$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa File: 9767f7aa-c0a5-39f6-9881-91a15c53e053.roa (raw, json) Hash identifier: CnSLZ1mFRvZsL/zPtmSch0yQpbbDZmD15uToMxxUfa0= Subject key identifier: D8:B7:59:36:8A:28:F6:24:1B:EB:27:E6:6D:C4:1D:8B:C0:A9:C0:6D Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584EBB11BE3B75A5E3C8934AE20C Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 5645 IP address blocks: 24.212.128.0/17 maxlen: 17 24.212.240.0/21 maxlen: 21 24.212.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:be:3b:75:a5:e3:c8:93:4a:e2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=07ba137b-5889-4e0b-9fa4-40b39c894bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:03:59:18:e5:ad:37:c4:2c:44:16:0b:01: e9:de:31:19:c2:17:68:a9:8b:41:dd:d5:bb:a3:fa: 14:6f:4b:e1:a8:a7:eb:42:81:a8:f3:72:87:69:50: e3:7b:8c:37:36:49:cc:1b:f8:2e:c2:a0:72:ba:18: 68:f0:32:17:5a:4c:1c:c0:05:5b:57:68:2a:f1:d3: d3:1e:a7:92:99:c6:31:83:43:b8:13:c1:ca:d9:fe: 08:71:e9:80:c6:4f:fb:a3:bb:21:ec:98:c1:48:12: 76:8d:ab:fc:c8:79:54:0c:3f:a8:d1:80:89:de:80: 4e:7d:b6:3e:8c:38:50:b5:82:52:9e:48:b0:14:45: 39:9c:bb:65:44:bc:17:00:38:55:80:5c:ab:f5:e1: d1:24:4f:9d:31:57:52:c7:90:4d:5c:fc:08:1a:b0: 18:73:bb:25:49:0a:c2:66:86:f3:94:24:64:af:c3: 30:43:ee:df:c2:69:58:48:dd:d6:18:2d:e4:9b:3a: 92:c7:bc:2d:7c:37:2c:96:fd:f1:2a:8e:1e:be:8d: 1c:5a:5a:ee:46:bb:99:b1:26:39:3f:e2:9f:dc:72: 6c:7c:41:1c:20:6e:0e:1c:20:17:f9:e7:04:e2:6b: eb:09:b7:47:98:e3:68:32:1f:bb:33:31:22:94:3f: 8c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B7:59:36:8A:28:F6:24:1B:EB:27:E6:6D:C4:1D:8B:C0:A9:C0:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 24.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:96:60:3d:72:71:d9:0e:5d:bc:08:b7:32:91:62:6b:e4:90: 1a:9e:48:15:39:4c:30:82:7d:25:fa:de:9f:5e:5a:18:a9:4c: 83:51:10:1e:b9:5b:72:66:95:49:38:84:f2:d9:50:e3:31:0b: e4:20:d4:96:34:a1:cb:da:19:15:10:49:da:e6:d8:0c:9a:94: ba:ed:bb:4c:3f:97:09:fd:2a:35:1c:b5:fe:12:52:79:d2:21: 48:b2:f6:a5:59:1d:d7:ea:b9:f6:79:96:74:46:16:3a:f1:e4: f4:a9:a6:e8:58:52:12:50:75:f4:42:63:ba:39:99:92:62:75: 10:84:24:25:f6:fa:ce:0b:f4:ee:79:60:61:1f:28:54:13:59: d8:0e:a1:e5:8c:ce:8b:f1:51:9f:0c:6f:57:63:30:79:ca:79: f2:45:e6:fc:a6:4f:13:66:17:9a:0f:92:fa:7e:bd:9d:70:c7: 70:75:77:1a:0e:18:79:59:bc:35:22:09:12:cb:18:31:20:2a: e1:ac:92:7b:dd:d7:f0:d1:97:6f:78:30:7d:84:5f:f4:17:68: 15:56:7c:2a:83:e0:52:21:6f:b5:3d:86:40:ac:4c:26:58:ee: 75:f1:70:d0:83:57:0f:ea:ed:93:0d:47:43:1c:7f:a4:70:02: c8:0e:06:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Eb47daXjyJNK4gwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MDdiYTEzN2ItNTg4OS00ZTBiLTlmYTQtNDBiMzljODk0YmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RsDWRjlrTfELEQWCwHp3jEZwhdoqYtB3dW7 o/oUb0vhqKfrQoGo83KHaVDje4w3NknMG/guwqByuhho8DIXWkwcwAVbV2gq8dPT HqeSmcYxg0O4E8HK2f4IcemAxk/7o7sh7JjBSBJ2jav8yHlUDD+o0YCJ3oBOfbY+ jDhQtYJSnkiwFEU5nLtlRLwXADhVgFyr9eHRJE+dMVdSx5BNXPwIGrAYc7slSQrC ZobzlCRkr8MwQ+7fwmlYSN3WGC3kmzqSx7wtfDcslv3xKo4evo0cWlruRruZsSY5 P+Kf3HJsfEEcIG4OHCAX+ecE4mvrCbdHmONoMh+7MzEilD+McQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi3WTaKKPYkG+sn5m3EHYvAqcBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvOTc2N2Y3YWEtYzBhNS0z OWY2LTk4ODEtOTFhMTVjNTNlMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGNSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCWYD1ycdkOXbwItzKRYmvkkBqeSBU5TDCCfSX63p9eWhipTINREB65 W3JmlUk4hPLZUOMxC+Qg1JY0ocvaGRUQSdrm2AyalLrtu0w/lwn9KjUctf4SUnnS IUiy9qVZHdfqufZ5lnRGFjrx5PSppuhYUhJQdfRCY7o5mZJidRCEJCX2+s4L9O55 YGEfKFQTWdgOoeWMzovxUZ8Mb1djMHnKefJF5vymTxNmF5oPkvp+vZ1wx3B1dxoO GHlZvDUiCRLLGDEgKuGsknvd1/DRl294MH2EX/QXaBVWfCqD4FIhb7U9hkCsTCZY 7nXxcNCDVw/q7ZMNR0Mcf6RwAsgOBhM= -----END CERTIFICATE-----Generated at Wed Sep 2 18:07:46 2026 by rpki-client