$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/8f1396ab-d4fe-3b34-b824-479e04718ca5.roa File: 8f1396ab-d4fe-3b34-b824-479e04718ca5.roa (raw, json) Hash identifier: FiWOey0TiklEptoPmUGbvmZwahIxhWjvJ33eLH0KEaY= Subject key identifier: 2A:64:C5:B3:32:72:87:23:05:75:FC:85:10:E5:8E:22:DF:A3:B2:73 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584D386A4FB6D58BC2363EB1EB40 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/8f1396ab-d4fe-3b34-b824-479e04718ca5.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 45.72.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4f:b6:d5:8b:c2:36:3e:b1:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=2f462a7a-a4b1-4f4c-8268-980a2820aac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:52:2b:cb:d8:0f:cf:22:ae:d6:b7:6e:f1: 97:bd:f0:7c:2d:37:52:81:ff:b3:cb:f7:48:c4:7c: f5:08:94:9c:b4:68:dc:66:77:40:4b:47:8c:7f:89: 32:44:93:f4:a1:3f:3e:e7:f7:0e:0f:a6:eb:27:d8: 90:8f:94:6d:41:e5:39:9d:ed:37:83:33:3c:4a:ba: 87:7b:ab:13:5a:65:c5:26:80:a5:eb:7c:26:ac:bb: d8:0f:76:cb:83:1d:01:09:55:06:07:12:92:83:8f: a1:20:4a:44:32:b6:55:0e:67:66:a2:c4:25:c5:7f: 7e:2a:a9:81:0e:cb:c4:a8:95:21:ad:d1:a7:11:20: ed:09:f0:90:62:07:54:1e:b9:69:d4:e8:17:4e:4c: e0:49:ed:27:f3:d6:42:5e:85:89:28:ac:1c:48:99: 10:66:91:e3:02:61:41:ab:5d:1f:ec:57:fd:33:7b: dd:06:78:c7:a7:5b:99:22:15:9a:9d:8e:53:3f:35: 1b:26:6f:99:72:2a:f9:81:94:f3:c4:46:66:f2:8a: eb:f3:c3:7c:10:88:8a:d9:1d:66:38:54:2a:e1:99: 4b:1b:bb:5b:48:ac:11:5d:f8:c3:17:68:26:81:5c: aa:50:84:83:57:a9:ec:33:a5:c3:83:fe:e6:6f:3a: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:64:C5:B3:32:72:87:23:05:75:FC:85:10:E5:8E:22:DF:A3:B2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/8f1396ab-d4fe-3b34-b824-479e04718ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 45.72.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e5:0f:9c:0a:ca:e5:83:74:9a:13:35:36:ee:9b:ae:2a:6d: 94:a1:12:95:4f:8a:4e:c9:cf:01:3c:0e:da:2f:46:5c:df:03: 1f:18:c8:b0:53:5a:d6:f2:e1:ae:9b:c4:b4:50:23:98:87:af: c8:a0:fb:35:a7:51:5b:ae:89:f6:7c:0f:90:74:7d:a9:77:1a: 7f:90:f3:ab:3b:5b:3d:4a:3a:74:a9:93:ea:83:e5:34:bb:f5: 1f:60:2c:2f:3e:44:46:ec:f8:c0:af:7d:18:7f:22:3e:4d:3c: ba:f5:35:27:2d:d1:c9:7e:6f:37:b4:25:3a:52:40:0e:27:e1: 1c:27:90:b6:cd:ca:9a:43:8b:15:b1:86:92:e4:7f:c7:bf:45: d5:9c:bb:17:5f:dc:c4:c8:3f:2e:e6:d7:48:89:93:3e:a5:6a: ed:2e:43:07:0e:6b:91:d9:a0:94:96:4f:ed:c0:60:79:6c:1d: 37:8b:7b:fc:f7:bf:b5:fd:7f:42:7f:70:e2:f4:fb:84:e3:6e: d5:76:6a:f8:d2:b2:25:1c:21:02:7c:a2:5e:fe:ab:af:a7:f1: a9:aa:c2:f1:17:e3:66:3b:35:53:31:b7:65:a0:5b:fd:e8:2f: de:9d:7a:9d:a5:c0:03:63:91:91:a2:08:94:0c:5e:08:36:2d: a2:15:71:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ak+21YvCNj6x60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MmY0NjJhN2EtYTRiMS00ZjRjLTgyNjgtOTgwYTI4MjBhYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmlSK8vYD88irta3bvGXvfB8LTdSgf+zy/dI xHz1CJSctGjcZndAS0eMf4kyRJP0oT8+5/cOD6brJ9iQj5RtQeU5ne03gzM8SrqH e6sTWmXFJoCl63wmrLvYD3bLgx0BCVUGBxKSg4+hIEpEMrZVDmdmosQlxX9+KqmB DsvEqJUhrdGnESDtCfCQYgdUHrlp1OgXTkzgSe0n89ZCXoWJKKwcSJkQZpHjAmFB q10f7Ff9M3vdBnjHp1uZIhWanY5TPzUbJm+Zcir5gZTzxEZm8orr88N8EIiK2R1m OFQq4ZlLG7tbSKwRXfjDF2gmgVyqUISDV6nsM6XDg/7mbzqdDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpkxbMycocjBXX8hRDljiLfo7JzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvOGYxMzk2YWItZDRmZS0z YjM0LWI4MjQtNDc5ZTA0NzE4Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHLUiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTlD5wKyuWDdJoTNTbum64qbZShEpVPik7JzwE8DtovRlzfAx8YyLBT Wtby4a6bxLRQI5iHr8ig+zWnUVuuifZ8D5B0fal3Gn+Q86s7Wz1KOnSpk+qD5TS7 9R9gLC8+REbs+MCvfRh/Ij5NPLr1NSct0cl+bze0JTpSQA4n4RwnkLbNyppDixWx hpLkf8e/RdWcuxdf3MTIPy7m10iJkz6lau0uQwcOa5HZoJSWT+3AYHlsHTeLe/z3 v7X9f0J/cOL0+4TjbtV2avjSsiUcIQJ8ol7+q6+n8amqwvEX42Y7NVMxt2WgW/3o L96dep2lwANjkZGiCJQMXgg2LaIVcTw= -----END CERTIFICATE-----Generated at Wed Mar 25 18:20:19 2026 by rpki-client