$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa File: 435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa (raw, json) Hash identifier: L7l46P4uLattoAYNwGyyu8ekHTAaOr2ETxpj15uuMJw= Subject key identifier: 6D:3B:15:B8:58:9E:70:CB:C7:C7:9F:8B:54:47:66:FB:21:BA:F6:A6 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584EAD1C5761485B885AD284E900 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 5645 IP address blocks: 209.161.192.0/18 maxlen: 18 209.161.192.0/20 maxlen: 20 209.161.208.0/20 maxlen: 20 209.161.224.0/20 maxlen: 20 209.161.240.0/21 maxlen: 21 209.161.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:57:61:48:5b:88:5a:d2:84:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=25c00b83-d81a-4847-8aa7-48a641963748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:e9:fe:fb:51:8a:28:7f:6c:15:6a:84:7b: 1b:09:91:28:68:cb:82:6b:6b:5e:1d:e9:44:31:e7: b1:de:05:bd:f5:8f:32:40:dc:3a:a5:3c:cb:44:9b: 61:c6:39:20:3b:86:de:d1:d6:d8:92:88:f2:90:ab: 75:af:1a:8f:9f:a3:ba:39:4c:3f:f0:cb:5b:b9:b4: 61:46:ea:99:74:88:9a:0f:e7:e6:45:c8:37:7f:54: bf:25:bd:71:60:71:26:96:37:cf:f6:6e:49:ba:c5: 10:f0:04:a3:67:e3:0c:e2:6f:6d:85:4a:48:3e:d4: aa:0b:02:5a:00:f5:2f:90:db:7c:9b:b3:16:5e:d8: 32:e8:9c:79:b2:74:6b:67:b4:de:cb:2a:94:06:c1: 6c:4d:43:13:23:0e:26:ac:67:78:30:4f:18:63:b5: ee:ea:7b:94:4f:4d:a4:a8:75:e2:8c:b2:cf:fd:66: ae:fa:51:f6:49:9c:b1:26:dd:e9:79:36:61:18:0a: 24:9d:1a:c2:4d:b6:07:01:72:30:1e:40:fe:80:75: 3f:59:9e:00:96:17:82:c8:66:96:3a:0a:ab:4c:28: e5:20:7e:4b:87:ca:f4:20:80:1b:31:48:3e:66:e3: b1:68:76:f1:9f:72:aa:b6:df:41:cb:37:20:e9:4e: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3B:15:B8:58:9E:70:CB:C7:C7:9F:8B:54:47:66:FB:21:BA:F6:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 209.161.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0d:0b:df:8a:88:44:03:b8:34:69:fc:99:58:8f:42:72:05: 53:59:5c:d5:a7:e3:9c:79:23:02:f9:18:48:15:a1:e0:12:1c: 39:99:9a:7b:94:cf:c8:ea:d6:f2:84:46:55:4b:91:af:65:42: 5c:32:99:f5:89:3e:18:c9:16:9f:9a:a2:a7:26:03:24:18:b8: 92:5b:20:be:e3:7f:1e:98:f1:8a:48:de:10:e6:f3:b1:56:aa: d6:56:24:70:ad:34:81:21:85:f7:a6:3d:2b:01:4c:74:16:23: 9b:7b:49:3a:b6:1a:a9:69:a2:52:25:84:fd:ba:aa:23:d1:48: d5:a6:88:f2:61:b7:93:88:82:a4:ff:24:29:2b:d6:a9:0d:24: bc:81:b4:12:6b:cc:18:ce:ac:e7:c3:76:98:90:05:d1:4a:86: 06:4f:5c:1f:87:94:f4:12:5b:a7:a5:e5:56:eb:cb:47:3c:57: d7:62:21:3f:21:25:86:01:60:32:c4:11:6a:33:94:c1:ca:78: 64:af:22:2c:5c:b8:c3:8f:03:c7:12:96:34:39:b5:2c:b5:4e: 33:05:a0:96:79:db:71:e2:9f:41:e9:f9:db:34:eb:9c:90:9c: 31:5a:c6:01:03:0e:59:a7:fe:7e:7b:2a:26:fe:e9:5a:3f:a8: e7:7d:48:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFdhSFuIWtKE6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk MjVjMDBiODMtZDgxYS00ODQ3LThhYTctNDhhNjQxOTYzNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Xp/vtRiih/bBVqhHsbCZEoaMuCa2teHelE Meex3gW99Y8yQNw6pTzLRJthxjkgO4be0dbYkojykKt1rxqPn6O6OUw/8MtbubRh RuqZdIiaD+fmRcg3f1S/Jb1xYHEmljfP9m5JusUQ8ASjZ+MM4m9thUpIPtSqCwJa APUvkNt8m7MWXtgy6Jx5snRrZ7TeyyqUBsFsTUMTIw4mrGd4ME8YY7Xu6nuUT02k qHXijLLP/Wau+lH2SZyxJt3peTZhGAoknRrCTbYHAXIwHkD+gHU/WZ4AlheCyGaW OgqrTCjlIH5Lh8r0IIAbMUg+ZuOxaHbxn3Kqtt9Byzcg6U6yvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG07FbhYnnDLx8efi1RHZvshuvamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNDM1ZWU0YzctOTg3Yy0z ZTA3LTg1ODktMGQzOWIzYzhlYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0aHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEANC9+KiEQDuDRp/JlYj0JyBVNZXNWn45x5IwL5GEgVoeASHDmZmnuU z8jq1vKERlVLka9lQlwymfWJPhjJFp+aoqcmAyQYuJJbIL7jfx6Y8YpI3hDm87FW qtZWJHCtNIEhhfemPSsBTHQWI5t7STq2GqlpolIlhP26qiPRSNWmiPJht5OIgqT/ JCkr1qkNJLyBtBJrzBjOrOfDdpiQBdFKhgZPXB+HlPQSW6el5Vbry0c8V9diIT8h JYYBYDLEEWozlMHKeGSvIixcuMOPA8cSljQ5tSy1TjMFoJZ523Hin0Hp+ds065yQ nDFaxgEDDlmn/n57Kib+6Vo/qOd9SGE= -----END CERTIFICATE-----Generated at Wed Sep 2 18:05:33 2026 by rpki-client