$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa File: 573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa (raw, json) Hash identifier: NA6YLxvtpzwvkCYu7kH6Vr5hq8a9FQXi+VGZx/bBJBI= Subject key identifier: E4:23:37:49:C5:0B:B7:C8:A3:A0:1A:B9:54:3F:F8:71:5B:B9:3B:7B Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584EBB11BF637BEA5235C94EFA00 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 5645 IP address blocks: 192.0.128.0/17 maxlen: 17 192.0.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:bf:63:7b:ea:52:35:c9:4e:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=b83cb316-2b2e-44c1-9ee6-8e27be38b3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:9d:d3:71:8e:49:bb:5f:68:49:09:e4:ee: b1:ef:7c:ea:1d:4b:54:73:36:43:f9:a2:25:66:df: 19:82:76:68:89:e1:b8:e1:8d:fe:e5:72:8c:ad:10: c7:49:e8:95:d2:b7:11:b4:00:e6:a7:5a:44:57:8d: 95:5b:0d:94:42:c5:14:a5:2a:5f:85:73:fb:d1:dd: ca:5d:c7:3f:03:b0:49:fb:d8:5f:51:91:18:91:ef: 58:41:a0:6e:be:aa:95:fa:76:9a:af:14:d2:1f:3b: 82:0f:74:fc:94:cb:c5:8c:a9:2f:0f:e5:5e:78:cf: b2:2e:7a:c9:80:0e:99:9e:b0:55:33:46:24:e4:88: 7b:b5:56:20:c9:8d:9a:e6:95:38:5f:41:bf:de:15: eb:f8:73:10:f0:b6:b8:90:e5:0b:44:83:64:a7:a1: 43:61:95:79:ea:7e:1a:dd:4f:27:8b:cd:92:7c:87: 0e:c0:1e:be:2b:73:a5:1c:c7:f2:1c:a1:75:ba:ce: 42:ce:67:cb:f2:96:67:27:8c:4e:3a:84:b1:98:13: a2:91:ac:86:92:b9:05:ea:c0:16:ff:e8:5d:11:eb: 27:65:86:ac:d2:96:90:15:32:c5:9f:54:6e:e8:94: 05:58:4b:21:f2:21:77:ae:54:d8:47:d1:7f:6f:7a: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:23:37:49:C5:0B:B7:C8:A3:A0:1A:B9:54:3F:F8:71:5B:B9:3B:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 192.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:d6:aa:5e:e5:33:9f:d2:13:3f:37:23:e0:f8:a1:cc:c3:55: d1:54:26:b2:e7:81:bc:cc:ad:73:7b:9a:70:e6:cf:a2:99:36: 5d:29:52:ad:0b:cf:ee:ee:50:03:2d:46:da:28:94:2c:84:b3: 1b:d0:c4:e5:20:2b:7c:9f:4e:2e:fe:5d:01:fc:34:a5:01:35: 6f:25:44:f7:28:c2:be:a1:13:7a:d3:0f:5b:59:44:5f:54:69: 83:bb:0c:8c:9e:22:c8:57:63:4b:e9:01:fe:70:d0:23:39:f0: e5:ed:e7:f2:f6:8c:bb:43:20:62:1b:37:da:4c:e3:3e:6d:77: 0e:88:11:e3:77:d2:ca:6c:8b:3d:db:cf:09:d5:de:db:ef:d2: 9c:4d:ea:e2:5e:6f:50:8c:87:37:49:9e:18:55:a0:3d:22:cd: 69:18:fc:51:89:be:51:06:09:5c:fa:f7:7a:7e:d8:f7:20:e4: 12:5d:a0:e0:f7:a2:67:cf:4a:3d:ea:77:b4:36:2e:f4:d2:0f: e0:24:5c:23:71:4d:e2:63:d0:ad:c1:20:77:cb:39:e6:33:02: 40:ce:3c:de:1b:58:f8:f3:29:9b:75:06:ed:27:9f:7f:e3:b2: 96:09:9a:7c:06:3b:b2:3f:f8:a4:e8:75:90:5a:57:aa:8e:4b: ea:a6:69:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Eb9je+pSNclO+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YjgzY2IzMTYtMmIyZS00NGMxLTllZTYtOGUyN2JlMzhiM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFWd03GOSbtfaEkJ5O6x73zqHUtUczZD+aIl Zt8ZgnZoieG44Y3+5XKMrRDHSeiV0rcRtADmp1pEV42VWw2UQsUUpSpfhXP70d3K Xcc/A7BJ+9hfUZEYke9YQaBuvqqV+naarxTSHzuCD3T8lMvFjKkvD+VeeM+yLnrJ gA6ZnrBVM0Yk5Ih7tVYgyY2a5pU4X0G/3hXr+HMQ8La4kOULRINkp6FDYZV56n4a 3U8ni82SfIcOwB6+K3OlHMfyHKF1us5CzmfL8pZnJ4xOOoSxmBOikayGkrkF6sAW /+hdEesnZYas0paQFTLFn1Ru6JQFWEsh8iF3rlTYR9F/b3oW4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQjN0nFC7fIo6AauVQ/+HFbuTt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNTczZjNlYmEtNjlmNy0z ZDE3LThkZGYtYmVjNDEwYWMxMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvWql7lM5/SEz83I+D4oczDVdFUJrLngbzMrXN7mnDmz6KZNl0pUq0L z+7uUAMtRtoolCyEsxvQxOUgK3yfTi7+XQH8NKUBNW8lRPcowr6hE3rTD1tZRF9U aYO7DIyeIshXY0vpAf5w0CM58OXt5/L2jLtDIGIbN9pM4z5tdw6IEeN30spsiz3b zwnV3tvv0pxN6uJeb1CMhzdJnhhVoD0izWkY/FGJvlEGCVz693p+2Pcg5BJdoOD3 omfPSj3qd7Q2LvTSD+AkXCNxTeJj0K3BIHfLOeYzAkDOPN4bWPjzKZt1Bu0nn3/j spYJmnwGO7I/+KTodZBaV6qOS+qmaYQ= -----END CERTIFICATE-----Generated at Wed Sep 2 18:06:42 2026 by rpki-client