$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/1cda9cb9-619c-36e1-b376-76334b9a94c8.roa File: 1cda9cb9-619c-36e1-b376-76334b9a94c8.roa (raw, json) Hash identifier: SIFWo8c/j7hNtGa/LhH8RTEPjc4mEllMGvbLiIaAPRE= Subject key identifier: BE:FF:E1:8D:37:A4:3D:28:F9:2A:86:2D:61:34:04:A3:6B:50:CD:BD Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584F5E62C72FED006354D1FD2500 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/1cda9cb9-619c-36e1-b376-76334b9a94c8.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 5645 IP address blocks: 216.154.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c7:2f:ed:00:63:54:d1:fd:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=0135a4fd-b98e-45d2-bf17-e65554095ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ba:1d:59:be:6e:b0:51:02:8c:55:74:e6:b3: 9a:af:ce:ed:24:69:26:61:b0:d4:1f:9b:57:e3:3a: ae:51:fc:0f:eb:a4:d4:0f:3b:31:95:28:bf:79:f9: ac:50:6e:73:2f:a9:63:79:26:e4:9b:cc:7f:3e:f5: 37:fd:a2:77:16:f1:49:4c:f3:b6:2b:69:cd:1a:1a: b3:8d:5f:fc:aa:16:73:76:e1:6f:9f:ae:62:c8:b0: df:8c:c7:1d:79:2a:81:83:f1:81:df:4b:3f:0b:6a: f2:20:a3:11:71:7c:89:0b:36:05:ad:8b:82:ac:b1: d5:4a:9e:bd:14:5e:c3:e5:16:29:98:92:b0:26:3d: 52:55:45:1a:b7:09:a6:d3:6a:b4:d8:44:47:bc:3d: 9b:3a:63:f2:08:cb:90:08:4e:3c:6b:32:f4:d1:2e: 62:84:0b:8c:d6:a6:6f:e8:69:d8:5f:b4:5b:5c:ef: b3:54:4e:9d:28:8d:42:4f:6e:35:9e:15:23:1d:18: 75:61:d3:50:31:78:79:69:0e:86:33:aa:01:34:67: 88:d4:a3:34:55:37:83:ea:a5:22:3a:ba:ef:d9:1a: 8d:4f:89:06:00:fc:d3:fe:0c:cf:c5:f8:42:4b:1a: 74:df:b0:88:50:3d:63:9a:17:90:61:b5:54:dc:19: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FF:E1:8D:37:A4:3D:28:F9:2A:86:2D:61:34:04:A3:6B:50:CD:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/1cda9cb9-619c-36e1-b376-76334b9a94c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 216.154.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:d8:60:59:96:ec:ed:65:1f:eb:08:c0:c6:2c:c3:a6:38:9b: 52:fc:e9:b1:f3:eb:2a:13:97:f2:c7:7c:43:2e:75:f2:7f:c6: 65:e3:1a:c3:f7:9d:88:46:b0:48:d3:c9:85:d4:e0:aa:15:e0: 30:d7:f5:90:ac:e9:d9:aa:dd:ef:25:4a:da:9f:00:98:8f:b6: 4b:07:e7:b5:e4:c1:fa:f9:04:fc:1d:df:56:92:a0:1b:b4:c7: b6:6c:e8:ad:36:dd:74:6c:12:60:b6:38:63:70:97:00:68:f6: 3e:7b:63:24:6f:5a:39:5a:5c:db:c6:a5:28:3b:11:16:b1:1c: 93:68:fe:c1:eb:c9:e4:26:1d:b9:75:d7:40:a1:00:2d:ad:9f: 8d:ef:ca:98:c9:df:53:52:ac:24:be:28:55:a4:00:37:19:28: 3c:48:0c:d0:37:48:35:d2:cc:49:46:80:c5:a9:fe:e3:ec:da: 8e:33:95:01:21:25:24:78:06:2b:a4:cb:e7:0b:f7:48:c3:e8: 3f:7b:f5:22:5e:4c:15:f7:7a:cf:6e:c4:55:6d:26:15:7a:2f: f9:b8:0e:ba:76:7e:87:d8:2e:88:3c:7c:35:7a:31:ca:4c:61: 4c:f7:df:c5:c0:61:4b:2d:49:88:2c:50:dc:cd:38:44:00:b7: f9:72:26:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYscv7QBjVNH9JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MDEzNWE0ZmQtYjk4ZS00NWQyLWJmMTctZTY1NTU0MDk1ZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibodWb5usFECjFV05rOar87tJGkmYbDUH5tX 4zquUfwP66TUDzsxlSi/efmsUG5zL6ljeSbkm8x/PvU3/aJ3FvFJTPO2K2nNGhqz jV/8qhZzduFvn65iyLDfjMcdeSqBg/GB30s/C2ryIKMRcXyJCzYFrYuCrLHVSp69 FF7D5RYpmJKwJj1SVUUatwmm02q02ERHvD2bOmPyCMuQCE48azL00S5ihAuM1qZv 6GnYX7RbXO+zVE6dKI1CT241nhUjHRh1YdNQMXh5aQ6GM6oBNGeI1KM0VTeD6qUi Orrv2RqNT4kGAPzT/gzPxfhCSxp037CIUD1jmheQYbVU3BkOhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7/4Y03pD0o+SqGLWE0BKNrUM29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvMWNkYTljYjktNjE5Yy0z NmUxLWIzNzYtNzYzMzRiOWE5NGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2JqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANDYYFmW7O1lH+sIwMYsw6Y4m1L86bHz6yoTl/LHfEMudfJ/xmXjGsP3 nYhGsEjTyYXU4KoV4DDX9ZCs6dmq3e8lStqfAJiPtksH57Xkwfr5BPwd31aSoBu0 x7Zs6K023XRsEmC2OGNwlwBo9j57YyRvWjlaXNvGpSg7ERaxHJNo/sHryeQmHbl1 10ChAC2tn43vypjJ31NSrCS+KFWkADcZKDxIDNA3SDXSzElGgMWp/uPs2o4zlQEh JSR4Biuky+cL90jD6D979SJeTBX3es9uxFVtJhV6L/m4Drp2fofYLog8fDV6McpM YUz338XAYUstSYgsUNzNOEQAt/lyJhQ= -----END CERTIFICATE-----Generated at Sun Oct 4 22:34:27 2026 by rpki-client