$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/420b0bcc-147a-3e2b-b25f-c403abedd91a.roa File: 420b0bcc-147a-3e2b-b25f-c403abedd91a.roa (raw, json) Hash identifier: YAxbh5WyW/VO2Dj2vT1SwbbZ3Oi/aDVqJoOdSjl082M= Subject key identifier: 37:7D:B0:1C:F9:8C:DF:E1:DC:75:40:F1:27:F4:35:93:01:D0:D1:DD Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584D47C506AAB3DF12A745B65A00 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/420b0bcc-147a-3e2b-b25f-c403abedd91a.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 32806 IP address blocks: 216.7.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:06:aa:b3:df:12:a7:45:b6:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=4459a217-884a-46e9-b723-552aae746cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:a7:af:ac:9a:8c:60:e4:71:9d:e4:94:4b: 3c:62:4d:a9:31:e5:2c:8e:10:c9:d2:25:be:6e:56: fa:5f:0d:f8:c4:b2:b3:0d:b1:29:b3:0f:27:d5:42: 70:14:d1:bc:13:6a:4c:89:68:d8:ca:33:5b:28:8a: 9f:cb:08:15:9a:58:c6:dc:a5:a9:87:8b:9a:2f:0a: 52:ea:dd:9b:b8:97:85:7f:21:ca:ee:68:d7:cc:7e: 70:f1:39:97:fe:7d:83:19:e9:2f:6f:94:c0:fd:1c: d2:e9:c7:8c:65:e4:4d:34:37:7c:88:0f:75:95:ee: 36:46:79:43:9a:ca:cd:b5:6b:db:ca:24:b8:8e:ad: 22:5c:19:dc:b1:25:9c:24:33:d6:00:81:77:d9:15: f8:68:2f:28:b9:02:5f:b3:b6:d9:c0:a4:b9:45:34: 5b:73:bc:16:16:8f:4e:24:f0:a9:97:bc:12:f1:b9: 76:1a:20:76:5f:7a:d7:e4:99:1d:70:75:bb:4e:36: 99:e1:b6:56:6a:36:1f:66:da:15:57:c2:50:1b:b0: 24:3e:85:3a:45:fd:6c:ee:5e:c0:6a:85:bf:f6:df: be:e8:83:b0:2c:b8:66:be:3c:d1:cd:ed:14:b8:d4: 2c:15:15:78:68:5b:6e:26:b3:61:3c:ce:ef:8e:a9: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7D:B0:1C:F9:8C:DF:E1:DC:75:40:F1:27:F4:35:93:01:D0:D1:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/420b0bcc-147a-3e2b-b25f-c403abedd91a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 216.7.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:00:2e:d8:5b:75:a3:e4:62:6b:18:0d:e7:99:27:71:5d:52: 97:07:b9:61:57:66:46:e4:7b:d7:c0:8e:53:4c:dc:1e:74:bd: e3:58:f9:34:bf:7c:cf:38:f4:b5:e4:00:32:b3:aa:45:47:47: 0a:2c:df:fb:f3:c7:1a:ae:2d:e6:d8:8a:49:06:70:81:d4:d1: fb:99:c2:93:85:62:ba:bf:aa:9e:7b:07:cb:72:6d:9a:d8:c3: fb:c4:f2:98:c8:53:6b:da:81:2c:46:59:f5:01:c6:73:3f:d9: d5:3e:7f:6b:dd:a2:96:90:2f:ea:d6:3d:3d:71:4c:46:ed:92: 8d:d4:88:d7:e2:8d:4e:38:a9:ce:c9:be:a3:77:a8:33:c1:e1: 40:82:73:49:2b:27:a1:e4:36:d4:19:a2:83:21:ca:2f:9c:06: 08:cb:05:a1:35:03:bd:bb:89:1b:18:c2:44:c3:c5:6a:78:2c: 6b:cb:8c:0a:ae:db:d3:6e:81:09:ee:81:db:90:6c:1f:ca:81: b6:98:f8:4c:30:12:64:92:8a:26:f6:d8:fc:74:db:12:8f:dc: 12:81:a9:97:0e:24:4c:bb:51:ba:7b:9c:1d:f7:5e:42:25:32: d1:73:70:e2:23:43:91:dd:ab:a3:b6:3c:3c:ff:b9:7e:0b:a1: 77:0f:e4:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQaqs98Sp0W2WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NDQ1OWEyMTctODg0YS00NmU5LWI3MjMtNTUyYWFlNzQ2Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWGnr6yajGDkcZ3klEs8Yk2pMeUsjhDJ0iW+ blb6Xw34xLKzDbEpsw8n1UJwFNG8E2pMiWjYyjNbKIqfywgVmljG3KWph4uaLwpS 6t2buJeFfyHK7mjXzH5w8TmX/n2DGekvb5TA/RzS6ceMZeRNNDd8iA91le42RnlD msrNtWvbyiS4jq0iXBncsSWcJDPWAIF32RX4aC8ouQJfs7bZwKS5RTRbc7wWFo9O JPCpl7wS8bl2GiB2X3rX5JkdcHW7TjaZ4bZWajYfZtoVV8JQG7AkPoU6Rf1s7l7A aoW/9t++6IOwLLhmvjzRze0UuNQsFRV4aFtuJrNhPM7vjqmzGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDd9sBz5jN/h3HVA8Sf0NZMB0NHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNDIwYjBiY2MtMTQ3YS0z ZTJiLWIyNWYtYzQwM2FiZWRkOTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoALthbdaPkYmsYDeeZJ3FdUpcHuWFXZkbke9fAjlNM3B50veNY+TS/ fM849LXkADKzqkVHRwos3/vzxxquLebYikkGcIHU0fuZwpOFYrq/qp57B8tybZrY w/vE8pjIU2vagSxGWfUBxnM/2dU+f2vdopaQL+rWPT1xTEbtko3UiNfijU44qc7J vqN3qDPB4UCCc0krJ6HkNtQZooMhyi+cBgjLBaE1A727iRsYwkTDxWp4LGvLjAqu 29NugQnugduQbB/KgbaY+EwwEmSSiib22Px02xKP3BKBqZcOJEy7Ubp7nB33XkIl MtFzcOIjQ5Hdq6O2PDz/uX4LoXcP5EQ= -----END CERTIFICATE-----Generated at Wed Mar 25 08:32:50 2026 by rpki-client