$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/a32b7b32-ae62-3fd3-b480-177e62011b92.roa File: a32b7b32-ae62-3fd3-b480-177e62011b92.roa (raw, json) Hash identifier: fHFGLUlceN+Tjw0QShq4RahtEgwaBberBQZYY2wN01s= Subject key identifier: 51:88:A4:24:2D:86:BE:57:C1:57:F6:FF:51:26:CF:A3:C2:06:9A:69 Certificate issuer: /CN=57284da7-1ff8-4f9e-a90e-7254e01e7f1b Certificate serial: 010D0C9F4328584F4988155B145C8EF7121AFD80 Authority key identifier: D2:F0:D8:9F:F9:A1:DC:91:1B:3D:10:ED:C6:B2:AF:EB:A0:50:48:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/a32b7b32-ae62-3fd3-b480-177e62011b92.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 162.253.200.0/24 maxlen: 24 162.253.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:15:5b:14:5c:8e:f7:12:1a:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57284da7-1ff8-4f9e-a90e-7254e01e7f1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=10a52882-5b92-46ed-a949-fd0eb411468d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:f1:ab:ee:fc:fd:f3:3b:4d:cd:bb:ec:4f: 6d:ce:d6:a6:f8:94:85:ff:a4:9f:6b:c4:e6:51:47: bc:c1:e2:16:c6:ed:a3:69:ce:fb:72:aa:05:d6:3b: 74:12:0e:72:9d:35:48:23:6c:fa:b3:6b:37:31:1c: 98:9b:4e:1d:b3:e1:3b:66:9c:ee:4c:2c:40:54:ac: af:b6:67:04:b9:1b:40:3c:32:00:41:3c:df:f1:13: 32:e1:8a:3f:81:ed:86:55:80:ac:bc:9f:44:e4:08: ff:b5:22:f3:0a:a2:a4:45:b2:a0:9f:84:c2:84:71: e5:04:6d:2b:a4:b2:05:34:d3:37:40:31:84:43:f3: da:0f:c8:39:f2:a8:c0:69:51:39:ce:fc:a3:ac:2e: 33:53:b6:9a:e1:b5:70:ea:c3:1d:e6:a3:7e:9a:7d: 67:01:19:59:d3:69:16:32:8f:44:14:c6:5e:12:85: 02:3f:c6:28:b0:66:a0:f0:9b:a6:90:cd:2f:e2:29: 3e:dc:c1:76:10:55:21:c1:1a:35:fe:c0:16:aa:4e: ca:e6:4c:18:1c:67:a6:96:39:a0:31:07:70:0b:4d: 37:ed:b7:93:58:e9:25:c6:a1:84:69:84:6a:b3:9b: 3a:47:36:ac:0e:3f:97:6b:82:c2:54:4f:2e:63:f6: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:88:A4:24:2D:86:BE:57:C1:57:F6:FF:51:26:CF:A3:C2:06:9A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/a32b7b32-ae62-3fd3-b480-177e62011b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.crl X509v3 Authority Key Identifier: keyid:D2:F0:D8:9F:F9:A1:DC:91:1B:3D:10:ED:C6:B2:AF:EB:A0:50:48:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57284da7-1ff8-4f9e-a90e-7254e01e7f1b.cer sbgp-ipAddrBlock: critical IPv4: 162.253.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:84:26:04:67:75:71:80:21:45:4f:2b:4a:38:17:82:e7:72: 4b:83:1e:97:a3:46:12:52:8a:d8:75:7a:19:98:72:22:e8:4e: 08:c8:0f:64:37:50:1e:69:30:a1:59:56:a1:5d:b3:97:4b:30: f4:42:98:87:fc:42:40:9e:c5:6b:97:26:b8:e7:17:94:52:01: 02:10:ab:c1:0f:43:cc:6a:49:df:60:5c:a0:e1:0e:81:05:d8: de:78:35:fe:19:a0:c2:4b:78:ae:32:8d:8a:3b:be:7a:a5:8f: 48:b9:f3:0c:14:77:f5:c5:9e:cf:e9:f2:d9:2c:33:eb:35:73: b6:80:c2:f0:93:c1:1c:11:8c:e3:31:b3:c2:73:48:3f:bc:01: 31:01:9d:11:82:50:0c:c1:13:5d:26:53:05:1d:49:54:e7:52: a1:a1:1e:ad:9e:0c:df:26:96:37:cf:08:38:a1:3e:01:15:87: 2c:39:fe:d8:ee:43:27:ca:34:92:bb:33:3f:01:ef:f3:08:db: e0:bc:02:8f:82:19:9d:c4:d1:94:f8:89:cd:ea:12:71:96:c5: 48:97:d4:66:6a:d6:ca:e9:66:0a:f6:44:fe:5d:2b:1e:b6:0f: cf:2f:24:cd:99:ac:98:d3:ea:cd:cb:12:08:62:e4:08:03:aa: 1e:e4:0a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiBVbFFyO9xIa/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcyODRkYTctMWZmOC00ZjllLWE5MGUtNzI1NGUwMWU3 ZjFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTBhNTI4ODItNWI5Mi00NmVkLWE5NDktZmQwZWI0MTE0NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXrxq+78/fM7Tc277E9tztam+JSF/6Sfa8Tm UUe8weIWxu2jac77cqoF1jt0Eg5ynTVII2z6s2s3MRyYm04ds+E7ZpzuTCxAVKyv tmcEuRtAPDIAQTzf8RMy4Yo/ge2GVYCsvJ9E5Aj/tSLzCqKkRbKgn4TChHHlBG0r pLIFNNM3QDGEQ/PaD8g58qjAaVE5zvyjrC4zU7aa4bVw6sMd5qN+mn1nARlZ02kW Mo9EFMZeEoUCP8YosGag8JumkM0v4ik+3MF2EFUhwRo1/sAWqk7K5kwYHGemljmg MQdwC0037beTWOklxqGEaYRqs5s6RzasDj+Xa4LCVE8uY/bnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGIpCQthr5XwVf2/1Emz6PCBpppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NzI4 NGRhNy0xZmY4LTRmOWUtYTkwZS03MjU0ZTAxZTdmMWIvYTMyYjdiMzItYWU2Mi0z ZmQzLWI0ODAtMTc3ZTYyMDExYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTcyODRkYTctMWZmOC00ZjllLWE5 MGUtNzI1NGUwMWU3ZjFiLzU3Mjg0ZGE3LTFmZjgtNGY5ZS1hOTBlLTcyNTRlMDFl N2YxYi5jcmwwHwYDVR0jBBgwFoAU0vDYn/mh3JEbPRDtxrKv66BQSLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NzI4NGRhNy0xZmY4LTRmOWUtYTkwZS03MjU0 ZTAxZTdmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBov3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiEJgRndXGAIUVPK0o4F4LnckuDHpejRhJSith1ehmYciLoTgjID2Q3 UB5pMKFZVqFds5dLMPRCmIf8QkCexWuXJrjnF5RSAQIQq8EPQ8xqSd9gXKDhDoEF 2N54Nf4ZoMJLeK4yjYo7vnqlj0i58wwUd/XFns/p8tksM+s1c7aAwvCTwRwRjOMx s8JzSD+8ATEBnRGCUAzBE10mUwUdSVTnUqGhHq2eDN8mljfPCDihPgEVhyw5/tju QyfKNJK7Mz8B7/MI2+C8Ao+CGZ3E0ZT4ic3qEnGWxUiX1GZq1srpZgr2RP5dKx62 D88vJM2ZrJjT6s3LEghi5AgDqh7kCoI= -----END CERTIFICATE-----Generated at Sun Sep 27 19:43:21 2026 by rpki-client