$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa File: 5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa (raw, json) Hash identifier: IFnYVVPcb0f19s08bcPr9Kl7PFE75ioTgFunthklKgY= Subject key identifier: 52:B1:EF:EB:5A:53:7D:97:DC:AA:51:46:64:50:D5:95:71:C8:99:BB Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584F5E62C6E5A03472175ECCC3E0 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 5645 IP address blocks: 198.84.128.0/17 maxlen: 17 198.84.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c6:e5:a0:34:72:17:5e:cc:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=3118378c-730e-4490-a27a-090dc8d22621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:8a:70:dc:f2:ef:ec:55:4e:20:ad:87:0b: 83:e9:cd:5a:7e:76:b2:91:77:6c:9a:25:d3:ac:59: 56:a0:77:ee:cb:b6:01:69:79:1c:77:d7:cc:01:d5: c6:4c:60:ba:d8:fe:97:31:70:bd:f6:be:c9:43:85: 12:d3:e3:93:30:18:39:fd:9e:95:13:f7:1d:e4:ad: f3:d1:b8:b4:fc:75:b9:ae:9f:fd:6c:07:0f:12:6c: d4:3c:21:51:be:54:40:7a:70:a6:77:5c:ee:d2:ff: 2a:6a:7c:28:bf:c2:e2:bf:95:e3:dc:b0:5d:d3:b1: a9:02:2b:d3:87:1f:56:83:b1:fe:b3:12:14:88:88: 5b:61:ae:50:72:a9:b3:5b:3f:49:75:69:e1:7d:24: 5c:0c:2e:bc:32:a1:ea:68:c9:06:c5:53:84:1b:a7: f8:92:c9:fd:8b:35:09:12:5a:38:84:51:91:94:ac: ae:b7:41:ef:41:41:53:36:5f:9d:75:70:cc:72:8a: 63:8e:db:19:0f:ad:3d:98:82:49:50:ec:b6:e8:00: a1:80:83:5d:10:68:a7:83:41:d0:10:5a:0c:1e:46: 86:c5:2b:ea:2c:4a:47:c8:07:bf:60:db:06:3c:87: 1f:c0:84:2b:29:6e:e6:56:1e:20:df:fc:b6:6b:34: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B1:EF:EB:5A:53:7D:97:DC:AA:51:46:64:50:D5:95:71:C8:99:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5382c986-e3a5-3ea7-b4c7-3474882f9a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 198.84.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:72:88:c8:36:38:0c:ea:f1:fe:92:95:84:ee:2f:ff:e9:de: 25:8c:46:7e:9e:87:88:60:7d:5a:3b:9b:fa:25:b8:ef:30:75: 0c:ee:9e:a5:03:ee:cd:b3:18:03:78:e5:18:7a:bb:05:89:a0: af:cb:72:9f:34:b3:4b:e6:7b:77:bc:f0:bb:2e:33:0e:7a:e2: ca:86:e1:8d:a5:5d:34:9e:3d:c8:9e:bc:0e:63:70:80:34:e1: 32:26:ac:ae:72:6b:5f:cf:9f:ec:1f:37:23:69:29:b5:f1:a7: bd:f4:f6:15:00:6b:e2:79:30:9a:4c:2d:62:7b:d7:a3:4c:73: de:e2:2f:d7:95:45:f4:db:ba:c5:c7:1a:cc:cb:64:2e:b5:75: de:c4:c0:0f:ea:f2:96:52:e4:a9:04:61:7f:50:85:81:c1:eb: c4:fb:a0:e9:02:47:b2:5d:54:73:09:4c:eb:77:4a:ef:bd:51: c9:f2:7c:fb:88:de:c0:5a:25:a5:83:6d:05:cd:6e:4c:c6:d9: 78:a1:0c:25:ff:ca:81:7e:c7:2a:90:b9:45:f0:97:ed:e0:7b: d1:cb:db:79:10:28:64:a7:93:a8:2b:a6:52:77:f9:3d:60:44: b7:7e:8e:61:cb:6e:b9:b1:4d:47:3c:dd:36:05:38:e8:13:d4: 9c:d7:76:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsbloDRyF17Mw+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MzExODM3OGMtNzMwZS00NDkwLWEyN2EtMDkwZGM4ZDIyNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN+KcNzy7+xVTiCthwuD6c1afnaykXdsmiXT rFlWoHfuy7YBaXkcd9fMAdXGTGC62P6XMXC99r7JQ4US0+OTMBg5/Z6VE/cd5K3z 0bi0/HW5rp/9bAcPEmzUPCFRvlRAenCmd1zu0v8qanwov8Liv5Xj3LBd07GpAivT hx9Wg7H+sxIUiIhbYa5QcqmzWz9JdWnhfSRcDC68MqHqaMkGxVOEG6f4ksn9izUJ Elo4hFGRlKyut0HvQUFTNl+ddXDMcopjjtsZD609mIJJUOy26AChgINdEGing0HQ EFoMHkaGxSvqLEpHyAe/YNsGPIcfwIQrKW7mVh4g3/y2azSHTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKx7+taU32X3KpRRmRQ1ZVxyJm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNTM4MmM5ODYtZTNhNS0z ZWE3LWI0YzctMzQ3NDg4MmY5YTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxlSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVyiMg2OAzq8f6SlYTuL//p3iWMRn6eh4hgfVo7m/oluO8wdQzunqUD 7s2zGAN45Rh6uwWJoK/Lcp80s0vme3e88LsuMw564sqG4Y2lXTSePcievA5jcIA0 4TImrK5ya1/Pn+wfNyNpKbXxp7309hUAa+J5MJpMLWJ716NMc97iL9eVRfTbusXH GszLZC61dd7EwA/q8pZS5KkEYX9QhYHB68T7oOkCR7JdVHMJTOt3Su+9UcnyfPuI 3sBaJaWDbQXNbkzG2XihDCX/yoF+xyqQuUXwl+3ge9HL23kQKGSnk6grplJ3+T1g RLd+jmHLbrmxTUc83TYFOOgT1JzXdks= -----END CERTIFICATE-----Generated at Sun Oct 4 08:28:45 2026 by rpki-client