215-3beb-b627-8d082108f26e.roa (raw, json) Hash identifier: 4fLWSUv6UsgGonuOGqLKk1FulWmQyaO/tpdqe9gTzqw= Subject key identifier: 72:F4:89:03:83:56:6D:FA:9C:B5:6E:3D:1D:F8:42:70:75:94:16:4C Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584F3E47D99DE88DBB0356B91E80 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16509 IP address blocks: 170.203.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d9:9d:e8:8d:bb:03:56:b9:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=04937f28-daf3-4ce5-bf3f-75f41dd80f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a7:c7:a8:61:a9:1a:3c:58:f6:28:82:78:c2: 1f:97:1d:b3:cb:ed:8d:14:4f:f8:51:95:a9:f7:88: 45:31:c1:7f:32:a8:e2:e4:4a:82:97:75:70:f4:22: 94:47:2d:91:c9:78:a0:c4:d2:d4:8b:33:37:9e:57: b2:5a:71:19:f0:63:f0:04:fe:b3:10:91:60:5b:f4: 3e:e7:cf:fe:44:73:03:66:b0:cb:59:4c:03:0c:57: 60:de:77:88:de:db:b2:de:db:08:fa:97:dd:b6:a7: 3e:00:37:72:c5:68:cc:21:09:c7:6a:9b:ea:15:0d: cb:76:98:79:2e:b2:e3:b1:b5:bf:f9:a6:b5:20:8b: cf:e6:65:8d:69:6a:eb:a8:9f:e8:da:8a:59:c8:d0: 2e:70:47:ea:a1:3b:30:53:2b:b4:c7:1d:32:9d:22: 77:87:44:db:93:f0:7b:f8:2e:78:a4:05:b6:7d:df: 6d:d7:c4:bd:75:b2:4f:a2:5a:31:5d:51:34:fc:1c: 05:49:7b:45:ee:04:9e:1e:e9:79:da:42:9d:df:77: 97:a2:f0:8b:ac:b6:50:f3:86:8b:87:ff:18:76:9c: 22:cd:d8:53:43:cb:05:bd:a7:4d:e3:a2:4c:f6:d4: df:03:e8:3e:0e:72:1d:a9:d2:39:67:65:84:83:8c: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F4:89:03:83:56:6D:FA:9C:B5:6E:3D:1D:F8:42:70:75:94:16:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/b98046e9-e215-3beb-b627-8d082108f26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 170.203.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:bd:f2:d8:60:9f:ad:e5:4b:77:af:f4:87:f4:7b:a6:4f:49: 0d:94:df:69:30:71:d8:c5:bf:95:96:ab:94:9a:72:7b:74:64: eb:c5:e3:3e:ce:9c:21:92:71:3e:df:0f:1b:75:a1:27:c4:ea: 06:2b:24:09:56:70:5d:ef:55:d1:48:d1:60:55:ff:cb:7b:a0: eb:5e:c7:67:94:ea:4f:d6:8a:88:da:50:66:a8:a8:9a:70:6b: 16:a4:e8:31:36:17:1f:de:c4:ce:d3:1b:b2:5c:cb:74:01:f8: 94:f0:e0:fb:e2:18:7c:26:7f:1b:50:b3:46:8d:b9:ea:bd:e6: bc:d0:6d:19:a0:ed:4e:fa:64:46:73:27:ce:a2:9f:2b:09:e0: d4:b1:43:60:c0:59:43:ab:fe:c8:8c:4c:db:26:51:42:47:22: e9:87:1e:9f:20:77:47:79:62:08:94:69:d4:a4:82:5c:44:da: b9:32:7b:aa:71:4e:cf:7b:b6:15:54:99:18:54:e7:88:4f:5f: e0:80:ca:dc:1e:f5:ef:4e:dd:60:52:60:c9:44:e0:c5:b0:c8: d6:ed:46:85:dc:0e:19:69:11:55:05:5d:7f:81:cf:24:ab:fd: 45:29:e6:26:d0:84:4f:51:85:f9:5b:7f:b2:64:6e:23:5a:ec: a0:66:db:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9md6I27A1a5HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MDQ5MzdmMjgtZGFmMy00Y2U1LWJmM2YtNzVmNDFkZDgwZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKfHqGGpGjxY9iiCeMIflx2zy+2NFE/4UZWp 94hFMcF/Mqji5EqCl3Vw9CKURy2RyXigxNLUizM3nleyWnEZ8GPwBP6zEJFgW/Q+ 58/+RHMDZrDLWUwDDFdg3neI3tuy3tsI+pfdtqc+ADdyxWjMIQnHapvqFQ3Ldph5 LrLjsbW/+aa1IIvP5mWNaWrrqJ/o2opZyNAucEfqoTswUyu0xx0ynSJ3h0Tbk/B7 +C54pAW2fd9t18S9dbJPoloxXVE0/BwFSXtF7gSeHul52kKd33eXovCLrLZQ84aL h/8YdpwizdhTQ8sFvadN46JM9tTfA+g+DnIdqdI5Z2WEg4yGZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL0iQODVm36nLVuPR34QnB1lBZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvYjk4MDQ2ZTktZTIxNS0z YmViLWI2MjctOGQwODIxMDhmMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqssQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+98thgn63lS3ev9If0e6ZPSQ2U32kwcdjFv5WWq5Sacnt0ZOvF4z7O nCGScT7fDxt1oSfE6gYrJAlWcF3vVdFI0WBV/8t7oOtex2eU6k/WiojaUGaoqJpw axak6DE2Fx/exM7TG7Jcy3QB+JTw4PviGHwmfxtQs0aNueq95rzQbRmg7U76ZEZz J86inysJ4NSxQ2DAWUOr/siMTNsmUUJHIumHHp8gd0d5YgiUadSkglxE2rkye6px Ts97thVUmRhU54hPX+CAytwe9e9O3WBSYMlE4MWwyNbtRoXcDhlpEVUFXX+BzySr /UUp5ibQhE9Rhflbf7JkbiNa7KBm2/c= -----END CERTIFICATE-----Generated at Tue Sep 22 21:00:57 2026 by rpki-client