$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa File: 3703ae97-7694-31f8-a5e2-913a128e0be6.roa (raw, json) Hash identifier: goq7TgUchXZwuEGOLSu3FGG2sThmc1mSR3ZQYcDcv6M= Subject key identifier: 10:4E:C6:04:49:60:A3:15:29:95:CB:A9:FF:A7:79:8F:C3:B1:9D:25 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584D386A50A44B56EA6B6E4C3280 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 135.23.0.0/16 maxlen: 16 135.23.0.0/19 maxlen: 19 135.23.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:50:a4:4b:56:ea:6b:6e:4c:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=a95b8bf8-7140-4753-8600-ff18bf9f2269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:f6:6b:5e:37:af:af:ed:7f:f7:0c:24:43: f6:10:0c:f7:22:3d:17:ff:35:10:81:a7:12:80:c6: e1:1a:a3:fc:95:a7:35:0b:26:38:b1:95:e5:50:4d: d1:3f:a9:94:60:9d:73:ef:fc:3a:98:e5:a0:e7:99: 7b:df:ed:24:dd:dc:89:39:8c:46:51:76:4c:e1:05: 07:0c:b8:4f:1e:9a:2a:ee:5a:d9:65:e4:32:2d:2c: 26:3a:84:64:7b:01:c7:b0:7a:45:d4:55:58:72:8c: 3a:ca:a8:48:d4:7b:c2:e0:79:1b:85:12:00:9b:72: 79:3a:62:52:6f:71:38:b2:ed:ac:d5:4c:e8:15:db: 19:a2:55:4a:75:a3:2e:02:d7:c0:4d:5f:5b:b2:3f: 12:6e:b4:f6:e3:68:c5:f5:36:0c:ed:64:32:30:f6: 5a:f9:78:34:5d:99:86:ac:2b:55:79:16:f8:db:12: 43:d3:09:c0:d6:8f:21:bc:34:cc:42:ff:e6:3b:56: 88:3e:17:00:41:5c:5b:23:da:2e:fc:27:84:e5:06: 12:79:29:6a:e2:38:e6:27:94:bf:c5:a8:f7:d8:08: 75:23:2b:31:9b:24:d4:4e:38:17:7c:32:d9:6e:5a: 22:4c:bf:fb:de:5a:76:46:8c:f8:04:97:55:f5:73: 74:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4E:C6:04:49:60:A3:15:29:95:CB:A9:FF:A7:79:8F:C3:B1:9D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 135.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:2a:79:bd:b9:c0:da:30:1e:58:23:43:71:1a:96:88:2e:82: b1:b4:44:47:9d:5f:3c:f1:67:ad:b6:7b:c0:8a:b4:ef:8d:b1: 13:ec:63:00:68:f5:bd:cc:6f:7c:01:9a:d3:01:aa:ed:bd:f5: 67:5b:15:34:4c:80:d4:c8:de:75:eb:c4:21:c4:64:57:b6:f5: d1:4c:1d:1b:2d:54:0c:cd:b1:93:0c:42:c5:62:4e:bd:53:73: 9b:ea:79:7b:61:f3:87:30:2d:ef:9b:27:d0:96:b8:a2:f7:71: 17:a4:3c:aa:b3:d9:76:db:6f:a6:3d:94:19:ad:39:89:ff:bd: 17:f0:68:39:86:a1:d0:9e:57:13:a6:49:5e:46:cd:72:1d:3f: f9:dc:81:ec:1e:7d:3f:57:ec:03:83:ef:af:dd:93:4b:29:c2: fd:09:24:d0:d0:6c:a2:9c:b3:67:86:64:c4:4a:24:0d:66:6f: d4:e6:d5:e6:60:73:30:84:30:20:aa:63:cb:aa:15:c0:57:29: d7:bf:48:97:f8:ec:17:3e:01:b2:79:88:37:3f:c3:71:97:cb: 66:e5:07:43:7b:df:f4:ef:e8:bd:e9:82:05:38:5e:cc:96:c6: 8f:90:39:09:3d:53:9a:1a:04:2e:3d:c6:c7:13:bf:3f:53:fc: 59:f2:c2:3f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE04alCkS1bqa25MMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YTk1YjhiZjgtNzE0MC00NzUzLTg2MDAtZmYxOGJmOWYyMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYv2a143r6/tf/cMJEP2EAz3Ij0X/zUQgacS gMbhGqP8lac1CyY4sZXlUE3RP6mUYJ1z7/w6mOWg55l73+0k3dyJOYxGUXZM4QUH DLhPHpoq7lrZZeQyLSwmOoRkewHHsHpF1FVYcow6yqhI1HvC4HkbhRIAm3J5OmJS b3E4su2s1UzoFdsZolVKdaMuAtfATV9bsj8SbrT242jF9TYM7WQyMPZa+Xg0XZmG rCtVeRb42xJD0wnA1o8hvDTMQv/mO1aIPhcAQVxbI9ou/CeE5QYSeSlq4jjmJ5S/ xaj32Ah1IysxmyTUTjgXfDLZbloiTL/73lp2Roz4BJdV9XN08QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBBOxgRJYKMVKZXLqf+neY/DsZ0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvMzcwM2FlOTctNzY5NC0z MWY4LWE1ZTItOTEzYTEyOGUwYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhxcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADCp5vbnA2jAeWCNDcRqWiC6CsbRER51fPPFnrbZ7wIq0742xE+xjAGj1 vcxvfAGa0wGq7b31Z1sVNEyA1MjedevEIcRkV7b10UwdGy1UDM2xkwxCxWJOvVNz m+p5e2HzhzAt75sn0Ja4ovdxF6Q8qrPZdttvpj2UGa05if+9F/BoOYah0J5XE6ZJ XkbNch0/+dyB7B59P1fsA4Pvr92TSynC/Qkk0NBsopyzZ4ZkxEokDWZv1ObV5mBz MIQwIKpjy6oVwFcp179Il/jsFz4BsnmINz/DcZfLZuUHQ3vf9O/ovemCBThezJbG j5A5CT1TmhoELj3GxxO/P1P8WfLCPw== -----END CERTIFICATE-----Generated at Wed Mar 25 18:20:37 2026 by rpki-client