$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/32953ac8-1ef1-3490-9dc7-3b816778af99.roa File: 32953ac8-1ef1-3490-9dc7-3b816778af99.roa (raw, json) Hash identifier: b1MzUuoszVdQtYofTbBDFoQwVti9cq+Z2N1WFS+0J2E= Subject key identifier: CC:4A:A5:BB:74:5C:85:21:C0:AE:08:09:11:91:97:3F:E1:20:55:C9 Certificate issuer: /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8 Certificate serial: 010D0C9F4328584F429B32D1CA67A6FFF2663680 Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/32953ac8-1ef1-3490-9dc7-3b816778af99.roa Signing time: Tue 22 Sep 2026 14:11:30 +0000 ROA not before: Tue 22 Sep 2026 14:11:30 +0000 ROA not after: Mon 21 Dec 2026 15:11:30 +0000 asID: 7291 IP address blocks: 12.120.57.0/24 maxlen: 24 12.120.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:9b:32:d1:ca:67:a6:ff:f2:66:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8 Validity Not Before: Sep 22 14:11:30 2026 GMT Not After : Dec 21 15:11:30 2026 GMT Subject: CN=e94b6707-73eb-4052-8a01-cf2364017c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:15:07:c9:6f:95:ad:fa:fe:ca:f3:e1:44:78: fb:6c:dd:87:2e:fa:41:8a:44:63:6f:38:64:8c:86: f7:1a:c3:f2:c0:e1:89:27:2e:26:22:cd:1e:6d:b0: c7:e8:a6:b7:28:42:21:c4:c2:ec:9d:1c:d4:0a:f1: 41:f4:53:e0:d1:45:1c:05:62:15:c9:e0:8d:da:af: a1:ac:57:b5:47:a7:22:92:82:d3:2b:66:c0:c3:6a: 22:3b:0b:7f:ca:48:aa:18:42:47:4f:6e:a2:ef:9f: c7:bf:50:5a:c9:f1:c7:d0:c2:58:51:91:72:5e:c1: 21:9c:f9:42:7d:46:af:0b:08:54:1c:6e:1e:31:36: ee:5e:d0:b8:d1:5e:a0:60:6a:2f:8e:ee:02:cf:06: da:ac:70:f0:19:fe:1d:05:56:24:bc:7d:1f:09:34: 26:6c:b1:f6:13:de:ae:2b:78:d3:2f:34:71:b1:b8: 95:09:ea:5b:03:3c:14:be:d8:8e:5a:50:62:8d:c1: 34:a1:b6:38:d5:e5:1f:7b:d4:2a:6c:f8:1c:9e:78: 01:76:e3:12:48:bb:e8:30:10:0d:dc:aa:58:93:17: 5b:ea:04:83:ff:38:48:37:53:6a:4b:97:ee:f8:29: 72:b4:ec:39:55:2f:03:c3:45:bd:29:5d:3d:a0:6a: 9b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4A:A5:BB:74:5C:85:21:C0:AE:08:09:11:91:97:3F:E1:20:55:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/32953ac8-1ef1-3490-9dc7-3b816778af99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl X509v3 Authority Key Identifier: keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer sbgp-ipAddrBlock: critical IPv4: 12.120.57.0-12.120.58.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:36:c3:43:75:61:1e:5b:65:80:ed:78:ef:42:4b:83:ce:94: 66:8a:9b:13:cd:e3:66:09:0f:61:b5:11:70:93:7d:48:00:84: b5:0e:9e:09:1c:87:6e:fe:be:a5:c7:fe:f2:4e:63:c8:7a:c1: c2:03:6c:d5:79:b5:3e:3d:e1:b5:cd:22:13:a7:56:f4:2a:f5: f2:27:06:6c:cc:09:61:b4:cd:44:a6:83:e4:c3:2e:24:26:c8: e8:6f:02:13:c7:e5:86:66:ea:ce:c4:fb:53:04:1c:15:43:8b: b7:35:98:fd:d7:8c:87:a0:34:77:b3:35:1d:06:17:ba:42:08: ac:a1:ce:b8:c7:10:85:16:f6:8a:96:8e:dc:10:a1:1a:8a:95: dd:7c:d9:a1:9e:eb:e3:0a:c4:0e:16:b1:f4:dc:3f:9c:59:1f: ce:bd:f4:74:f9:8a:79:d6:80:92:f4:be:e6:4c:02:af:6b:32: 0d:17:55:c8:9f:26:53:a3:70:33:3e:66:99:f0:02:7f:c1:2a: 09:3b:9b:f8:a2:12:f4:83:76:fb:51:ad:f5:91:64:79:89:d2: 6c:04:be:75:ba:e6:6b:e7:a0:40:1a:d2:89:3a:75:85:8e:b4: 1e:6f:80:79:21:20:6f:e1:14:f3:df:16:bf:7d:06:8d:cb:eb: 8c:2a:a8:86 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9CmzLRymem//JmNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw NGE4MB4XDTI2MDkyMjE0MTEzMFoXDTI2MTIyMTE1MTEzMFowLzEtMCsGA1UEAxMk ZTk0YjY3MDctNzNlYi00MDUyLThhMDEtY2YyMzY0MDE3YzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBUHyW+Vrfr+yvPhRHj7bN2HLvpBikRjbzhk jIb3GsPywOGJJy4mIs0ebbDH6Ka3KEIhxMLsnRzUCvFB9FPg0UUcBWIVyeCN2q+h rFe1R6cikoLTK2bAw2oiOwt/ykiqGEJHT26i75/Hv1BayfHH0MJYUZFyXsEhnPlC fUavCwhUHG4eMTbuXtC40V6gYGovju4CzwbarHDwGf4dBVYkvH0fCTQmbLH2E96u K3jTLzRxsbiVCepbAzwUvtiOWlBijcE0obY41eUfe9QqbPgcnngBduMSSLvoMBAN 3KpYkxdb6gSD/zhIN1NqS5fu+ClytOw5VS8Dw0W9KV09oGqbIQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMxKpbt0XIUhwK4ICRGRlz/hIFXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvMzI5NTNhYzgtMWVmMS0z NDkwLTlkYzctM2I4MTY3NzhhZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj MmJiZTA0YTguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAMeDkD BAAMeDowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAXjbDQ3VhHltlgO1470JLg86UZoqbE83jZgkPYbURcJN9 SACEtQ6eCRyHbv6+pcf+8k5jyHrBwgNs1Xm1Pj3htc0iE6dW9Cr18icGbMwJYbTN RKaD5MMuJCbI6G8CE8flhmbqzsT7UwQcFUOLtzWY/deMh6A0d7M1HQYXukIIrKHO uMcQhRb2ipaO3BChGoqV3XzZoZ7r4wrEDhax9Nw/nFkfzr30dPmKedaAkvS+5kwC r2syDRdVyJ8mU6NwMz5mmfACf8EqCTub+KIS9IN2+1Gt9ZFkeYnSbAS+dbrma+eg QBrSiTp1hY60Hm+AeSEgb+EU898Wv30GjcvrjCqohg== -----END CERTIFICATE-----Generated at Mon Sep 28 23:31:50 2026 by rpki-client