$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/32d3411b-3458-3d58-b2d9-c118cfd01ffc.roa File: 32d3411b-3458-3d58-b2d9-c118cfd01ffc.roa (raw, json) Hash identifier: rWlng0XgrPCfO8aicSXVU4uDByjvMgT/2B1CWACbn6w= Subject key identifier: 42:B7:33:7A:15:77:5B:3D:B8:77:A0:71:99:B2:E3:B7:32:D2:9E:65 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D15A26DDA7499E67D67129F40 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/32d3411b-3458-3d58-b2d9-c118cfd01ffc.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 400615 IP address blocks: 192.31.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:6d:da:74:99:e6:7d:67:12:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=0158c0ca-2932-446b-af13-9265b3432b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2e:34:11:43:9e:c0:97:23:ce:dc:a6:c1:58: 06:5d:2e:b3:e0:79:58:8b:48:0d:06:79:f3:79:98: 6d:3c:e1:f5:80:19:64:b2:0c:8d:35:90:25:58:86: 90:b1:bc:d0:41:96:90:1e:be:83:04:60:c0:20:2e: 28:f0:23:65:53:9b:c5:cc:ed:5a:f8:71:d1:b2:77: fa:d2:ab:4f:37:19:8b:67:9e:7a:65:f5:5d:03:c4: 86:36:dd:71:30:be:02:85:f1:13:91:d7:42:ca:48: 6d:38:eb:dc:8c:70:7a:d8:65:ce:97:b0:80:90:20: e7:98:95:9b:c1:b9:0c:a3:cb:3d:05:35:96:f9:f0: a9:ef:47:4c:08:37:a2:d3:2c:6e:23:ce:3f:5a:ac: a5:e1:cc:4d:02:47:39:b2:17:e7:ad:2b:11:20:97: 64:fc:0e:a2:9c:a4:83:0e:d9:22:21:78:91:75:75: 18:08:11:be:ae:58:49:e7:6f:8d:ca:94:69:7a:2c: 02:dd:38:bd:bb:17:9f:7b:0f:6e:d2:9a:38:0a:ba: 74:b5:92:f9:a3:e2:c0:44:d1:10:23:e5:49:f9:05: 5c:66:30:8f:fd:5b:98:26:65:c4:db:95:d0:01:c1: 1c:27:bc:b0:2c:08:72:03:cd:51:f4:c3:c0:46:da: cd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B7:33:7A:15:77:5B:3D:B8:77:A0:71:99:B2:E3:B7:32:D2:9E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/32d3411b-3458-3d58-b2d9-c118cfd01ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:46:e7:3e:a8:5c:13:78:2e:46:d1:42:cb:12:b5:4c:eb:e9: 48:ff:fa:cd:b0:23:d0:e8:45:4e:37:79:19:5f:4f:bc:b6:c4: 97:26:65:05:9d:e6:c5:ef:da:02:7f:48:27:f3:be:d8:55:3e: a5:e3:7a:20:1c:3f:a5:57:c0:f1:3d:c5:c1:c1:d1:50:17:49: ef:4a:9d:00:f9:f5:ac:ad:35:fb:9c:89:40:0b:8a:31:0a:6a: 11:4d:3a:13:e1:a0:b3:99:2f:c8:82:52:d2:4a:47:60:1f:63: e9:15:cd:bf:3a:26:2d:ed:04:50:a6:e4:7c:31:dd:d8:9d:e8: 16:39:c5:41:b2:17:6f:5e:53:b5:37:17:3f:ee:07:fa:af:31: 66:f4:c9:20:a9:49:b3:44:2d:be:bc:57:85:56:97:16:1b:41: e5:b8:b5:c0:41:dc:10:d7:c5:f4:4c:be:1a:5c:5d:25:78:11: 17:de:34:43:c4:d3:2e:43:f7:dc:44:6d:ab:46:f7:e9:04:0b: 4f:ef:55:ef:d8:71:90:24:77:b3:52:8e:6f:6c:07:80:eb:ad: ac:a5:da:ef:48:55:aa:73:50:7d:0c:0e:49:00:ae:b2:e7:92: 87:5a:15:d7:91:6f:01:f1:60:4c:8d:df:4c:c7:49:68:84:66: d3:bd:fd:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vom3adJnmfWcSn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MDE1OGMwY2EtMjkzMi00NDZiLWFmMTMtOTI2NWIzNDMyYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C40EUOewJcjztymwVgGXS6z4HlYi0gNBnnz eZhtPOH1gBlksgyNNZAlWIaQsbzQQZaQHr6DBGDAIC4o8CNlU5vFzO1a+HHRsnf6 0qtPNxmLZ556ZfVdA8SGNt1xML4ChfETkddCykhtOOvcjHB62GXOl7CAkCDnmJWb wbkMo8s9BTWW+fCp70dMCDei0yxuI84/Wqyl4cxNAkc5shfnrSsRIJdk/A6inKSD DtkiIXiRdXUYCBG+rlhJ52+NypRpeiwC3Ti9uxefew9u0po4Crp0tZL5o+LARNEQ I+VJ+QVcZjCP/VuYJmXE25XQAcEcJ7ywLAhyA81R9MPARtrN2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK3M3oVd1s9uHegcZmy47cy0p5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvMzJkMzQxMWItMzQ1OC0z ZDU4LWIyZDktYzExOGNmZDAxZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhG5z6oXBN4LkbRQssStUzr6Uj/+s2wI9DoRU43eRlfT7y2xJcmZQWd 5sXv2gJ/SCfzvthVPqXjeiAcP6VXwPE9xcHB0VAXSe9KnQD59aytNfuciUALijEK ahFNOhPhoLOZL8iCUtJKR2AfY+kVzb86Ji3tBFCm5Hwx3did6BY5xUGyF29eU7U3 Fz/uB/qvMWb0ySCpSbNELb68V4VWlxYbQeW4tcBB3BDXxfRMvhpcXSV4ERfeNEPE 0y5D99xEbatG9+kEC0/vVe/YcZAkd7NSjm9sB4Drrayl2u9IVapzUH0MDkkArrLn kodaFdeRbwHxYEyN30zHSWiEZtO9/TI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:29:32 2026 by rpki-client