$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/8f1396ab-d4fe-3b34-b824-479e04718ca5.roa File: 8f1396ab-d4fe-3b34-b824-479e04718ca5.roa (raw, json) Hash identifier: NrX8g3ozamfewuH5aMeFctHzOOZIrV4GDtpFEoQsL+E= Subject key identifier: 9C:82:C6:86:A9:E3:4B:F5:33:97:5B:13:21:3E:85:CF:BB:48:22:BA Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584EBB11BE5EB94FC4C9BFC993C0 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/8f1396ab-d4fe-3b34-b824-479e04718ca5.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 5645 IP address blocks: 45.72.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:be:5e:b9:4f:c4:c9:bf:c9:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=547a486e-6029-4abe-a57c-b41897ab41b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:68:f6:a3:df:16:28:a3:df:a8:36:a9:a9:20: bb:04:f2:c5:57:b0:cd:2a:20:d6:89:ed:5f:36:de: d3:8c:cc:1c:c4:17:35:bd:67:cf:8e:c0:6f:db:d0: 84:c4:e2:26:aa:c0:05:07:7c:56:35:9b:b9:8a:60: b0:6a:d5:61:32:77:a0:29:20:a4:67:d2:56:f3:1a: 0a:42:4a:eb:c5:29:d0:1a:ba:a7:66:4f:36:dd:4c: 1e:e1:ef:6f:25:1c:52:93:64:db:3d:85:09:4b:bd: 8f:ee:4a:04:23:63:5f:35:6c:5b:b0:d9:18:fb:27: 85:3f:6f:53:d1:68:d9:61:af:4a:ba:b0:a9:10:a3: 7f:3f:bf:0b:cf:60:60:3f:d6:cd:3a:18:5f:b0:1a: f0:25:7f:a2:bf:28:cc:93:d9:61:94:85:9b:18:05: f5:84:80:dd:7e:4c:f1:01:f5:c8:fb:d8:d4:27:49: e8:0c:ee:ea:8f:74:39:25:f4:f3:76:84:a7:79:7b: d2:99:67:2b:2d:9c:b3:aa:36:35:c1:1f:99:97:35: a7:71:43:68:5b:84:7f:4c:e2:ca:8a:9a:42:38:10: ca:78:e3:b2:12:0e:e2:94:07:29:8e:fd:eb:c4:c0: 59:ba:4d:62:c1:a5:8d:5c:49:33:7c:b2:d8:aa:0b: 21:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:82:C6:86:A9:E3:4B:F5:33:97:5B:13:21:3E:85:CF:BB:48:22:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/8f1396ab-d4fe-3b34-b824-479e04718ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 45.72.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:65:23:54:7f:f0:a7:56:85:b2:70:2b:11:81:f4:f3:d7:15: a3:0a:71:4c:2f:d6:d9:de:39:01:b1:69:0c:15:62:78:a7:a6: 07:29:2d:7f:fd:a1:03:59:11:0f:0d:ee:1e:67:52:b2:ff:d8: f3:31:d6:4a:38:41:f3:0b:99:eb:8d:96:fa:7e:56:85:22:25: 8c:b3:bd:a0:9c:3f:57:dc:f7:15:51:32:cb:c7:03:04:fc:b4: 2a:76:16:da:69:01:8c:29:44:98:a8:85:1e:c4:5b:59:c5:d7: ba:10:82:33:cd:81:03:21:d1:2a:a3:93:47:14:50:d6:ed:65: 12:f7:27:77:b6:3c:d6:37:15:8e:9d:fb:dc:1a:0e:5d:d9:58: 8f:10:16:f4:91:54:70:f2:90:b8:5f:40:22:fa:80:f3:59:3d: d1:21:df:b3:1c:f5:59:50:48:4e:6b:fa:c7:06:e3:e1:95:c1: 28:1c:62:1a:3d:ea:49:6e:75:2e:c7:ca:89:df:0a:f5:32:95: 3c:ce:e2:7b:87:4b:70:bf:77:7a:00:83:53:fa:be:d7:da:66: 8c:4a:36:61:a1:ac:63:16:2f:9b:42:4b:0e:f8:cd:2f:79:23: 93:30:80:14:7e:b5:9c:7f:d5:56:19:47:d4:72:61:da:02:51: cd:7e:c1:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Eb5euU/Eyb/Jk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk NTQ3YTQ4NmUtNjAyOS00YWJlLWE1N2MtYjQxODk3YWI0MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52j2o98WKKPfqDapqSC7BPLFV7DNKiDWie1f Nt7TjMwcxBc1vWfPjsBv29CExOImqsAFB3xWNZu5imCwatVhMnegKSCkZ9JW8xoK QkrrxSnQGrqnZk823Uwe4e9vJRxSk2TbPYUJS72P7koEI2NfNWxbsNkY+yeFP29T 0WjZYa9KurCpEKN/P78Lz2BgP9bNOhhfsBrwJX+ivyjMk9lhlIWbGAX1hIDdfkzx AfXI+9jUJ0noDO7qj3Q5JfTzdoSneXvSmWcrLZyzqjY1wR+ZlzWncUNoW4R/TOLK ippCOBDKeOOyEg7ilAcpjv3rxMBZuk1iwaWNXEkzfLLYqgshZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyCxoap40v1M5dbEyE+hc+7SCK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvOGYxMzk2YWItZDRmZS0z YjM0LWI4MjQtNDc5ZTA0NzE4Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHLUiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEllI1R/8KdWhbJwKxGB9PPXFaMKcUwv1tneOQGxaQwVYninpgcpLX/9 oQNZEQ8N7h5nUrL/2PMx1ko4QfMLmeuNlvp+VoUiJYyzvaCcP1fc9xVRMsvHAwT8 tCp2FtppAYwpRJiohR7EW1nF17oQgjPNgQMh0Sqjk0cUUNbtZRL3J3e2PNY3FY6d +9waDl3ZWI8QFvSRVHDykLhfQCL6gPNZPdEh37Mc9VlQSE5r+scG4+GVwSgcYho9 6kludS7HyonfCvUylTzO4nuHS3C/d3oAg1P6vtfaZoxKNmGhrGMWL5tCSw74zS95 I5MwgBR+tZx/1VYZR9RyYdoCUc1+wb0= -----END CERTIFICATE-----Generated at Wed Sep 2 18:07:07 2026 by rpki-client