$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa File: 4c09f404-0682-3e12-a569-27fb667f5de3.roa (raw, json) Hash identifier: jhk1kRo9LmiQ6kPJ8Tpv+6aJj0HNnLBeIaoykR9Z5mg= Subject key identifier: D5:85:D9:32:60:4B:8D:E4:97:A1:21:95:CF:4F:DA:CD:12:A1:09:F3 Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F4328584EF87CBB0FE37EE7BA966E1680 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 52.144.58.0/24 maxlen: 24 168.245.151.0/24 maxlen: 24 192.139.134.0/24 maxlen: 24 199.19.89.0/24 maxlen: 24 199.19.90.0/24 maxlen: 24 199.19.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bb:0f:e3:7e:e7:ba:96:6e:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=3ec0e1cb-90d3-4bb5-bcf6-429975095bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b5:da:ed:1b:5f:de:d8:05:4a:66:15:39:9e: 46:d0:45:64:9b:9c:8b:fd:a4:d8:17:4c:e0:46:47: 19:c7:aa:d5:a4:b2:c6:21:0d:6c:80:b7:8a:3b:0e: 49:c8:9d:58:25:eb:6d:48:de:ea:e0:7d:14:23:88: 80:81:71:66:98:51:cc:8b:8a:02:0c:57:0b:13:31: 2b:e3:74:8c:08:9f:56:99:0f:9b:d2:3a:7c:c2:5d: 70:85:02:e2:a3:f4:d7:85:43:2a:55:cb:45:74:9a: 97:71:d6:a8:01:61:a1:98:e7:11:35:45:b3:95:19: 02:a2:38:ec:00:96:43:3f:4f:8b:ec:e0:f3:3f:d6: 9a:f4:51:03:1a:14:53:88:fa:19:ef:2b:13:31:e0: e0:2b:02:89:97:5d:95:ba:77:22:e3:eb:ce:4a:ac: 74:db:49:16:3e:0a:21:da:81:94:a8:66:a6:74:85: 02:8d:f0:83:19:8f:00:1e:a2:09:b4:fa:46:cb:f9: 27:61:d2:62:ee:1d:b3:44:33:d7:1e:9a:3d:df:95: 3b:e7:a3:31:09:32:80:ec:d5:b4:89:8b:85:af:36: 10:ce:02:74:87:63:bb:45:9b:da:88:2c:ff:dd:d8: c1:5b:50:ae:ae:71:2d:f4:88:59:61:21:01:7b:e8: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:85:D9:32:60:4B:8D:E4:97:A1:21:95:CF:4F:DA:CD:12:A1:09:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/4c09f404-0682-3e12-a569-27fb667f5de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 52.144.58.0/24 168.245.151.0/24 192.139.134.0/24 199.19.89.0-199.19.91.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:16:e8:4c:ca:99:2e:a6:81:b2:7d:86:39:e3:fe:1e:07:82: 85:cd:e3:bb:aa:1b:62:99:6d:f3:85:e8:f7:0b:da:73:7a:33: 5d:d9:7d:60:ea:9c:2e:57:7e:41:1d:27:62:5f:e3:42:bf:a6: 91:0d:6d:de:49:18:27:23:fe:bb:65:71:db:69:84:4b:4f:f0: 15:8a:91:5a:69:b1:6a:c1:15:e4:48:20:1a:ba:27:f8:2d:43: a4:80:05:90:c2:ab:d9:69:ac:d0:56:3f:1c:50:a9:ae:19:02: f5:6f:bf:de:27:52:bd:f4:2c:ae:51:31:08:e9:2b:12:40:bc: 8a:23:fb:cf:07:e9:ab:46:91:a9:3d:d6:f0:79:60:fc:70:b4: 14:f4:c9:b4:04:2e:5b:1f:a5:ce:4d:2d:3d:65:1a:95:dc:71: f6:62:23:b4:b5:de:ea:84:47:e8:cd:46:fa:d1:88:63:bd:c8: db:b7:d9:f1:87:06:f9:b6:0b:dd:40:91:9b:97:e7:35:ab:9f: 7a:09:1d:71:90:3e:30:50:22:41:75:c1:0f:37:28:9a:02:f0: 0e:8c:bf:5c:d0:29:ab:f1:30:36:b8:50:18:68:88:d6:9b:65: 55:28:0b:71:f5:8e:69:cc:7f:13:41:58:40:5e:99:dd:d7:c1: 60:e0:a8:21 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE74fLsP437nupZuFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk M2VjMGUxY2ItOTBkMy00YmI1LWJjZjYtNDI5OTc1MDk1YmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrXa7Rtf3tgFSmYVOZ5G0EVkm5yL/aTYF0zg RkcZx6rVpLLGIQ1sgLeKOw5JyJ1YJettSN7q4H0UI4iAgXFmmFHMi4oCDFcLEzEr 43SMCJ9WmQ+b0jp8wl1whQLio/TXhUMqVctFdJqXcdaoAWGhmOcRNUWzlRkCojjs AJZDP0+L7ODzP9aa9FEDGhRTiPoZ7ysTMeDgKwKJl12Vunci4+vOSqx020kWPgoh 2oGUqGamdIUCjfCDGY8AHqIJtPpGy/knYdJi7h2zRDPXHpo935U756MxCTKA7NW0 iYuFrzYQzgJ0h2O7RZvaiCz/3djBW1CurnEt9IhZYSEBe+hhYQIDAQABo4IDbzCC A2swHQYDVR0OBBYEFNWF2TJgS43kl6Ehlc9P2s0SoQnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvNGMwOWY0MDQtMDY4Mi0z ZTEyLWE1NjktMjdmYjY2N2Y1ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQANJA6AwQA qPWXAwQAwIuGMAwDBADHE1kDBALHE1gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJRboTMqZLqaBsn2GOeP+ HgeChc3ju6obYplt84Xo9wvac3ozXdl9YOqcLld+QR0nYl/jQr+mkQ1t3kkYJyP+ u2Vx22mES0/wFYqRWmmxasEV5EggGron+C1DpIAFkMKr2Wms0FY/HFCprhkC9W+/ 3idSvfQsrlExCOkrEkC8iiP7zwfpq0aRqT3W8Hlg/HC0FPTJtAQuWx+lzk0tPWUa ldxx9mIjtLXe6oRH6M1G+tGIY73I27fZ8YcG+bYL3UCRm5fnNaufegkdcZA+MFAi QXXBDzcomgLwDoy/XNApq/EwNrhQGGiI1ptlVSgLcfWOacx/E0FYQF6Z3dfBYOCo IQ== -----END CERTIFICATE-----Generated at Sun Oct 4 15:32:54 2026 by rpki-client