$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa File: 5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa (raw, json) Hash identifier: FAb+kudWrya/J2uTZdnY8KKj/HFqKQfDAEaWVQeDNJc= Subject key identifier: 7B:A6:CD:CD:CD:D3:FC:DD:EC:4F:46:CB:04:41:75:3E:0A:5C:AD:2F Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584F4F081682D91C8A03AC8DC800 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 5645 IP address blocks: 198.48.128.0/17 maxlen: 17 198.48.128.0/19 maxlen: 19 198.48.160.0/21 maxlen: 21 198.48.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:16:82:d9:1c:8a:03:ac:8d:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=b94336bf-8110-478a-9661-52971c440b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:e9:a9:a8:70:d6:20:bc:57:aa:98:dd:d9: 1c:8b:19:81:37:50:6b:c0:84:33:69:4e:2a:2e:37: 9c:57:d5:1b:e0:3a:8a:01:04:5e:23:f7:e4:48:ed: 9f:98:7a:45:8e:1f:98:6a:c4:8f:b8:a5:d3:19:ec: be:c8:ec:5c:74:9f:80:24:0b:02:80:50:d4:c1:8e: 34:ae:e5:0f:43:1d:45:e0:ea:93:92:e2:25:6f:0b: 53:24:45:93:4b:31:73:76:b2:09:03:e9:e2:3e:f4: 67:d1:c7:c8:03:b6:58:f2:04:50:12:06:21:cc:29: dc:4f:f9:11:33:7a:1b:97:7d:3f:e0:6b:59:29:53: 6a:5d:74:89:5c:2e:a2:bc:73:27:49:0d:7d:99:86: 83:f2:ef:33:6c:04:3b:21:52:8b:6e:b9:36:96:e7: 80:da:70:56:3f:4c:5e:39:c7:0c:fd:8f:a6:88:1d: 40:a5:0f:fd:63:e7:76:aa:e8:86:2f:7f:ad:3d:79: 5c:8b:79:ad:29:4b:88:ad:a2:5b:8b:29:22:17:88: 63:27:be:0e:d6:43:47:c7:5f:2e:87:69:cb:b3:53: d7:a0:d4:58:63:bd:21:2c:71:28:7b:ae:6e:6b:65: 18:0c:14:d8:7d:e8:45:43:d3:dd:e3:65:da:6b:aa: 4d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A6:CD:CD:CD:D3:FC:DD:EC:4F:46:CB:04:41:75:3E:0A:5C:AD:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/5f3b0b12-7c6a-373a-a2f6-dbbfb9a5f4c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 198.48.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:3b:94:05:69:37:81:f7:92:19:e0:07:66:96:e5:23:34:a4: 53:91:30:ca:45:42:48:2f:5e:97:e3:b9:43:09:e0:60:72:b2: a1:a7:b7:b2:1a:43:51:a5:0f:f8:de:ed:e2:d8:a1:e2:d3:0e: 60:23:0a:ab:36:99:6d:73:9f:d0:3e:1f:e8:b3:7b:8a:a7:3c: 44:b4:42:6f:60:3e:d9:f1:77:0b:58:76:96:8c:0c:d0:ef:59: 7d:7d:69:6c:d8:a0:b5:5d:2e:0e:db:f4:5b:75:9e:b8:2e:fc: 26:25:8b:af:4b:e4:37:3c:2e:96:8c:86:1f:7f:a5:d7:36:df: 08:b5:c3:6b:09:d9:55:e2:f7:ba:6e:2d:42:74:9f:9c:fd:81: 61:41:a1:22:43:38:2b:c2:ec:6e:fa:67:35:08:74:42:05:04: 78:15:95:65:8d:2c:55:97:08:d0:e8:b8:80:ca:ec:10:bd:bf: 1d:56:2f:46:20:f0:b4:48:93:d6:4b:51:06:2d:fc:3d:c7:23: 08:65:ae:1a:a1:03:7b:27:3d:f4:91:59:1a:51:8d:73:ca:24: 69:c0:6a:1b:a6:77:2e:ba:30:5c:fc:d7:a3:b0:8f:6e:04:b3: 5f:bb:fa:81:e1:f1:47:4d:e1:93:d2:50:a9:e0:1f:ed:23:7c: a1:3d:9b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBaC2RyKA6yNyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk Yjk0MzM2YmYtODExMC00NzhhLTk2NjEtNTI5NzFjNDQwYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdXpqahw1iC8V6qY3dkcixmBN1BrwIQzaU4q LjecV9Ub4DqKAQReI/fkSO2fmHpFjh+YasSPuKXTGey+yOxcdJ+AJAsCgFDUwY40 ruUPQx1F4OqTkuIlbwtTJEWTSzFzdrIJA+niPvRn0cfIA7ZY8gRQEgYhzCncT/kR M3obl30/4GtZKVNqXXSJXC6ivHMnSQ19mYaD8u8zbAQ7IVKLbrk2lueA2nBWP0xe OccM/Y+miB1ApQ/9Y+d2quiGL3+tPXlci3mtKUuIraJbiykiF4hjJ74O1kNHx18u h2nLs1PXoNRYY70hLHEoe65ua2UYDBTYfehFQ9Pd42Xaa6pNWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHumzc3N0/zd7E9GywRBdT4KXK0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNWYzYjBiMTItN2M2YS0z NzNhLWEyZjYtZGJiZmI5YTVmNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxjCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANM7lAVpN4H3khngB2aW5SM0pFORMMpFQkgvXpfjuUMJ4GBysqGnt7Ia Q1GlD/je7eLYoeLTDmAjCqs2mW1zn9A+H+ize4qnPES0Qm9gPtnxdwtYdpaMDNDv WX19aWzYoLVdLg7b9Ft1nrgu/CYli69L5Dc8LpaMhh9/pdc23wi1w2sJ2VXi97pu LUJ0n5z9gWFBoSJDOCvC7G76ZzUIdEIFBHgVlWWNLFWXCNDouIDK7BC9vx1WL0Yg 8LRIk9ZLUQYt/D3HIwhlrhqhA3snPfSRWRpRjXPKJGnAahumdy66MFz816Owj24E s1+7+oHh8UdN4ZPSUKngH+0jfKE9m9M= -----END CERTIFICATE-----Generated at Sun Oct 4 08:41:58 2026 by rpki-client