$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa File: 5fc3e362-19d5-308a-8dcb-de8129446685.roa (raw, json) Hash identifier: 5IXD0vgdtWgwpb9xEWDBJPpmakfTERrkNhemliIrOU8= Subject key identifier: BA:1D:E5:CC:16:7F:49:15:E5:23:8F:F9:68:92:07:FF:0C:11:DA:83 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584D571FA1D7CA14E2F3B72B22C0 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 20278 IP address blocks: 167.88.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a1:d7:ca:14:e2:f3:b7:2b:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=2fa38e01-5f56-44b7-933e-90e02ffb955d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:32:59:70:3e:04:ec:95:6a:5d:8f:b4:45:60: 42:cc:ae:e4:79:1e:9e:51:db:d8:52:bd:25:53:3e: a0:f8:97:62:e3:11:28:ba:e1:c2:c0:bb:1d:09:06: 5b:38:5e:9f:2e:fe:e7:55:c4:6c:8c:40:86:58:d9: 22:cd:82:50:28:50:fd:41:d0:de:30:5b:d9:a3:0e: b9:e1:8d:f2:55:11:4a:d2:e9:47:9d:b1:52:af:93: cb:6f:2e:8f:93:b4:d9:01:bb:98:d9:cc:fa:63:48: 4e:74:e7:fa:fc:e8:e9:ad:7f:76:ff:84:9c:12:df: 0f:33:46:9b:b4:39:59:00:cf:21:93:7c:7c:ae:1a: b5:83:44:88:84:af:ec:cf:d5:47:85:9f:8e:6a:b7: e4:fb:53:6f:ad:60:6e:47:a5:76:5d:f1:64:5f:28: 3c:f9:4c:11:cf:44:33:23:29:34:5c:2e:f0:74:c6: f5:ee:24:4b:80:17:4f:c8:83:73:52:98:45:ba:53: d8:c7:29:79:83:d5:34:2a:70:79:0c:19:b0:30:8a: d0:8f:d7:3c:4a:e4:49:36:87:4e:95:99:23:fe:fd: 5d:fa:12:7d:16:10:7d:07:0f:27:46:bf:17:3c:c2: e6:a2:37:20:e9:b5:3d:b2:33:e0:01:b6:c3:1e:b9: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1D:E5:CC:16:7F:49:15:E5:23:8F:F9:68:92:07:FF:0C:11:DA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 167.88.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:71:55:23:1b:8c:54:ef:6f:13:df:c5:8c:8e:cb:2b:45:27: 15:d5:3d:25:6a:fd:8d:b9:af:81:5d:93:41:c7:3a:4e:b3:6b: 6e:dd:47:eb:d3:46:43:d9:7e:a5:71:f2:1b:6f:fe:8d:71:82: 92:1b:89:df:1c:bc:d8:26:f1:c0:54:2d:ad:16:fa:8f:8e:6f: 2d:53:ca:da:e7:f8:2b:c3:8a:78:eb:55:cd:15:8c:e1:80:4e: 27:f4:fd:a0:9d:4f:2d:61:83:33:a8:fa:18:65:fa:15:66:21: d9:6d:14:ef:a6:5d:4d:d3:69:f6:c7:b9:0c:32:f5:3f:53:37: e8:d6:36:39:73:2f:31:57:ed:19:7c:2e:ee:d6:32:a6:43:fb: f4:f7:1d:f8:9f:e7:71:8f:ba:b0:c0:02:c3:dd:9b:bc:f5:8c: 6d:5e:28:86:dc:ba:0d:47:40:08:08:99:c1:38:6b:9b:ca:e0: 2c:59:27:27:5f:4e:79:11:c3:35:c1:7c:b3:a1:88:2c:25:8d: 94:2f:80:d2:7b:cc:50:b6:9e:aa:fc:27:b1:af:14:a8:fa:4d: b1:d5:b0:1b:b2:db:80:92:ef:c6:38:f9:fa:85:05:4e:90:ec: 26:7a:5b:7a:3e:74:d2:64:1c:90:89:4b:a2:50:89:96:01:55: f7:02:f3:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6HXyhTi87crIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MmZhMzhlMDEtNWY1Ni00NGI3LTkzM2UtOTBlMDJmZmI5NTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjJZcD4E7JVqXY+0RWBCzK7keR6eUdvYUr0l Uz6g+Jdi4xEouuHCwLsdCQZbOF6fLv7nVcRsjECGWNkizYJQKFD9QdDeMFvZow65 4Y3yVRFK0ulHnbFSr5PLby6Pk7TZAbuY2cz6Y0hOdOf6/OjprX92/4ScEt8PM0ab tDlZAM8hk3x8rhq1g0SIhK/sz9VHhZ+Oarfk+1NvrWBuR6V2XfFkXyg8+UwRz0Qz Iyk0XC7wdMb17iRLgBdPyINzUphFulPYxyl5g9U0KnB5DBmwMIrQj9c8SuRJNodO lZkj/v1d+hJ9FhB9Bw8nRr8XPMLmojcg6bU9sjPgAbbDHrmBNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLod5cwWf0kV5SOP+WiSB/8MEdqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNWZjM2UzNjItMTlkNS0z MDhhLThkY2ItZGU4MTI5NDQ2Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp1gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNxVSMbjFTvbxPfxYyOyytFJxXVPSVq/Y25r4Fdk0HHOk6za27dR+vT RkPZfqVx8htv/o1xgpIbid8cvNgm8cBULa0W+o+Oby1Tytrn+CvDinjrVc0VjOGA Tif0/aCdTy1hgzOo+hhl+hVmIdltFO+mXU3TafbHuQwy9T9TN+jWNjlzLzFX7Rl8 Lu7WMqZD+/T3Hfif53GPurDAAsPdm7z1jG1eKIbcug1HQAgImcE4a5vK4CxZJydf TnkRwzXBfLOhiCwljZQvgNJ7zFC2nqr8J7GvFKj6TbHVsBuy24CS78Y4+fqFBU6Q 7CZ6W3o+dNJkHJCJS6JQiZYBVfcC86w= -----END CERTIFICATE-----Generated at Mon Apr 13 09:32:37 2026 by rpki-client