$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/5f08ccfd-9928-3a23-a766-8c53aaf07240.roa File: 5f08ccfd-9928-3a23-a766-8c53aaf07240.roa (raw, json) Hash identifier: jHn0HjWE3COhJq9/IPos6q6/Efvj7Wv4QwZBVuOqnOQ= Subject key identifier: 9B:AD:39:CB:85:2D:47:37:F9:37:6B:7C:62:59:F7:1A:C1:9A:C8:70 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D0BDD1CD3BF05E8BFCCE5F860 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/5f08ccfd-9928-3a23-a766-8c53aaf07240.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 399629 IP address blocks: 162.252.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:1c:d3:bf:05:e8:bf:cc:e5:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=ed72fd30-37bf-4a1a-8770-37befc2371be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:c4:9b:bc:1e:3b:a8:d8:be:dc:af:79:a6: 34:e7:a9:42:45:ec:c7:ec:ca:3d:96:af:1d:60:3c: c6:1d:5b:46:fa:dd:3d:bc:32:5e:d8:0e:9b:d5:11: d1:15:a8:0a:66:6e:4f:e8:19:21:25:59:f3:7d:9d: ca:d2:3b:28:4c:6b:95:37:92:2a:0a:ae:64:d0:0d: 9e:89:fd:e2:6a:7f:e3:bc:25:5c:56:a9:c0:b1:f6: b7:bc:a4:0b:28:24:9a:06:df:79:55:8d:2f:0c:f3: 49:ec:4f:a9:36:4b:eb:1b:20:16:2c:46:d8:50:e6: 07:e6:ea:80:d9:8b:29:09:5d:c0:00:4c:10:0e:f1: dc:87:ea:28:2f:5d:4c:c5:74:d2:85:7f:02:34:58: da:24:b2:c2:3a:93:bf:fc:42:ec:95:b3:a4:6a:51: 1e:9e:29:02:ee:80:05:43:e9:a1:eb:d3:e7:80:bc: 2c:5d:21:5a:4c:a9:4a:b6:51:f3:fb:15:7c:b6:27: aa:a4:9d:b7:b2:4f:df:9c:f4:1a:ee:1e:4c:d5:fa: 17:98:bb:c6:30:55:a4:ab:ea:3d:ca:32:04:16:f3: 5a:f1:b3:39:91:f3:80:06:45:ab:68:26:b4:39:36: c1:1c:09:60:d9:c1:44:c3:31:0a:29:37:63:a5:a6: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AD:39:CB:85:2D:47:37:F9:37:6B:7C:62:59:F7:1A:C1:9A:C8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/5f08ccfd-9928-3a23-a766-8c53aaf07240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 162.252.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:41:33:92:22:95:b1:09:6b:f3:8a:a2:7e:9f:74:0c:94:73: 15:ba:b0:6a:25:28:4f:95:72:02:bf:8b:50:c8:6f:32:1a:3e: d5:41:1d:5e:3a:96:a0:00:f4:f5:a0:05:f2:c7:db:20:5c:c6: c7:b6:99:03:75:69:93:b3:ce:6c:85:da:88:f4:70:61:9b:b1: c8:13:6f:39:45:18:e2:de:2b:9c:8a:71:74:d2:1e:05:37:f1: d7:c5:69:de:e8:2b:d7:55:1f:ca:a6:d6:8f:a4:cd:f8:81:4f: a2:b7:92:ec:a8:04:31:5c:9f:d3:56:29:8a:ed:fa:62:07:aa: 3d:55:04:6a:5b:fb:74:69:1c:eb:eb:6e:16:ec:39:5c:df:25: 52:16:cc:f3:16:98:b4:e8:7b:0e:10:08:8c:8f:c1:26:31:b1: d2:21:0a:eb:00:1c:3c:47:ef:04:a7:00:47:8c:92:37:da:8b: 7f:8b:09:42:b5:d4:a2:d8:4a:f3:0d:bd:14:2a:38:83:6e:cc: 17:4d:36:d0:bc:17:ee:54:74:59:1b:bc:99:f2:f0:57:c7:82: 4f:95:f4:a1:50:82:a1:18:eb:12:b9:ac:15:a8:3a:56:c9:99: 35:e2:37:68:66:28:32:8d:49:0a:07:0c:78:51:bd:a1:86:e8: 46:37:b3:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3RzTvwXov8zl+GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk ZWQ3MmZkMzAtMzdiZi00YTFhLTg3NzAtMzdiZWZjMjM3MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolfEm7weO6jYvtyveaY056lCRezH7Mo9lq8d YDzGHVtG+t09vDJe2A6b1RHRFagKZm5P6BkhJVnzfZ3K0jsoTGuVN5IqCq5k0A2e if3ian/jvCVcVqnAsfa3vKQLKCSaBt95VY0vDPNJ7E+pNkvrGyAWLEbYUOYH5uqA 2YspCV3AAEwQDvHch+ooL11MxXTShX8CNFjaJLLCOpO//ELslbOkalEenikC7oAF Q+mh69PngLwsXSFaTKlKtlHz+xV8tieqpJ23sk/fnPQa7h5M1foXmLvGMFWkq+o9 yjIEFvNa8bM5kfOABkWraCa0OTbBHAlg2cFEwzEKKTdjpaaEmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJutOcuFLUc3+TdrfGJZ9xrBmshwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNWYwOGNjZmQtOTkyOC0z YTIzLWE3NjYtOGM1M2FhZjA3MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovzGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFBM5IilbEJa/OKon6fdAyUcxW6sGolKE+VcgK/i1DIbzIaPtVBHV46 lqAA9PWgBfLH2yBcxse2mQN1aZOzzmyF2oj0cGGbscgTbzlFGOLeK5yKcXTSHgU3 8dfFad7oK9dVH8qm1o+kzfiBT6K3kuyoBDFcn9NWKYrt+mIHqj1VBGpb+3RpHOvr bhbsOVzfJVIWzPMWmLToew4QCIyPwSYxsdIhCusAHDxH7wSnAEeMkjfai3+LCUK1 1KLYSvMNvRQqOINuzBdNNtC8F+5UdFkbvJny8FfHgk+V9KFQgqEY6xK5rBWoOlbJ mTXiN2hmKDKNSQoHDHhRvaGG6EY3s6M= -----END CERTIFICATE-----Generated at Tue Mar 10 10:59:42 2026 by rpki-client