$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa File: 9767f7aa-c0a5-39f6-9881-91a15c53e053.roa (raw, json) Hash identifier: 5bCenE+Sl6SrXaGLMJoabn7vDuJV7tzjt62wmibnyTU= Subject key identifier: 96:45:83:4E:7C:45:83:FA:D8:C7:04:F1:DB:50:39:4D:42:52:9E:A9 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584D386A4F8F4A4A340E80E50F00 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 24.212.128.0/17 maxlen: 17 24.212.240.0/21 maxlen: 21 24.212.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4f:8f:4a:4a:34:0e:80:e5:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=28241dc4-4d05-4798-a266-59e76d1ee8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d8:ab:7e:e5:52:5f:93:e2:aa:36:58:d0:21: 7e:e9:1d:ef:ae:06:59:3c:b2:51:a4:5d:59:ab:b4: 21:f9:1a:b7:8e:f2:a3:d6:fd:d0:fb:4d:52:59:7d: b8:68:58:74:47:c4:6f:2b:f8:78:0a:41:e6:e4:ad: 9e:de:3a:e5:5a:fe:50:44:93:cf:bd:26:05:1e:58: e9:54:b7:8c:8f:5c:24:2a:3d:28:00:a3:bb:64:f8: 27:ac:62:cb:c9:8c:03:03:4e:f2:4f:10:30:56:de: e6:c4:9b:07:c7:79:01:65:4c:0e:de:40:6e:3f:e1: 2b:70:f3:cd:35:32:fa:39:e4:bb:82:4a:ea:b1:59: b6:4a:9b:78:6c:d1:ce:34:ea:dd:37:00:3c:11:bc: 27:71:6f:fb:3e:4c:aa:a5:e6:45:94:8b:e7:3b:0f: 6b:32:30:b3:69:ad:e2:46:bb:ed:11:fc:87:9e:82: 7d:6c:86:0c:bd:bf:4f:57:c6:b2:ec:0d:0f:76:c7: e7:35:5b:c2:e3:bc:5d:be:f9:71:eb:07:88:2a:1a: fa:4e:95:67:a6:2a:b2:0c:71:b6:c2:d1:78:69:e5: 00:8a:23:63:a0:98:97:dc:0a:75:d0:9d:e5:2e:aa: 10:5e:e5:91:cc:7b:88:ef:3a:7b:7c:60:01:32:6f: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:45:83:4E:7C:45:83:FA:D8:C7:04:F1:DB:50:39:4D:42:52:9E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 24.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:98:80:b5:b6:a0:2e:99:39:6b:f8:10:95:1f:25:58:c5:c5: ff:99:86:19:74:37:c3:aa:c1:19:b5:a8:41:48:36:a0:aa:36: ae:1f:35:b8:77:ae:44:31:18:22:23:c4:63:17:30:71:ff:cb: a8:d3:de:bf:71:4a:c6:41:15:0f:c8:dc:ab:43:5d:8a:5c:ea: 07:46:e0:61:76:c5:69:23:34:11:f0:2a:7b:8f:79:99:28:d7: 6a:6d:6d:f0:db:5f:62:1c:0c:32:fc:f3:c7:c9:38:55:40:97: 3b:22:4e:6e:14:f7:f8:39:f9:1a:4d:56:1e:0d:ca:c6:0b:a3: 45:2a:10:4e:77:59:cd:de:af:e7:e4:23:35:be:92:ef:2f:16: d0:3d:cd:dd:03:21:01:51:1d:eb:37:53:ec:d5:8a:db:62:f0: d7:2a:96:10:06:27:0e:a1:ae:67:77:a3:08:0d:13:ad:3a:e3: 19:a0:83:a9:6f:d5:6e:d3:53:47:84:18:46:2a:56:19:7d:d1: 92:cd:72:03:6a:46:6b:f2:69:d4:42:9d:7e:83:34:48:35:c7: e5:5d:aa:34:5e:e5:28:79:11:55:92:95:f5:a8:be:d2:13:96: a7:28:1e:11:4d:20:8c:32:96:b8:c6:41:17:5b:7f:0c:35:88: d7:ee:37:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ak+PSko0DoDlDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MjgyNDFkYzQtNGQwNS00Nzk4LWEyNjYtNTllNzZkMWVlOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktirfuVSX5PiqjZY0CF+6R3vrgZZPLJRpF1Z q7Qh+Rq3jvKj1v3Q+01SWX24aFh0R8RvK/h4CkHm5K2e3jrlWv5QRJPPvSYFHljp VLeMj1wkKj0oAKO7ZPgnrGLLyYwDA07yTxAwVt7mxJsHx3kBZUwO3kBuP+ErcPPN NTL6OeS7gkrqsVm2Spt4bNHONOrdNwA8EbwncW/7PkyqpeZFlIvnOw9rMjCzaa3i RrvtEfyHnoJ9bIYMvb9PV8ay7A0PdsfnNVvC47xdvvlx6weIKhr6TpVnpiqyDHG2 wtF4aeUAiiNjoJiX3Ap10J3lLqoQXuWRzHuI7zp7fGABMm8oSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZFg058RYP62McE8dtQOU1CUp6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvOTc2N2Y3YWEtYzBhNS0z OWY2LTk4ODEtOTFhMTVjNTNlMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGNSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqYgLW2oC6ZOWv4EJUfJVjFxf+Zhhl0N8OqwRm1qEFINqCqNq4fNbh3 rkQxGCIjxGMXMHH/y6jT3r9xSsZBFQ/I3KtDXYpc6gdG4GF2xWkjNBHwKnuPeZko 12ptbfDbX2IcDDL888fJOFVAlzsiTm4U9/g5+RpNVh4NysYLo0UqEE53Wc3er+fk IzW+ku8vFtA9zd0DIQFRHes3U+zVitti8NcqlhAGJw6hrmd3owgNE6064xmgg6lv 1W7TU0eEGEYqVhl90ZLNcgNqRmvyadRCnX6DNEg1x+VdqjRe5Sh5EVWSlfWovtIT lqcoHhFNIIwylrjGQRdbfww1iNfuNyA= -----END CERTIFICATE-----Generated at Wed Mar 25 18:20:36 2026 by rpki-client