$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa File: 5889b020-d1dc-309e-a3d6-83b0d8a04571.roa (raw, json) Hash identifier: CxeXBxx4XVqL8dMoe47MN3brRWOjCSteTjfF7FxtBOI= Subject key identifier: EA:EC:27:18:99:DB:48:32:0C:C2:F9:B0:AC:2F:45:67:8F:7D:FF:24 Certificate issuer: /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291 Certificate serial: 010D0C9F4328584F655D7C39939715EE39604880 Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 400136 IP address blocks: 24.149.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7c:39:93:97:15:ee:39:60:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=2f680d72-3ea0-480e-804c-ac7937f619f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:1a:bc:7b:34:da:66:3f:11:e2:6a:bf:e4: a3:12:26:bf:28:0d:78:23:53:56:a5:b2:39:64:34: bc:30:07:af:a6:55:bf:1c:cc:d0:94:89:0b:8a:b9: 2f:3a:5a:bb:04:d4:ee:f3:12:fc:c8:12:25:02:9e: aa:20:90:7c:0e:d6:56:de:e2:38:68:d8:08:7f:7e: bc:32:47:7f:01:4b:bd:f6:b3:c1:a7:3b:47:12:57: 44:9a:67:a0:86:2a:9a:6b:d1:9b:eb:b4:cc:c7:5a: e1:19:b4:ee:c5:9a:ab:5f:b6:72:86:19:45:a9:42: 2b:eb:1d:a5:d4:f1:82:bd:c5:5d:90:42:fb:82:a0: 2a:c1:15:f0:91:bf:1d:46:a0:9e:0e:60:c5:ee:ab: 49:36:09:e1:87:55:ce:69:44:27:f8:b6:c9:5f:f2: 77:11:ec:8f:51:c0:c7:fc:3d:72:c5:1e:c6:bc:3f: ad:0e:3d:f6:43:b1:d6:3f:9e:53:eb:50:c6:de:20: b7:4e:fc:6e:e9:12:d4:f6:38:c4:75:ed:c9:d5:f8: 1a:e9:26:33:15:9f:15:6b:24:d9:f5:5c:89:57:b1: fb:5f:6b:d4:33:bc:49:74:89:0b:d8:8e:f4:ac:05: 01:5f:76:cc:81:69:69:3b:7a:65:35:17:0e:17:5b: dd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EC:27:18:99:DB:48:32:0C:C2:F9:B0:AC:2F:45:67:8F:7D:FF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/5889b020-d1dc-309e-a3d6-83b0d8a04571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl X509v3 Authority Key Identifier: keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer sbgp-ipAddrBlock: critical IPv4: 24.149.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:96:c1:bb:56:88:f7:e9:1c:f2:17:b4:30:a1:d6:c3:24:5e: e7:92:57:e5:8d:2b:c5:9c:5a:5b:7f:b5:81:7e:fe:42:76:b6: a2:2e:9f:fc:7a:6f:90:36:46:d6:2b:1c:9d:04:ef:ab:7d:f2: 2a:fc:0c:b7:89:5d:16:bb:11:40:fc:99:46:62:ac:cf:2b:64: 04:11:7f:50:55:ea:04:b2:f0:02:4e:22:b8:70:09:a8:69:ed: 6e:47:95:3b:ee:42:ea:bf:5f:ad:24:20:82:d1:67:63:ef:79: e3:14:73:25:4f:83:54:40:1f:e9:d6:ae:65:76:af:f3:1a:84: 90:b2:67:1b:d3:5c:27:9b:56:8e:de:89:56:4c:ae:6c:ce:6e: b9:4a:8c:ce:41:d7:25:8e:f0:9a:9f:41:86:fb:8b:ef:5a:f7: 33:8e:1c:5a:3c:a6:93:6f:f3:ee:1c:3b:ff:74:ed:e8:67:34: 6c:69:6c:78:0a:c8:d5:89:21:98:65:af:a3:0c:89:49:f5:3b: 5a:7d:e0:b5:da:3f:92:56:1d:16:5d:19:e5:fd:03:f7:f5:5b: 96:b5:e4:56:b8:2e:40:8b:bb:09:02:59:1a:7e:60:f3:0f:eb: a0:00:d6:57:10:a0:04:d6:09:d9:2f:a5:fe:74:46:4e:e0:66: 0e:16:0b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXw5k5cV7jlgSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyZjFkMjMtMmM0Yy00ZWY1LWJhYjEtNTU5ZGNiNDkx MjkxMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MmY2ODBkNzItM2VhMC00ODBlLTgwNGMtYWM3OTM3ZjYxOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGAavHs02mY/EeJqv+SjEia/KA14I1NWpbI5 ZDS8MAevplW/HMzQlIkLirkvOlq7BNTu8xL8yBIlAp6qIJB8DtZW3uI4aNgIf368 Mkd/AUu99rPBpztHEldEmmeghiqaa9Gb67TMx1rhGbTuxZqrX7ZyhhlFqUIr6x2l 1PGCvcVdkEL7gqAqwRXwkb8dRqCeDmDF7qtJNgnhh1XOaUQn+LbJX/J3EeyPUcDH /D1yxR7GvD+tDj32Q7HWP55T61DG3iC3Tvxu6RLU9jjEde3J1fga6SYzFZ8VayTZ 9VyJV7H7X2vUM7xJdIkL2I70rAUBX3bMgWlpO3plNRcOF1vdrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrsJxiZ20gyDML5sKwvRWePff8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJm MWQyMy0yYzRjLTRlZjUtYmFiMS01NTlkY2I0OTEyOTEvNTg4OWIwMjAtZDFkYy0z MDllLWEzZDYtODNiMGQ4YTA0NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjMyZjFkMjMtMmM0Yy00ZWY1LWJh YjEtNTU5ZGNiNDkxMjkxL2YzMmYxZDIzLTJjNGMtNGVmNS1iYWIxLTU1OWRjYjQ5 MTI5MS5jcmwwHwYDVR0jBBgwFoAUwO8qm2fyW3+QCH6t3QSVwKfX1PcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJmMWQyMy0yYzRjLTRlZjUtYmFiMS01NTlk Y2I0OTEyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiWwbtWiPfpHPIXtDCh1sMkXueSV+WNK8WcWlt/tYF+/kJ2tqIun/x6 b5A2RtYrHJ0E76t98ir8DLeJXRa7EUD8mUZirM8rZAQRf1BV6gSy8AJOIrhwCahp 7W5HlTvuQuq/X60kIILRZ2PveeMUcyVPg1RAH+nWrmV2r/MahJCyZxvTXCebVo7e iVZMrmzObrlKjM5B1yWO8JqfQYb7i+9a9zOOHFo8ppNv8+4cO/907ehnNGxpbHgK yNWJIZhlr6MMiUn1O1p94LXaP5JWHRZdGeX9A/f1W5a15Fa4LkCLuwkCWRp+YPMP 66AA1lcQoATWCdkvpf50Rk7gZg4WC2Y= -----END CERTIFICATE-----Generated at Tue Oct 6 20:16:33 2026 by rpki-client