$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa File: 573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa (raw, json) Hash identifier: tM8fVBq4onuv4O1zG85bGnK7N/WoS4X7VIiLuoHAeig= Subject key identifier: 1D:1B:EB:67:63:DE:5B:76:33:5F:71:D1:04:BB:95:15:E3:F7:B0:13 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584D386A50F8DAA6C32A1F06F7C0 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 192.0.128.0/17 maxlen: 17 192.0.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:50:f8:da:a6:c3:2a:1f:06:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=55a49a3e-9db5-4901-972c-202c0f1380e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6e:c4:db:4e:ab:c2:89:7e:62:e1:11:89:a6: 6f:70:ce:c8:d4:aa:af:aa:23:1e:1a:9a:11:fc:a6: 95:d8:3d:4c:1c:bc:2b:31:9b:46:46:85:03:22:8d: 0a:46:be:de:3a:30:70:3c:33:39:32:dc:68:74:c8: 47:4c:03:66:82:4f:ab:a3:a6:f8:76:bb:16:aa:3e: 4f:12:ff:8e:6d:a0:b5:2f:36:c6:7c:fe:17:c1:14: 11:15:13:b6:a1:18:1b:4f:54:b5:df:ff:bf:df:7c: 37:36:7b:1d:7e:d5:c3:eb:5f:56:2a:4b:df:bd:eb: 24:92:51:6e:5e:e7:13:88:18:b1:0f:15:45:a3:de: f9:f1:17:40:89:c4:c3:8b:bd:03:43:40:a7:de:f5: 2e:8b:26:9e:ff:9a:d0:39:32:50:e0:60:7b:74:0c: cb:1a:f7:76:a6:19:ba:75:69:89:df:30:1e:13:14: 4f:a3:5d:28:df:1a:67:56:5f:ec:f3:db:10:7e:69: ed:77:5e:b1:47:26:75:a4:66:be:51:da:0e:96:05: e8:21:24:2d:c9:fd:fc:14:71:3b:29:bb:42:8b:21: 1b:15:02:ca:fa:d1:35:8b:b6:9c:84:18:bb:a8:85: bb:94:ac:16:61:99:5e:fd:a4:0a:3d:d8:59:62:f7: 8a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1B:EB:67:63:DE:5B:76:33:5F:71:D1:04:BB:95:15:E3:F7:B0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 192.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0c:4c:cb:cf:06:f6:a2:df:9d:fd:66:9c:80:ed:38:64:a4: ad:42:30:90:e3:72:ab:27:a9:8e:a1:8c:5f:9b:67:aa:94:60: ea:dc:b4:d0:49:8d:4f:c5:6c:54:a1:3f:46:43:bf:5b:3b:c7: 45:0a:05:40:78:b6:a3:55:a4:51:ff:2b:49:01:aa:d0:4f:25: 51:f3:8e:e9:dd:31:c1:55:8c:c6:da:ab:81:48:55:fb:e8:0e: 91:b8:9a:18:ff:35:f0:91:6f:ab:99:8b:bf:34:b8:c5:ef:4e: a3:9c:6d:66:e4:2c:2d:6f:d8:c9:e0:99:e0:b4:90:71:41:7c: 87:b5:11:4a:b9:74:a3:38:35:e5:6b:98:fe:e9:4b:9a:b1:11: ed:41:83:5f:88:10:70:27:1b:23:bb:1f:c5:d0:9b:07:47:06: e9:5d:68:17:a9:aa:8d:61:85:8e:83:39:64:04:01:02:08:49: 7a:06:8c:7d:cc:cc:0c:d2:32:61:9a:ba:81:a6:f0:40:11:6b: b0:e6:23:98:90:9d:08:81:e1:8e:5d:1a:7d:2e:a0:9c:5a:e7: 16:7f:c3:dd:3c:42:84:77:01:2c:b1:02:28:aa:7f:3a:53:d5: 3d:33:d3:e4:53:16:07:9f:fb:8e:91:33:8b:7b:89:5b:fc:14: 68:a4:14:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alD42qbDKh8G98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NTVhNDlhM2UtOWRiNS00OTAxLTk3MmMtMjAyYzBmMTM4MGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA227E206rwol+YuERiaZvcM7I1KqvqiMeGpoR /KaV2D1MHLwrMZtGRoUDIo0KRr7eOjBwPDM5MtxodMhHTANmgk+ro6b4drsWqj5P Ev+ObaC1LzbGfP4XwRQRFRO2oRgbT1S13/+/33w3NnsdftXD619WKkvfveskklFu XucTiBixDxVFo9758RdAicTDi70DQ0Cn3vUuiyae/5rQOTJQ4GB7dAzLGvd2phm6 dWmJ3zAeExRPo10o3xpnVl/s89sQfmntd16xRyZ1pGa+UdoOlgXoISQtyf38FHE7 KbtCiyEbFQLK+tE1i7achBi7qIW7lKwWYZle/aQKPdhZYveKrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0b62dj3lt2M19x0QS7lRXj97ATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNTczZjNlYmEtNjlmNy0z ZDE3LThkZGYtYmVjNDEwYWMxMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsMTMvPBvai3539ZpyA7ThkpK1CMJDjcqsnqY6hjF+bZ6qUYOrctNBJ jU/FbFShP0ZDv1s7x0UKBUB4tqNVpFH/K0kBqtBPJVHzjundMcFVjMbaq4FIVfvo DpG4mhj/NfCRb6uZi780uMXvTqOcbWbkLC1v2MngmeC0kHFBfIe1EUq5dKM4NeVr mP7pS5qxEe1Bg1+IEHAnGyO7H8XQmwdHBuldaBepqo1hhY6DOWQEAQIISXoGjH3M zAzSMmGauoGm8EARa7DmI5iQnQiB4Y5dGn0uoJxa5xZ/w908QoR3ASyxAiiqfzpT 1T0z0+RTFgef+46RM4t7iVv8FGikFFE= -----END CERTIFICATE-----Generated at Wed Mar 25 18:20:04 2026 by rpki-client