$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/db43588c-fbe9-3306-8e2a-851b8bd087f1.roa File: db43588c-fbe9-3306-8e2a-851b8bd087f1.roa (raw, json) Hash identifier: X+Z1UvFgDSMjtEvCvs97lN8bgJLvPDFA2sHMwAKd61s= Subject key identifier: 37:0F:EC:AD:23:14:D8:3B:56:70:F9:CF:20:5F:AA:21:65:7A:03:AE Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584E1282778D5E78EDCE3BA3E280 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/db43588c-fbe9-3306-8e2a-851b8bd087f1.roa Signing time: Fri 05 Jun 2026 15:55:56 +0000 ROA not before: Fri 05 Jun 2026 15:55:56 +0000 ROA not after: Thu 03 Sep 2026 15:55:56 +0000 asID: 16509 IP address blocks: 141.109.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:12:82:77:8d:5e:78:ed:ce:3b:a3:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Jun 5 15:55:56 2026 GMT Not After : Sep 3 15:55:56 2026 GMT Subject: CN=52cd4bed-a2ee-4bbc-ba2c-7873c0c21c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:9c:d5:d8:d1:e0:1a:ad:0a:a0:b5:6d:59: ef:99:9c:52:88:e5:0f:75:d6:39:25:c3:b7:78:38: e0:ee:bc:74:49:ec:8b:f2:80:e0:ed:c2:2e:c4:c0: 25:c6:76:da:21:b7:59:84:d0:2a:df:c7:5c:74:fb: ea:ce:ab:44:d0:be:bd:62:63:b1:26:69:ed:fb:31: 7b:6c:5f:b4:c5:2c:fc:93:fd:b8:ee:ce:6c:51:fa: c9:d9:b6:7b:e6:81:75:55:3b:98:9c:b1:66:82:9b: 91:02:7e:fc:6d:76:c2:42:cc:c4:52:75:13:89:97: 50:3a:7a:0b:cc:9f:37:ba:f2:43:f1:e4:6b:93:d1: cb:4d:bc:d1:ff:56:b3:0b:1e:f9:96:f3:31:ed:56: 37:5c:ba:01:d0:8a:d6:11:1a:99:1e:74:d2:48:50: a0:f7:41:01:a0:83:96:e5:67:6a:d0:24:ef:4b:0a: 70:af:e9:eb:f8:fa:cb:cf:13:55:60:7f:9f:c5:99: d1:b7:b9:c4:46:99:67:f6:74:70:80:e2:f4:a8:28: 52:09:04:15:4e:2a:a6:ce:f3:15:2b:71:d0:0e:97: 0a:e5:23:02:60:d7:21:78:14:38:fb:75:60:28:5d: a8:36:c7:be:98:b2:62:a9:ec:91:10:7e:b6:57:3d: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0F:EC:AD:23:14:D8:3B:56:70:F9:CF:20:5F:AA:21:65:7A:03:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/db43588c-fbe9-3306-8e2a-851b8bd087f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 141.109.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e6:88:f3:a7:a1:3d:93:6f:b5:fc:4a:4d:75:00:42:58:c9: 94:97:c3:7a:17:e3:05:7f:18:20:66:ff:10:52:92:63:5e:9b: 0f:28:4b:0a:9c:53:84:b5:8f:5c:f5:ea:7a:d8:bd:d5:25:76: ca:de:4a:25:1e:ea:7a:3a:c6:cc:eb:45:2f:98:34:a1:52:d4: 44:25:03:a7:0b:37:a8:12:46:0c:7f:af:02:7d:41:92:48:4a: 46:a3:ff:a7:e2:88:e6:74:c1:0f:a0:fb:0b:76:91:69:a9:3e: dc:82:3d:2c:72:1d:59:a0:1c:ef:47:d7:cd:47:46:92:12:81: 1a:21:53:ee:97:42:39:5c:2e:02:57:5e:a9:78:38:6d:33:f5: 2c:ab:92:fa:57:2c:d3:f2:b8:47:33:73:5d:ef:2a:80:a4:16: 7c:ad:79:ae:55:0d:19:d9:0c:ae:49:9a:4d:f8:f8:a7:34:a5: 26:a5:85:da:04:23:a1:16:0c:14:8c:ff:8e:90:4a:1e:30:29: 42:ee:1f:41:f5:97:5a:5d:dc:c6:df:4a:82:f6:db:28:57:75: e4:10:dc:9c:82:c1:27:cb:0d:82:94:88:1f:1e:e8:54:d4:1f: 19:d3:95:78:59:cf:a9:cf:69:9e:ee:ce:14:23:86:db:5b:8a: 85:1c:4f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4SgneNXnjtzjuj4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI2MDYwNTE1NTU1NloXDTI2MDkwMzE1NTU1NlowLzEtMCsGA1UEAxMk NTJjZDRiZWQtYTJlZS00YmJjLWJhMmMtNzg3M2MwYzIxYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1Kc1djR4BqtCqC1bVnvmZxSiOUPddY5JcO3 eDjg7rx0SeyL8oDg7cIuxMAlxnbaIbdZhNAq38dcdPvqzqtE0L69YmOxJmnt+zF7 bF+0xSz8k/247s5sUfrJ2bZ75oF1VTuYnLFmgpuRAn78bXbCQszEUnUTiZdQOnoL zJ83uvJD8eRrk9HLTbzR/1azCx75lvMx7VY3XLoB0IrWERqZHnTSSFCg90EBoIOW 5Wdq0CTvSwpwr+nr+PrLzxNVYH+fxZnRt7nERpln9nRwgOL0qChSCQQVTiqmzvMV K3HQDpcK5SMCYNcheBQ4+3VgKF2oNse+mLJiqeyREH62Vz09fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcP7K0jFNg7VnD5zyBfqiFlegOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvZGI0MzU4OGMtZmJlOS0z MzA2LThlMmEtODUxYjhiZDA4N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjW36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPmiPOnoT2Tb7X8Sk11AEJYyZSXw3oX4wV/GCBm/xBSkmNemw8oSwqc U4S1j1z16nrYvdUldsreSiUe6no6xszrRS+YNKFS1EQlA6cLN6gSRgx/rwJ9QZJI Skaj/6fiiOZ0wQ+g+wt2kWmpPtyCPSxyHVmgHO9H181HRpISgRohU+6XQjlcLgJX Xql4OG0z9SyrkvpXLNPyuEczc13vKoCkFnytea5VDRnZDK5Jmk34+Kc0pSalhdoE I6EWDBSM/46QSh4wKULuH0H1l1pd3MbfSoL22yhXdeQQ3JyCwSfLDYKUiB8e6FTU HxnTlXhZz6nPaZ7uzhQjhttbioUcT5k= -----END CERTIFICATE-----Generated at Sat Jun 13 20:16:46 2026 by rpki-client