$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/009624bf-1812-394b-a71f-270a93253fab.roa File: 009624bf-1812-394b-a71f-270a93253fab.roa (raw, json) Hash identifier: Be/QRgLbz/sgLHYw3LxoTQMhuMlibUlsFSD4h4qKjHQ= Subject key identifier: 91:D1:E5:2F:4C:CE:9A:D7:AA:62:27:60:27:FC:3D:D2:78:91:43:1B Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584D4A8FA31B39835E6F0FBF1A00 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/009624bf-1812-394b-a71f-270a93253fab.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 33477 IP address blocks: 162.247.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a3:1b:39:83:5e:6f:0f:bf:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=229c2dc1-997c-4650-a61e-e4407c569522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:4c:c4:bc:85:41:1d:fb:0b:fd:30:3e:77: 79:d9:5b:4a:a6:e2:5c:4a:94:ef:bd:ce:49:53:b8: da:a3:58:b4:03:d3:cb:7e:b9:05:1e:14:d5:79:a3: 3f:5e:67:61:57:24:76:b8:a5:91:ad:8a:96:ef:a4: da:1d:f3:56:60:d9:1c:70:be:0c:9e:ae:11:01:df: 6a:de:ca:d3:f9:6e:ac:bd:e9:01:15:31:94:9d:d5: c8:90:07:49:a3:b1:4a:d5:9d:ba:1b:27:85:3c:c6: 5f:71:ff:97:61:bf:4f:e0:ee:39:59:b8:6c:5f:fd: c0:b7:ff:03:64:ff:b3:a0:6e:b0:9f:1f:bc:93:21: 55:87:62:bd:f1:61:5e:f2:1f:81:55:70:aa:e0:37: 8d:36:e4:d6:19:30:96:18:ac:96:4c:58:a5:8c:e3: 5c:31:f4:03:70:7a:0b:2a:9e:f3:32:a9:b9:59:79: 11:56:0c:d5:32:10:b7:2e:1e:6b:1a:b2:2e:d0:3a: 38:33:7b:39:e3:2f:2e:63:bd:dd:32:d5:73:72:1a: 7e:d4:c9:a1:11:38:9a:c6:d1:d9:e5:6c:39:e0:4f: b6:b3:01:9e:d3:fe:16:07:a2:ae:69:a7:fb:b3:e1: 13:32:ba:51:93:b2:d9:b9:de:01:eb:c3:21:cb:6a: 18:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D1:E5:2F:4C:CE:9A:D7:AA:62:27:60:27:FC:3D:D2:78:91:43:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/009624bf-1812-394b-a71f-270a93253fab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 162.247.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:53:f0:03:2f:56:05:b7:d0:a4:ae:3b:43:e2:15:9f:c1:dc: e4:85:77:f5:6d:89:b0:a3:3d:ea:f4:9f:56:47:88:ec:e2:a3: ed:5d:dc:98:60:8c:bc:fa:25:f0:b5:c3:88:3d:57:08:22:3a: d5:9e:b1:e3:0e:33:77:80:94:c4:b4:0a:29:53:fb:c0:9f:89: 1a:0a:78:5f:0a:0f:83:02:b2:10:57:1d:42:30:6d:5e:39:1e: b9:7f:67:78:32:55:57:b0:fb:77:c1:2f:42:86:fc:91:1e:37: 5b:17:8e:05:05:d0:38:5c:c3:12:cf:7e:87:58:7f:34:ac:f7: f8:9f:46:d3:b5:0e:7b:a0:60:35:3a:8a:92:68:72:23:42:4c: ca:98:61:cc:e1:48:59:9a:36:95:47:a8:fa:ce:74:30:88:61: 26:81:51:c0:35:a8:3d:a9:da:23:ad:b3:0d:17:cc:97:0b:8f: 4d:cd:fd:4a:a8:a6:fc:b2:e3:4c:3e:10:f8:66:43:3d:51:e7: 81:03:dc:bd:0f:a9:70:32:a9:a5:4b:f7:2e:3a:17:50:f0:18: 10:c4:62:c7:79:97:7e:2c:2a:07:4a:f0:84:1e:b8:a2:9a:df: 6d:31:23:26:54:5b:7d:10:64:97:f1:e5:f0:d9:8f:08:e7:13: d2:79:15:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6MbOYNebw+/GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MjI5YzJkYzEtOTk3Yy00NjUwLWE2MWUtZTQ0MDdjNTY5NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2lMxLyFQR37C/0wPnd52VtKpuJcSpTvvc5J U7jao1i0A9PLfrkFHhTVeaM/XmdhVyR2uKWRrYqW76TaHfNWYNkccL4Mnq4RAd9q 3srT+W6svekBFTGUndXIkAdJo7FK1Z26GyeFPMZfcf+XYb9P4O45WbhsX/3At/8D ZP+zoG6wnx+8kyFVh2K98WFe8h+BVXCq4DeNNuTWGTCWGKyWTFiljONcMfQDcHoL Kp7zMqm5WXkRVgzVMhC3Lh5rGrIu0Do4M3s54y8uY73dMtVzchp+1MmhETiaxtHZ 5Ww54E+2swGe0/4WB6Kuaaf7s+ETMrpRk7LZud4B68Mhy2oYTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHR5S9MzprXqmInYCf8PdJ4kUMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvMDA5NjI0YmYtMTgxMi0z OTRiLWE3MWYtMjcwYTkzMjUzZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoveEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNT8AMvVgW30KSuO0PiFZ/B3OSFd/VtibCjPer0n1ZHiOzio+1d3Jhg jLz6JfC1w4g9VwgiOtWeseMOM3eAlMS0CilT+8CfiRoKeF8KD4MCshBXHUIwbV45 Hrl/Z3gyVVew+3fBL0KG/JEeN1sXjgUF0DhcwxLPfodYfzSs9/ifRtO1DnugYDU6 ipJociNCTMqYYczhSFmaNpVHqPrOdDCIYSaBUcA1qD2p2iOtsw0XzJcLj03N/Uqo pvyy40w+EPhmQz1R54ED3L0PqXAyqaVL9y46F1DwGBDEYsd5l34sKgdK8IQeuKKa 320xIyZUW30QZJfx5fDZjwjnE9J5FaQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:28 2026 by rpki-client