$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa File: 5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa (raw, json) Hash identifier: qz5TKZ7mhc65Jmy2SMSAcAos/DxOLw5dKTSFtCFuD4w= Subject key identifier: A4:90:85:1D:56:DD:A9:29:13:48:10:39:0B:BF:9A:3F:3C:0D:2C:82 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584D2A74C38992C81DC18AACA740 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 5645 IP address blocks: 198.48.128.0/17 maxlen: 17 198.48.128.0/19 maxlen: 19 198.48.160.0/21 maxlen: 21 198.48.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c3:89:92:c8:1d:c1:8a:ac:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=ae037182-e7c3-476f-917c-63c52326de8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:6e:cd:f1:be:f0:8f:8b:4c:06:9e:33:60: a4:ec:c1:51:4e:68:3f:e8:6b:7d:cf:4e:e0:ef:d4: 2d:1e:94:ea:b3:fe:00:77:b4:d4:1c:e3:3e:fb:03: fa:2f:a2:5f:cc:a1:52:54:26:32:6d:b8:64:4b:a4: 6f:33:38:c1:6f:c9:c2:a2:18:6e:77:12:03:4c:a8: 8a:1b:92:99:6a:e6:44:d8:4f:26:57:0a:f8:77:5c: 3e:9b:7c:74:81:e9:94:c6:16:87:39:59:41:7a:63: 94:25:47:b9:d2:77:c6:2f:c7:dc:c4:52:82:6b:9b: 1d:27:c9:38:00:5f:13:76:55:cb:92:df:7a:6a:69: c9:ed:a0:78:98:a8:f8:e3:db:7e:1a:85:88:96:f9: e2:a3:57:5d:95:2c:9b:76:19:ce:92:c4:c5:0b:1b: b3:05:3b:6c:02:5a:9f:1b:29:68:6b:16:f2:5c:de: ed:2c:da:57:d2:cf:fe:3e:35:85:db:20:f1:0f:17: 9c:ed:92:43:f2:ea:d0:73:34:2e:60:c3:fe:7a:a5: b2:94:08:37:67:d1:12:5a:71:e9:c5:db:e0:95:b3: 0e:0d:71:29:d6:6c:4c:f9:25:a4:71:ab:8a:43:b8: ab:6d:42:41:bc:49:99:6d:c5:d0:e4:a2:f3:ac:7f: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:90:85:1D:56:DD:A9:29:13:48:10:39:0B:BF:9A:3F:3C:0D:2C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 198.48.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:47:2e:64:fa:9c:03:79:a1:c6:e1:7b:7c:c1:d2:5b:d1:53: 1d:0d:0f:07:05:7d:f1:a8:e6:6a:95:f8:1e:1d:c8:7a:54:dd: 8d:42:2c:50:2a:bb:99:d5:7e:7d:cf:90:c9:d3:31:ad:4e:28: ac:fe:7e:cc:60:61:eb:52:fc:1c:06:0d:58:cf:d6:1e:b3:a4: 59:bc:a8:f8:84:b8:5f:a3:70:bf:49:a7:12:b4:e7:a7:b1:ae: e3:75:4c:a2:c9:79:be:56:5b:0b:48:3c:cd:ec:8c:09:f9:c2: 97:74:ba:3e:c3:1e:5d:b3:98:4f:30:11:66:9e:16:11:7c:e5: 92:46:05:ba:6e:96:a0:37:0b:35:1b:ba:9c:b6:a4:1f:ac:3b: 60:12:40:0f:bf:62:3e:08:0a:6e:19:24:11:ef:2c:4a:60:13: 36:78:ee:c8:c5:17:c8:db:4e:f9:02:1d:8e:17:60:b2:31:38: 7f:0e:16:eb:37:72:f1:48:e6:5d:f1:1f:93:fa:31:ce:b5:2b: f2:65:47:79:1c:8e:df:05:6e:6c:f4:dd:b6:71:8f:68:d6:11: f2:a2:97:d1:7c:91:e2:bd:9f:92:c8:60:bc:7e:ce:e2:b1:fe: f4:41:29:33:bc:8b:78:83:56:6f:83:9e:d8:ce:69:0c:a4:02: 56:2f:56:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMOJksgdwYqsp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YWUwMzcxODItZTdjMy00NzZmLTkxN2MtNjNjNTIzMjZkZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbluzfG+8I+LTAaeM2Ck7MFRTmg/6Gt9z07g 79QtHpTqs/4Ad7TUHOM++wP6L6JfzKFSVCYybbhkS6RvMzjBb8nCohhudxIDTKiK G5KZauZE2E8mVwr4d1w+m3x0gemUxhaHOVlBemOUJUe50nfGL8fcxFKCa5sdJ8k4 AF8TdlXLkt96amnJ7aB4mKj449t+GoWIlvnio1ddlSybdhnOksTFCxuzBTtsAlqf GyloaxbyXN7tLNpX0s/+PjWF2yDxDxec7ZJD8urQczQuYMP+eqWylAg3Z9ESWnHp xdvglbMODXEp1mxM+SWkcauKQ7irbUJBvEmZbcXQ5KLzrH+GTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSQhR1W3akpE0gQOQu/mj88DSyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNWYzYjBiMTItN2M2YS0z NzNhLWEyZjYtZGJiZmI5YTVmNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxjCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9HLmT6nAN5ocbhe3zB0lvRUx0NDwcFffGo5mqV+B4dyHpU3Y1CLFAq u5nVfn3PkMnTMa1OKKz+fsxgYetS/BwGDVjP1h6zpFm8qPiEuF+jcL9JpxK056ex ruN1TKLJeb5WWwtIPM3sjAn5wpd0uj7DHl2zmE8wEWaeFhF85ZJGBbpulqA3CzUb upy2pB+sO2ASQA+/Yj4ICm4ZJBHvLEpgEzZ47sjFF8jbTvkCHY4XYLIxOH8OFus3 cvFI5l3xH5P6Mc61K/JlR3kcjt8Fbmz03bZxj2jWEfKil9F8keK9n5LIYLx+zuKx /vRBKTO8i3iDVm+DntjOaQykAlYvVlc= -----END CERTIFICATE-----Generated at Wed Mar 25 18:18:35 2026 by rpki-client