$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa File: 5889b020-d1dc-309e-a3d6-83b0d8a04571.roa (raw, json) Hash identifier: wNe89vND0W01sHC2fF0JbSeGON+2D9iETTAzNlFy9GA= Subject key identifier: DE:0D:A7:FC:C1:4F:EE:52:BD:A8:0C:A3:30:AB:B2:32:66:20:54:24 Certificate issuer: /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291 Certificate serial: 010D0C9F4328584EC371C5AC0E904B5BB7941F80 Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 400136 IP address blocks: 24.149.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:c5:ac:0e:90:4b:5b:b7:94:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=469d5287-c865-47b6-ae3e-6e92fd2df21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:5b:72:a0:ef:0e:f0:56:75:69:89:32:1c: 57:e1:32:49:92:39:a3:cf:30:3e:a1:1a:7c:5d:fe: 05:36:8d:b0:36:1d:f6:05:8e:82:a1:64:f4:90:92: eb:56:a9:23:5a:47:42:f7:8c:38:ec:19:9f:9e:75: 4a:89:cc:e1:39:89:18:95:a7:5e:f8:dd:c6:49:82: 82:47:0d:55:f1:0a:bc:85:84:37:89:d3:b4:a2:9d: e3:42:38:08:6a:67:64:73:db:cf:75:c2:1a:e8:fd: db:fe:31:9b:db:1d:08:34:cc:2e:de:95:fe:72:74: ba:74:00:27:13:c6:23:a7:77:07:89:bc:ec:d0:08: 41:0f:02:84:ef:69:5a:aa:ee:aa:0b:b7:9c:a7:90: f0:1a:9c:39:de:04:14:c1:31:0e:7d:97:d9:0e:e5: 2d:9a:d1:d0:10:ad:3a:22:78:19:40:8e:89:f5:ca: 2c:3f:ef:31:3c:db:a1:8c:d0:74:f5:81:93:90:53: 6e:2b:04:bf:4b:56:21:df:06:8c:28:1a:5c:e1:0d: d1:30:17:b7:72:04:f7:29:02:98:84:5e:84:d9:48: f4:8a:34:c3:95:b4:68:a9:c4:c6:7c:3e:60:6a:ce: 7c:94:b2:0e:27:29:ee:1d:ec:8e:4f:b7:88:62:b0: b9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0D:A7:FC:C1:4F:EE:52:BD:A8:0C:A3:30:AB:B2:32:66:20:54:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl X509v3 Authority Key Identifier: keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer sbgp-ipAddrBlock: critical IPv4: 24.149.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b5:11:4c:0a:c5:78:78:51:df:77:34:c6:ff:b9:02:14:08: c1:5d:b1:5e:a0:ef:40:bb:f5:47:f7:c5:67:e8:53:e0:2c:6d: c6:99:49:60:93:ec:44:5d:db:08:2d:a6:a2:90:dd:d2:75:00: 77:16:cc:ec:3a:d2:ac:bb:7e:22:8d:35:43:d7:6c:61:ff:a1: de:c8:c2:85:c5:6d:db:cf:9c:0e:e2:8a:a7:22:57:5b:f6:2c: a3:2a:00:c4:ea:23:f7:e0:31:42:3e:f2:61:64:0c:34:46:8a: 65:2c:93:33:db:1a:26:f0:d2:2c:a9:4e:10:11:48:38:c4:b6: 73:5d:16:8a:b1:4c:ef:9e:45:a5:8d:86:ec:ee:b4:b9:1d:44: 52:2a:ac:5c:a3:f9:e9:21:5c:01:0d:99:95:c3:12:fa:79:a4: 90:c7:1d:1a:68:e7:b6:06:a6:3a:56:10:8b:f0:ac:2b:cd:c0: 0a:19:91:70:16:78:bf:e4:08:d3:8c:ce:b3:b8:f5:6f:f6:6c: 70:31:8e:ea:6d:84:20:83:ab:54:4f:b9:1f:78:d4:da:5c:f5: 73:e6:51:1e:62:e4:74:5b:99:df:d1:6c:0a:75:06:4f:9e:30: 2e:e0:ad:28:19:e4:44:de:ad:ef:8a:db:d0:10:65:db:ce:a1: 0e:b9:4f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccWsDpBLW7eUH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyZjFkMjMtMmM0Yy00ZWY1LWJhYjEtNTU5ZGNiNDkx MjkxMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk NDY5ZDUyODctYzg2NS00N2I2LWFlM2UtNmU5MmZkMmRmMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLNbcqDvDvBWdWmJMhxX4TJJkjmjzzA+oRp8 Xf4FNo2wNh32BY6CoWT0kJLrVqkjWkdC94w47BmfnnVKiczhOYkYlade+N3GSYKC Rw1V8Qq8hYQ3idO0op3jQjgIamdkc9vPdcIa6P3b/jGb2x0INMwu3pX+cnS6dAAn E8Yjp3cHibzs0AhBDwKE72laqu6qC7ecp5DwGpw53gQUwTEOfZfZDuUtmtHQEK06 IngZQI6J9cosP+8xPNuhjNB09YGTkFNuKwS/S1Yh3waMKBpc4Q3RMBe3cgT3KQKY hF6E2Uj0ijTDlbRoqcTGfD5gas58lLIOJynuHeyOT7eIYrC5TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4Np/zBT+5SvagMozCrsjJmIFQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJm MWQyMy0yYzRjLTRlZjUtYmFiMS01NTlkY2I0OTEyOTEvNTg4OWIwMjAtZDFkYy0z MDllLWEzZDYtODNiMGQ4YTA0NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjMyZjFkMjMtMmM0Yy00ZWY1LWJh YjEtNTU5ZGNiNDkxMjkxL2YzMmYxZDIzLTJjNGMtNGVmNS1iYWIxLTU1OWRjYjQ5 MTI5MS5jcmwwHwYDVR0jBBgwFoAUwO8qm2fyW3+QCH6t3QSVwKfX1PcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJmMWQyMy0yYzRjLTRlZjUtYmFiMS01NTlk Y2I0OTEyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW1EUwKxXh4Ud93NMb/uQIUCMFdsV6g70C79Uf3xWfoU+AsbcaZSWCT 7ERd2wgtpqKQ3dJ1AHcWzOw60qy7fiKNNUPXbGH/od7IwoXFbdvPnA7iiqciV1v2 LKMqAMTqI/fgMUI+8mFkDDRGimUskzPbGibw0iypThARSDjEtnNdFoqxTO+eRaWN huzutLkdRFIqrFyj+ekhXAENmZXDEvp5pJDHHRpo57YGpjpWEIvwrCvNwAoZkXAW eL/kCNOMzrO49W/2bHAxjupthCCDq1RPuR941Npc9XPmUR5i5HRbmd/RbAp1Bk+e MC7grSgZ5ETere+K29AQZdvOoQ65T1c= -----END CERTIFICATE-----Generated at Sat Sep 5 09:40:01 2026 by rpki-client