$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa File: eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa (raw, json) Hash identifier: 5LklI6GaAJL4U5NN2WEDFBzfd/NF6igkV9JczFRbyfg= Subject key identifier: C3:9C:8B:67:01:F7:29:DF:AD:F0:1F:B4:CB:E7:D8:0D:A7:AB:D1:D6 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584D386A50374D3B79BC18D9BDB0 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 104.195.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:50:37:4d:3b:79:bc:18:d9:bd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=cb2c76ba-c87d-496c-9eab-3f6f09e230b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:94:fd:23:d6:f7:ec:18:f9:47:27:18:4e: 83:af:ff:0b:50:96:61:0c:c2:fc:ce:61:9b:5e:18: 07:f7:72:c2:cc:68:a0:ac:6b:e1:47:fb:e4:11:5e: f4:3b:ee:4c:76:da:50:4c:5f:24:dc:01:45:4d:70: 07:e3:a8:09:8a:17:77:26:87:36:cc:9f:38:c6:f5: 0f:1c:86:23:c3:7a:12:1f:03:40:aa:7b:25:bf:18: c5:87:42:a3:ff:1f:c2:c3:68:3b:77:38:25:37:73: a1:19:0a:bd:7e:0a:19:10:dc:d1:9a:dd:e4:b9:0c: 29:83:94:46:86:ea:19:d7:6d:d3:ce:3c:8c:d7:6f: 8b:40:30:50:cc:e3:7d:55:c3:40:58:18:fb:26:ba: 86:30:c1:87:61:e6:d8:70:64:91:fa:56:2f:31:77: 69:81:05:e2:47:78:36:db:40:18:99:dc:b0:54:4b: 4c:c1:fe:4c:ec:3c:fa:d4:79:08:df:88:a6:3f:d9: a5:27:42:04:55:19:a0:24:e4:c0:20:6d:d1:a5:c4: ae:a9:4c:13:4d:5f:ed:98:23:25:c8:4a:d4:61:22: 9d:f6:01:8c:32:ad:e5:d9:a0:db:8a:f5:e0:6f:5f: 4b:c2:9b:31:5c:55:1c:ad:d2:f7:1d:39:90:02:9f: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9C:8B:67:01:F7:29:DF:AD:F0:1F:B4:CB:E7:D8:0D:A7:AB:D1:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eece7432-f1a6-37fb-af5b-8f3c4fe0549d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 104.195.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:36:06:ec:ed:f5:d4:a0:c9:e6:21:88:55:82:19:ff:fe:64: 9d:76:54:ad:e4:76:9c:ee:69:b6:26:73:13:57:85:a3:46:22: 6a:1b:7f:bc:e0:31:7b:3c:7a:17:a1:93:c3:cd:f5:3a:ab:38: cd:2f:d0:53:53:99:4d:36:d7:7f:70:f6:b8:97:fa:10:de:c4: 2b:74:e8:f9:27:9c:75:59:de:3d:0c:9d:07:89:98:61:ab:61: e6:0c:f4:cf:70:54:bf:90:d6:3f:94:59:aa:20:c1:61:47:f6: 7c:91:88:f4:c3:7c:0e:04:47:2b:68:7f:f6:55:8d:47:e8:ac: b9:8c:cc:a0:4c:b2:01:45:8e:cd:94:c5:56:1f:b2:ce:92:ca: e0:99:77:c9:9c:fc:2a:69:73:00:07:63:15:bd:60:5f:c1:b6: 2b:d3:95:a8:c5:3f:a0:50:3d:82:6f:2d:8a:f4:af:02:0c:59: e0:55:4b:7e:84:a4:8a:43:6d:67:04:3b:61:a9:0e:5d:3a:ff: 7c:29:81:79:2c:59:55:d2:d0:2e:6d:9e:2f:d0:39:2a:fb:29: 91:7d:d7:8d:50:a6:99:a0:44:b3:ec:a8:7c:ec:03:e4:f5:24: 55:74:da:82:ca:a1:7e:36:ce:82:90:fd:be:35:44:4c:aa:70: bc:95:e8:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alA3TTt5vBjZvbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk Y2IyYzc2YmEtYzg3ZC00OTZjLTllYWItM2Y2ZjA5ZTIzMGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCGU/SPW9+wY+UcnGE6Dr/8LUJZhDML8zmGb XhgH93LCzGigrGvhR/vkEV70O+5MdtpQTF8k3AFFTXAH46gJihd3Joc2zJ84xvUP HIYjw3oSHwNAqnslvxjFh0Kj/x/Cw2g7dzglN3OhGQq9fgoZENzRmt3kuQwpg5RG huoZ123TzjyM12+LQDBQzON9VcNAWBj7JrqGMMGHYebYcGSR+lYvMXdpgQXiR3g2 20AYmdywVEtMwf5M7Dz61HkI34imP9mlJ0IEVRmgJOTAIG3RpcSuqUwTTV/tmCMl yErUYSKd9gGMMq3l2aDbivXgb19LwpsxXFUcrdL3HTmQAp9orwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOci2cB9ynfrfAftMvn2A2nq9HWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZWVjZTc0MzItZjFhNi0z N2ZiLWFmNWItOGYzYzRmZTA1NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHaMOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA2Buzt9dSgyeYhiFWCGf/+ZJ12VK3kdpzuabYmcxNXhaNGImobf7zg MXs8ehehk8PN9TqrOM0v0FNTmU02139w9riX+hDexCt06PknnHVZ3j0MnQeJmGGr YeYM9M9wVL+Q1j+UWaogwWFH9nyRiPTDfA4ERytof/ZVjUforLmMzKBMsgFFjs2U xVYfss6SyuCZd8mc/CppcwAHYxW9YF/BtivTlajFP6BQPYJvLYr0rwIMWeBVS36E pIpDbWcEO2GpDl06/3wpgXksWVXS0C5tni/QOSr7KZF9141QppmgRLPsqHzsA+T1 JFV02oLKoX42zoKQ/b41REyqcLyV6Gk= -----END CERTIFICATE-----Generated at Wed Mar 25 18:20:37 2026 by rpki-client