$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/32ca9d21-a296-3b7a-b1cd-004460da484e.roa File: 32ca9d21-a296-3b7a-b1cd-004460da484e.roa (raw, json) Hash identifier: DVWOGAxMN46bo5tV7bTgXuvQYofDph8E9prkN2wUeGA= Subject key identifier: 17:24:4D:50:70:0F:A8:B0:FE:01:A1:39:A2:58:A1:34:BE:1B:80:25 Certificate issuer: /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Certificate serial: 010D0C9F4328584F498761CFF79FFA6E6BF53B80 Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/32ca9d21-a296-3b7a-b1cd-004460da484e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11808 IP address blocks: 129.101.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:61:cf:f7:9f:fa:6e:6b:f5:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=50c96022-975a-4823-b857-5ef2a6bc74d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:fc:98:90:9f:5c:95:b6:4e:bb:f6:e4:00: ef:e5:24:a1:51:dd:2a:e0:7f:a7:2f:b7:66:21:ea: 48:64:8b:2a:ab:06:c9:8f:a6:2c:fd:2f:55:99:bd: 77:e7:08:2e:48:37:e6:e0:f8:dc:03:b3:cc:f1:4a: e3:47:48:d7:21:38:8a:cb:d0:43:94:84:cd:12:b5: df:fb:8e:eb:e1:1d:ed:4d:53:fb:77:4f:ae:8a:9c: d5:d9:1a:1a:da:7a:e1:99:e4:7c:db:6a:ca:10:91: bf:4d:ff:5e:67:5e:87:2a:ff:d6:68:b6:6f:1c:e1: 62:96:43:74:36:e5:d0:e5:0e:db:e5:b8:e5:53:02: 6c:9b:b1:a3:c2:6b:6d:29:0c:8e:7a:3b:ef:68:76: 6a:5f:2d:28:f5:3b:59:33:1d:8a:0a:34:11:ad:09: b3:cf:39:18:96:34:ba:96:36:fa:fd:2a:57:14:04: e9:8d:d2:4e:86:d5:b0:24:f5:c5:6e:2c:cc:50:5c: 00:c5:44:6b:8e:ef:54:88:34:c5:39:a6:f0:39:de: fd:31:bc:8b:d0:2a:dd:74:63:7d:8b:3b:96:f8:49: 97:24:30:f2:d6:a0:67:3d:c8:02:ac:c7:7c:9a:81: 08:91:0d:66:3f:d7:db:00:70:dc:bc:b8:38:56:f9: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:24:4D:50:70:0F:A8:B0:FE:01:A1:39:A2:58:A1:34:BE:1B:80:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/32ca9d21-a296-3b7a-b1cd-004460da484e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl X509v3 Authority Key Identifier: keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer sbgp-ipAddrBlock: critical IPv4: 129.101.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a1:ac:43:b5:bb:22:19:93:13:16:2f:41:ad:6c:d2:75:47: 1a:8a:14:bd:fa:c2:20:01:07:ea:ba:b7:d2:d1:a5:fb:06:cf: 75:dc:d8:ca:8a:fa:f2:79:f6:dd:22:f9:76:a4:ac:23:7e:e2: 30:30:c2:0c:39:60:e9:3d:47:b4:27:9a:8e:74:e1:53:c7:1f: 64:04:8a:86:14:3e:0c:f3:37:1f:ac:ec:ef:07:cb:06:88:ec: 27:c7:56:cf:a5:68:03:f6:a4:b4:a2:7d:4b:e7:0f:e7:4d:aa: 81:23:94:c2:f1:26:69:b9:87:df:13:e7:6f:98:9a:a3:a2:82: 45:ac:81:17:b4:ec:70:9c:59:37:02:d8:e6:c0:c9:03:b5:a6: ee:ee:57:a8:d8:9d:c9:93:5d:16:48:ee:85:e4:1a:75:08:ab: 92:40:18:c7:63:53:1c:ce:d6:03:93:23:17:86:68:1a:79:e2: b6:86:63:1e:2a:97:31:29:64:c3:31:eb:b7:67:1c:33:60:29: a5:41:93:2c:d3:80:82:ce:8e:6b:99:d1:d6:f9:07:4e:81:02: da:4f:be:dc:ef:19:bb:b3:55:b3:03:a2:af:c0:60:d2:e1:93: 7b:46:56:69:90:46:4a:f6:d0:f0:1f:ba:ff:1c:2b:e6:f6:91: 26:6e:5a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh2HP95/6bmv1O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk Nzc0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTBjOTYwMjItOTc1YS00ODIzLWI4NTctNWVmMmE2YmM3NGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd78mJCfXJW2Trv25ADv5SShUd0q4H+nL7dm IepIZIsqqwbJj6Ys/S9Vmb135wguSDfm4PjcA7PM8UrjR0jXITiKy9BDlITNErXf +47r4R3tTVP7d0+uipzV2Roa2nrhmeR822rKEJG/Tf9eZ16HKv/WaLZvHOFilkN0 NuXQ5Q7b5bjlUwJsm7GjwmttKQyOejvvaHZqXy0o9TtZMx2KCjQRrQmzzzkYljS6 ljb6/SpXFATpjdJOhtWwJPXFbizMUFwAxURrju9UiDTFOabwOd79MbyL0CrddGN9 izuW+EmXJDDy1qBnPcgCrMd8moEIkQ1mP9fbAHDcvLg4VvmZ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBckTVBwD6iw/gGhOaJYoTS+G4AlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvMzJjYTlkMjEtYTI5Ni0z YjdhLWIxY2QtMDA0NDYwZGE0ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1 ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgWX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqhrEO1uyIZkxMWL0GtbNJ1RxqKFL36wiABB+q6t9LRpfsGz3Xc2MqK +vJ59t0i+XakrCN+4jAwwgw5YOk9R7Qnmo504VPHH2QEioYUPgzzNx+s7O8HywaI 7CfHVs+laAP2pLSifUvnD+dNqoEjlMLxJmm5h98T52+YmqOigkWsgRe07HCcWTcC 2ObAyQO1pu7uV6jYncmTXRZI7oXkGnUIq5JAGMdjUxzO1gOTIxeGaBp54raGYx4q lzEpZMMx67dnHDNgKaVBkyzTgILOjmuZ0db5B06BAtpPvtzvGbuzVbMDoq/AYNLh k3tGVmmQRkr20PAfuv8cK+b2kSZuWtc= -----END CERTIFICATE-----Generated at Mon Oct 12 09:13:32 2026 by rpki-client