$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa File: 573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa (raw, json) Hash identifier: ZSwssnOLfBXmnO7w/BlhXUpcxWMXjFHk0NZxFOpJPZ4= Subject key identifier: 3C:9D:13:62:B2:D9:B6:50:D5:C6:E4:8A:5A:59:C8:40:4B:21:50:BC Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584B79BCBEC6929471CDE04DD380 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 5645 IP address blocks: 192.0.128.0/17 maxlen: 17 192.0.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:be:c6:92:94:71:cd:e0:4d:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=e490eae8-b1dc-45c9-9f9a-10f4853b9a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:95:07:d8:0f:c0:32:b3:b3:c4:ca:c3:57:8c: 5a:49:f9:46:66:cd:de:fe:ad:be:9f:fb:af:03:7b: 95:d7:65:cf:5b:ab:54:02:23:79:54:48:2c:a6:31: e7:d5:64:4f:89:4f:b8:50:19:59:75:40:bb:c9:ac: 41:f8:b7:d3:7f:7c:30:a3:65:ff:02:3b:20:02:82: 10:b6:1f:35:71:0b:83:0f:6a:27:ca:40:23:55:e8: 35:74:0b:37:f0:90:30:c2:51:6b:6a:26:9e:08:70: a9:f5:0d:6b:75:fa:11:3f:cd:91:e8:cd:d4:2f:b0: 35:e7:ec:31:99:d0:4b:3e:c8:ab:0b:7e:29:ba:6e: 12:0d:89:1a:da:21:3e:c0:26:37:e0:f3:10:7b:9d: 60:cd:24:8e:d3:a7:6c:43:da:2f:d3:86:f0:92:30: 7c:3c:7a:a8:6a:19:93:dd:15:d6:ce:11:ba:fb:c6: 82:5f:b3:56:33:ba:be:34:31:27:ea:7a:fe:2e:32: 5e:55:97:30:8d:68:fd:08:63:f0:84:3a:e8:a6:26: 2a:ff:b1:a2:4f:01:33:22:28:7f:18:ee:45:bb:9e: f1:3a:b7:bc:b8:fa:6d:44:61:8c:68:d6:94:89:0f: fe:30:b9:f2:79:99:5e:b0:b2:3a:b1:6f:51:23:9a: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:13:62:B2:D9:B6:50:D5:C6:E4:8A:5A:59:C8:40:4B:21:50:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/573f3eba-69f7-3d17-8ddf-bec410ac12b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 192.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:66:6d:09:ba:0c:cc:f0:7c:0c:2a:ef:48:ff:d5:fa:d5:53: 0c:ba:ab:33:24:05:2d:fc:da:65:8c:b7:2e:31:eb:a1:8f:39: 4b:89:62:f6:17:b9:af:1a:dd:14:29:3e:bc:fe:dc:67:40:3c: e6:6b:66:c8:42:b1:52:f3:2b:d4:8c:37:0e:0d:10:60:22:3c: 70:f8:f6:f1:d9:b4:3d:92:6a:15:29:7a:81:f7:cd:da:cd:1b: 1c:f9:37:52:2e:18:65:93:40:4f:dd:2b:21:e7:86:1e:e9:30: 40:42:10:d8:14:cc:14:c1:e2:61:7f:e7:94:9f:f1:be:37:5a: 4b:67:2a:cb:eb:ef:eb:75:d8:5b:e7:88:1d:b8:15:28:af:e1: 32:59:54:f5:3a:55:c0:cf:c6:37:07:90:c6:f1:5f:31:de:0e: 39:f4:16:f5:30:da:f3:ed:8b:69:d6:31:95:e2:82:53:08:e6: 37:5e:f9:c1:65:49:3b:7f:6c:97:15:ee:5b:87:58:be:23:56: 1c:ae:53:ae:42:55:2d:ac:2a:31:78:2e:f4:9d:c8:ef:4c:c4: 9d:54:54:4e:97:bd:bc:56:ae:34:e4:83:eb:dc:5b:f9:8e:e5: 00:df:b3:3b:54:1d:d6:46:18:1b:20:bb:de:26:fa:37:48:24: f0:16:f2:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL7GkpRxzeBN04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZTQ5MGVhZTgtYjFkYy00NWM5LTlmOWEtMTBmNDg1M2I5YTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZUH2A/AMrOzxMrDV4xaSflGZs3e/q2+n/uv A3uV12XPW6tUAiN5VEgspjHn1WRPiU+4UBlZdUC7yaxB+LfTf3wwo2X/AjsgAoIQ th81cQuDD2onykAjVeg1dAs38JAwwlFraiaeCHCp9Q1rdfoRP82R6M3UL7A15+wx mdBLPsirC34pum4SDYka2iE+wCY34PMQe51gzSSO06dsQ9ov04bwkjB8PHqoahmT 3RXWzhG6+8aCX7NWM7q+NDEn6nr+LjJeVZcwjWj9CGPwhDropiYq/7GiTwEzIih/ GO5Fu57xOre8uPptRGGMaNaUiQ/+MLnyeZlesLI6sW9RI5qMFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDydE2Ky2bZQ1cbkilpZyEBLIVC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNTczZjNlYmEtNjlmNy0z ZDE3LThkZGYtYmVjNDEwYWMxMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1mbQm6DMzwfAwq70j/1frVUwy6qzMkBS382mWMty4x66GPOUuJYvYX ua8a3RQpPrz+3GdAPOZrZshCsVLzK9SMNw4NEGAiPHD49vHZtD2SahUpeoH3zdrN Gxz5N1IuGGWTQE/dKyHnhh7pMEBCENgUzBTB4mF/55Sf8b43WktnKsvr7+t12Fvn iB24FSiv4TJZVPU6VcDPxjcHkMbxXzHeDjn0FvUw2vPti2nWMZXiglMI5jde+cFl STt/bJcV7luHWL4jVhyuU65CVS2sKjF4LvSdyO9MxJ1UVE6XvbxWrjTkg+vcW/mO 5QDfsztUHdZGGBsgu94m+jdIJPAW8ug= -----END CERTIFICATE-----Generated at Mon Oct 20 21:19:54 2025 by rpki-client