$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5c4ded55-53f6-3745-860c-522c2e4b7fc2.roa File: 5c4ded55-53f6-3745-860c-522c2e4b7fc2.roa (raw, json) Hash identifier: g72h3270X40NInAPhkpq5PO/HbaBSeDKao0QJXPlk+c= Subject key identifier: 02:33:CE:FB:0F:FB:1B:B0:24:40:06:DE:6A:08:9F:C9:E0:75:0E:F8 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584EBB11BF0FFE57977AA7620F00 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5c4ded55-53f6-3745-860c-522c2e4b7fc2.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 5645 IP address blocks: 108.162.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:bf:0f:fe:57:97:7a:a7:62:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=28fe328e-32ab-4b03-ad39-b3a765dcb22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:dc:fc:68:b2:1f:18:56:e5:2a:af:29:c9: ac:34:fa:22:e9:e5:e0:95:7f:be:20:e1:88:b9:1c: 36:7b:1c:8b:d0:5f:5b:1c:21:87:67:38:5a:ff:59: 97:e8:34:86:53:9a:c1:f1:2e:8e:a7:ea:5c:e4:a9: 7b:a2:32:43:3e:83:ff:e1:c9:92:c6:0d:33:58:2f: cf:ed:d8:b9:54:af:b7:af:ee:36:fb:91:68:ea:78: ff:18:84:b5:d6:88:6c:da:3f:6e:3c:fc:c7:3a:8f: b7:66:67:b3:82:6b:3a:e1:ce:c4:6f:4d:f0:c1:18: c4:bb:95:16:96:32:a8:04:48:a4:bc:a1:eb:3c:cf: b2:42:c9:a5:28:8b:3f:64:a4:10:a2:dd:bf:0e:92: fd:64:8c:bb:35:85:4f:b8:e7:06:7b:f2:c6:3d:e9: 68:f7:43:c8:f7:47:69:b2:81:1e:31:61:17:a5:38: 83:e5:06:4e:eb:aa:dd:17:5e:a7:2f:e9:79:68:4f: ee:5f:fd:c6:29:e9:9d:9f:e5:41:40:b3:cb:83:dd: ea:8a:70:78:5a:79:21:d5:63:a6:3d:37:41:37:f3: 3c:ed:1b:87:74:8e:b5:de:f4:b6:0b:ba:cd:a3:cf: 62:7f:77:38:84:63:03:cc:70:36:83:81:32:64:0e: b4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:33:CE:FB:0F:FB:1B:B0:24:40:06:DE:6A:08:9F:C9:E0:75:0E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5c4ded55-53f6-3745-860c-522c2e4b7fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 108.162.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8f:87:a1:24:25:61:b2:80:a9:a1:9b:43:1b:2f:5c:e9:52: 67:8c:ec:3c:af:1a:d3:f9:d8:53:70:d1:ac:16:d6:62:eb:fe: e2:2e:6f:95:9c:87:48:f1:b8:96:2c:ab:ba:df:d0:6b:e1:97: 27:29:f1:44:c3:69:82:f9:4c:2f:e4:27:21:54:c9:fe:dd:fe: ad:a6:f9:e7:45:de:b1:ca:d7:51:e5:d3:66:bc:72:bc:d3:45: 26:68:b3:95:67:db:d9:c8:44:8d:8a:3c:f8:39:28:b7:da:34: f9:82:46:a4:5d:35:9b:60:03:d8:c4:7d:e5:8b:67:34:d2:41: 55:a9:24:0a:30:f0:cc:9d:79:bf:05:94:83:82:0c:ad:c7:64: 20:19:ba:be:d8:76:33:73:92:2d:e1:ad:da:88:44:31:81:96: b1:3c:e3:6a:c8:ea:96:7d:21:57:bd:79:72:fb:da:b1:e1:f0: cf:2c:9d:0f:ed:65:2a:f9:52:18:38:71:76:25:e1:7c:e9:e4: ae:d9:f3:b5:35:d8:e9:b6:e0:21:77:ac:f3:7c:a2:5e:21:bf: 25:c7:8b:98:b5:aa:28:5a:18:45:b3:8c:01:19:95:1a:29:c2: b3:fb:5e:ad:a4:f2:02:10:27:cf:fb:be:dd:95:c0:72:4d:3e: e8:20:97:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Eb8P/leXeqdiDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MjhmZTMyOGUtMzJhYi00YjAzLWFkMzktYjNhNzY1ZGNiMjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO/c/GiyHxhW5SqvKcmsNPoi6eXglX++IOGI uRw2exyL0F9bHCGHZzha/1mX6DSGU5rB8S6Op+pc5Kl7ojJDPoP/4cmSxg0zWC/P 7di5VK+3r+42+5Fo6nj/GIS11ohs2j9uPPzHOo+3Zmezgms64c7Eb03wwRjEu5UW ljKoBEikvKHrPM+yQsmlKIs/ZKQQot2/DpL9ZIy7NYVPuOcGe/LGPelo90PI90dp soEeMWEXpTiD5QZO66rdF16nL+l5aE/uX/3GKemdn+VBQLPLg93qinB4Wnkh1WOm PTdBN/M87RuHdI613vS2C7rNo89if3c4hGMDzHA2g4EyZA60pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIzzvsP+xuwJEAG3moIn8ngdQ74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNWM0ZGVkNTUtNTNmNi0z NzQ1LTg2MGMtNTIyYzJlNGI3ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKPh6EkJWGygKmhm0MbL1zpUmeM7DyvGtP52FNw0awW1mLr/uIub5Wc h0jxuJYsq7rf0Gvhlycp8UTDaYL5TC/kJyFUyf7d/q2m+edF3rHK11Hl02a8crzT RSZos5Vn29nIRI2KPPg5KLfaNPmCRqRdNZtgA9jEfeWLZzTSQVWpJAow8Mydeb8F lIOCDK3HZCAZur7YdjNzki3hrdqIRDGBlrE842rI6pZ9IVe9eXL72rHh8M8snQ/t ZSr5Uhg4cXYl4Xzp5K7Z87U12Om24CF3rPN8ol4hvyXHi5i1qihaGEWzjAEZlRop wrP7Xq2k8gIQJ8/7vt2VwHJNPugglzs= -----END CERTIFICATE-----Generated at Wed Sep 2 18:06:20 2026 by rpki-client