$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa File: 5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa (raw, json) Hash identifier: ui1Tc/16Vgav3ht8jTEMl4oTiRMbfMT8UeXbbSJMWzQ= Subject key identifier: 9A:21:21:8B:F3:70:28:35:B6:F5:DF:1F:84:2C:80:28:FA:EA:88:D7 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584D386A51080E3467789C27C300 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 198.84.128.0/17 maxlen: 17 198.84.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:51:08:0e:34:67:78:9c:27:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=7262ec89-a252-493b-a6e2-77727ac0a84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:9e:56:1b:4d:ae:66:a5:82:d9:a5:51:56: 92:07:cf:b0:47:fb:fe:8c:21:4a:ca:5f:72:16:a7: 61:c6:cd:12:d5:fc:0f:72:82:a7:b9:a4:d3:74:f5: 43:1b:72:dc:41:38:e9:b7:e7:f3:73:36:9c:7d:84: 65:22:3b:06:ca:b1:0f:9d:de:0c:2c:e1:91:17:17: 79:81:38:71:94:17:35:6b:18:55:9c:ae:27:24:48: 75:91:cb:b6:ab:68:7a:73:1d:52:12:a7:a8:86:31: af:5e:af:4e:2b:96:93:6c:e4:1b:ec:65:96:ce:a6: 05:37:12:d9:82:d4:ae:31:71:5a:05:1b:d3:c8:e0: 8b:31:ae:11:6f:93:e0:87:bd:bf:90:09:3e:db:cb: e9:0a:e5:dc:fb:55:7a:e0:72:98:e4:4a:e5:87:c8: 70:78:84:60:93:43:36:99:7e:04:37:b6:18:c9:37: 5e:31:c9:45:21:a8:27:44:ff:cf:51:c0:21:ed:1a: 5a:15:05:9f:01:45:d8:3a:74:ac:b2:a2:6c:dd:dd: 62:25:1d:72:e6:2e:bd:02:18:a0:06:b1:45:4e:4b: b1:d7:ae:ac:aa:25:cd:16:80:0e:12:ae:5f:79:1f: 05:43:35:45:a3:07:b6:b9:5a:56:65:eb:3e:2c:9a: 6e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:21:21:8B:F3:70:28:35:B6:F5:DF:1F:84:2C:80:28:FA:EA:88:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 198.84.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d5:e9:34:e4:6c:a3:04:e5:22:9a:79:b7:0a:1d:9e:8b:ea: 9c:c3:73:18:4e:56:4f:25:64:5c:c1:bb:02:7e:ed:37:aa:15: 0f:08:c1:81:c9:51:23:18:83:1f:2f:1d:14:ed:85:46:22:76: a7:6c:d3:39:d7:1e:0e:55:b0:52:4f:f9:30:c9:1d:a1:6e:b9: 83:99:ed:47:f1:6e:bd:0f:ed:90:af:37:0e:fb:8b:39:b1:c0: b7:a2:59:84:e3:f1:69:e8:a0:a4:c3:9a:9e:cc:f3:6c:e5:07: 13:33:d6:a4:ab:02:8b:98:ac:ec:b1:c7:0d:3b:36:1e:1e:ca: ca:ab:89:e3:94:07:87:47:9c:fb:a7:c8:25:ac:c3:6a:5a:5f: c2:ce:40:bb:6e:07:f8:49:5d:55:ea:7c:00:66:54:27:b1:bd: 97:33:ff:44:94:7c:b8:f6:01:2f:ee:2e:b7:7b:a0:2e:67:7a: 95:e7:79:e4:b5:94:de:c1:c8:47:46:ba:50:91:53:6e:25:bf: 19:6e:9f:60:c1:85:02:c8:69:d4:9b:ed:d3:a6:92:f2:97:2d: fe:33:f4:0b:4e:43:5f:ac:27:61:45:d3:54:bc:53:5a:d4:91: 86:8a:3d:6c:1c:36:f3:19:27:64:3f:0c:3d:cf:f8:84:34:60: 25:2c:46:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alEIDjRneJwnwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NzI2MmVjODktYTI1Mi00OTNiLWE2ZTItNzc3MjdhYzBhODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXOeVhtNrmalgtmlUVaSB8+wR/v+jCFKyl9y Fqdhxs0S1fwPcoKnuaTTdPVDG3LcQTjpt+fzczacfYRlIjsGyrEPnd4MLOGRFxd5 gThxlBc1axhVnK4nJEh1kcu2q2h6cx1SEqeohjGvXq9OK5aTbOQb7GWWzqYFNxLZ gtSuMXFaBRvTyOCLMa4Rb5Pgh72/kAk+28vpCuXc+1V64HKY5Erlh8hweIRgk0M2 mX4EN7YYyTdeMclFIagnRP/PUcAh7RpaFQWfAUXYOnSssqJs3d1iJR1y5i69Ahig BrFFTkux166sqiXNFoAOEq5feR8FQzVFowe2uVpWZes+LJpuNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJohIYvzcCg1tvXfH4QsgCj66ojXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNTM4MmM5ODYtZTNhNS0z ZWE3LWI0YzctMzQ3NDg4MmY5YTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxlSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXV6TTkbKME5SKaebcKHZ6L6pzDcxhOVk8lZFzBuwJ+7TeqFQ8IwYHJ USMYgx8vHRTthUYidqds0znXHg5VsFJP+TDJHaFuuYOZ7Ufxbr0P7ZCvNw77izmx wLeiWYTj8WnooKTDmp7M82zlBxMz1qSrAouYrOyxxw07Nh4eysqrieOUB4dHnPun yCWsw2paX8LOQLtuB/hJXVXqfABmVCexvZcz/0SUfLj2AS/uLrd7oC5nepXneeS1 lN7ByEdGulCRU24lvxlun2DBhQLIadSb7dOmkvKXLf4z9AtOQ1+sJ2FF01S8U1rU kYaKPWwcNvMZJ2Q/DD3P+IQ0YCUsRuE= -----END CERTIFICATE-----Generated at Wed Mar 25 18:19:07 2026 by rpki-client