$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa File: 5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa (raw, json) Hash identifier: Zy+Kbaqztq9o4U8e+nGzxTOYXk+PbtfKC/C8/yV6z3A= Subject key identifier: E2:A2:4B:C9:C0:00:FF:B3:94:E2:60:86:9E:08:A8:A7:EB:67:D1:B1 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584EAD1C528E613D21F087BF5600 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 5645 IP address blocks: 198.48.128.0/17 maxlen: 17 198.48.128.0/19 maxlen: 19 198.48.160.0/21 maxlen: 21 198.48.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:52:8e:61:3d:21:f0:87:bf:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=5d870628-2aee-46b4-87fa-bf5fd88b9bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:a9:0a:69:65:05:00:4e:e5:00:93:7f:06: 36:aa:c4:5c:1d:b3:94:ca:16:97:4f:3f:1c:10:40: c3:26:90:47:73:9f:13:76:0f:cb:9a:ac:dc:d4:e6: 17:61:a9:01:ab:91:7b:b9:44:4a:b3:2f:f6:6c:57: 11:fb:68:53:32:a5:fe:9a:07:f9:92:75:6b:80:35: 92:15:79:72:10:a2:d5:d2:dd:a1:af:5f:af:20:d7: 06:75:fc:8d:1f:a3:72:c2:81:e1:77:95:0e:de:4e: d7:b3:65:fd:54:ed:5f:f7:de:7e:12:81:6f:78:14: b8:05:e9:29:ff:5b:7a:a5:75:17:03:c9:3b:60:4e: 6a:ae:a6:1f:ab:fe:d4:2c:f7:7f:02:12:19:10:8e: 44:32:c0:88:ae:30:c3:99:71:d5:e9:ec:d1:fb:69: 07:45:c5:ab:c7:37:fc:e4:18:3a:e1:94:ce:2a:f0: a1:96:55:cf:f6:b2:16:8b:a0:93:25:91:52:fa:3b: c9:1a:5c:17:50:9d:db:2a:f8:57:5a:36:d2:ce:2f: 19:2b:20:c8:39:21:cb:db:6d:c3:0a:49:ba:c5:6f: 22:ed:ab:82:52:e5:e4:89:a9:cd:48:c9:6e:11:0e: 11:3f:19:cf:00:fa:da:67:58:c8:b3:4d:d3:5e:04: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A2:4B:C9:C0:00:FF:B3:94:E2:60:86:9E:08:A8:A7:EB:67:D1:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 198.48.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:96:80:87:20:fd:d5:77:c7:44:cf:5a:4a:4b:b2:bf:ac:21: 4a:cf:83:93:4f:8a:30:08:d9:f7:fe:b3:5e:21:02:db:99:40: d7:b3:b6:50:6e:2e:dd:9a:93:b7:81:ae:6d:38:03:c9:e5:b7: 57:d0:96:2b:d7:48:ac:e4:a5:94:df:78:de:b0:c4:3f:9a:0f: 27:21:d5:6a:52:02:88:25:c9:ac:5d:d4:6e:a6:50:a8:e7:e4: 57:9c:d0:3c:32:05:61:85:6d:6d:cc:78:84:e0:53:52:04:86: 29:71:21:4e:82:42:fc:74:1e:8e:63:d7:54:58:59:0e:11:fc: d4:e6:f1:31:28:5d:bc:e0:ed:61:29:42:cc:b8:8a:1b:93:91: aa:63:a1:9c:87:1f:1f:5b:cf:38:01:dc:a9:51:42:61:db:b3: 10:a8:f7:48:b2:fc:8d:53:48:7c:73:66:74:d4:05:8d:b5:19: 83:69:38:22:30:26:b0:61:3f:5f:c4:06:d5:ad:0f:ad:5f:d3: 57:e9:24:c9:3c:6a:73:66:38:0c:bb:ee:c5:d5:8c:56:43:82: d1:8a:68:5c:04:be:7d:a6:41:7c:d5:6c:bc:70:7e:87:7e:fa: e4:e1:3d:b3:fe:7c:23:69:48:41:01:00:35:6b:c3:1d:9f:28: 2c:9b:a4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFKOYT0h8Ie/VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk NWQ4NzA2MjgtMmFlZS00NmI0LTg3ZmEtYmY1ZmQ4OGI5YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqmpCmllBQBO5QCTfwY2qsRcHbOUyhaXTz8c EEDDJpBHc58Tdg/Lmqzc1OYXYakBq5F7uURKsy/2bFcR+2hTMqX+mgf5knVrgDWS FXlyEKLV0t2hr1+vINcGdfyNH6NywoHhd5UO3k7Xs2X9VO1f995+EoFveBS4Bekp /1t6pXUXA8k7YE5qrqYfq/7ULPd/AhIZEI5EMsCIrjDDmXHV6ezR+2kHRcWrxzf8 5Bg64ZTOKvChllXP9rIWi6CTJZFS+jvJGlwXUJ3bKvhXWjbSzi8ZKyDIOSHL223D Ckm6xW8i7auCUuXkianNSMluEQ4RPxnPAPraZ1jIs03TXgQMGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKiS8nAAP+zlOJghp4IqKfrZ9GxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNWYzYjBiMTItN2M2YS0z NzNhLWEyZjYtZGJiZmI5YTVmNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxjCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuWgIcg/dV3x0TPWkpLsr+sIUrPg5NPijAI2ff+s14hAtuZQNeztlBu Lt2ak7eBrm04A8nlt1fQlivXSKzkpZTfeN6wxD+aDych1WpSAoglyaxd1G6mUKjn 5Fec0DwyBWGFbW3MeITgU1IEhilxIU6CQvx0Ho5j11RYWQ4R/NTm8TEoXbzg7WEp Qsy4ihuTkapjoZyHHx9bzzgB3KlRQmHbsxCo90iy/I1TSHxzZnTUBY21GYNpOCIw JrBhP1/EBtWtD61f01fpJMk8anNmOAy77sXVjFZDgtGKaFwEvn2mQXzVbLxwfod+ +uThPbP+fCNpSEEBADVrwx2fKCybpJc= -----END CERTIFICATE-----Generated at Wed Sep 2 18:05:10 2026 by rpki-client