$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa File: 9767f7aa-c0a5-39f6-9881-91a15c53e053.roa (raw, json) Hash identifier: YXp6pzQx113ErL+IURRwDlkH3h1eODiXSXjkApYVsBM= Subject key identifier: A9:00:BD:41:2E:B8:39:FB:18:85:03:AF:0C:41:56:F3:30:E5:1B:92 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584F5E62C5A5CFDD44A869C5FF00 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 5645 IP address blocks: 24.212.128.0/17 maxlen: 17 24.212.240.0/21 maxlen: 21 24.212.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c5:a5:cf:dd:44:a8:69:c5:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=3a05e12a-1f72-4586-90da-3d5fcc9ad15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:71:92:00:6c:cb:af:b8:47:35:79:2b:1c:61: c0:91:7f:58:8d:e5:81:e5:8a:e7:c8:0a:03:4a:00: bd:f8:c5:cb:92:dd:4c:10:c4:f5:fc:5c:c2:ff:d1: 38:9d:48:83:38:81:94:ad:96:ed:1b:8f:7a:38:98: 21:2e:0c:5b:65:a8:5a:1b:3a:4d:5e:b9:df:79:a7: 50:43:17:cf:ab:44:81:14:44:1e:c0:1d:17:13:a2: 48:b4:40:00:30:66:3f:03:18:0f:12:4e:a0:b9:45: e5:aa:8a:6b:51:5b:e1:8b:9e:51:d3:d6:cf:88:8b: fb:5c:11:29:cd:d0:ad:fb:2e:90:b0:97:2d:09:86: 17:c6:0c:fe:ba:38:38:25:56:76:16:3e:05:ac:f4: b0:d9:00:d8:e1:c3:76:3b:61:d0:79:94:3a:1d:e7: 23:37:9a:a2:d1:db:4c:4c:f7:40:86:35:22:66:d2: d6:17:ef:3d:55:cd:7f:be:03:14:27:f2:8f:61:f8: 9d:47:e8:a7:9a:af:f3:76:05:5e:cb:b4:17:f0:34: db:f5:6d:9f:94:6e:3d:94:be:ba:b4:ee:73:cb:4d: 94:17:74:eb:a9:c1:89:be:5f:11:a7:bf:9c:30:a6: d9:1f:ae:9f:a1:85:4e:71:94:58:10:0c:44:7e:5d: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:00:BD:41:2E:B8:39:FB:18:85:03:AF:0C:41:56:F3:30:E5:1B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 24.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:fa:b6:1f:ce:04:14:be:36:47:44:49:6b:27:e3:0a:2e:93: 35:eb:dc:a1:33:90:81:52:bc:74:41:0c:3c:07:8f:b3:44:4f: 2f:64:73:55:e6:73:2b:27:92:ba:5a:1c:4e:0a:98:95:40:0b: b3:1b:d2:56:3c:48:ee:49:a3:bd:d7:d3:ff:6e:2c:ac:6b:1d: 04:d6:31:98:be:a3:fe:e5:70:36:7f:fe:6d:9d:a5:04:ef:8a: 5b:aa:16:06:d7:05:4e:b3:c3:96:22:21:08:0a:1e:6b:34:90: f0:14:72:bf:fd:fa:f4:d8:af:44:6b:a4:aa:d7:18:55:23:d8: 9d:c1:92:ea:ca:27:e3:26:ac:56:78:78:a1:5d:78:ca:ea:04: a2:4d:de:12:30:de:af:88:a9:2d:77:ef:cf:5e:05:d9:52:e7: 05:43:65:ab:ab:1e:63:56:2e:08:ae:c9:cc:9d:09:aa:04:f1: 75:f5:ac:2f:10:10:e9:92:9e:89:23:55:e8:e8:7c:07:46:cc: c6:e8:2b:6c:8e:11:56:00:cb:b4:4a:5e:b9:e1:ce:e7:fb:96: 14:75:70:1a:4e:ba:dd:92:ab:74:8e:c6:e6:04:b3:25:56:2c: 0e:0c:23:52:4f:c5:f3:0c:b2:6d:f6:c2:40:62:52:46:46:a5: 48:c1:44:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsWlz91EqGnF/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk M2EwNWUxMmEtMWY3Mi00NTg2LTkwZGEtM2Q1ZmNjOWFkMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03GSAGzLr7hHNXkrHGHAkX9YjeWB5YrnyAoD SgC9+MXLkt1MEMT1/FzC/9E4nUiDOIGUrZbtG496OJghLgxbZahaGzpNXrnfeadQ QxfPq0SBFEQewB0XE6JItEAAMGY/AxgPEk6guUXlqoprUVvhi55R09bPiIv7XBEp zdCt+y6QsJctCYYXxgz+ujg4JVZ2Fj4FrPSw2QDY4cN2O2HQeZQ6HecjN5qi0dtM TPdAhjUiZtLWF+89Vc1/vgMUJ/KPYfidR+inmq/zdgVey7QX8DTb9W2flG49lL66 tO5zy02UF3TrqcGJvl8Rp7+cMKbZH66foYVOcZRYEAxEfl1m8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkAvUEuuDn7GIUDrwxBVvMw5RuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvOTc2N2Y3YWEtYzBhNS0z OWY2LTk4ODEtOTFhMTVjNTNlMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGNSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj6th/OBBS+NkdESWsn4woukzXr3KEzkIFSvHRBDDwHj7NETy9kc1Xm cysnkrpaHE4KmJVAC7Mb0lY8SO5Jo73X0/9uLKxrHQTWMZi+o/7lcDZ//m2dpQTv iluqFgbXBU6zw5YiIQgKHms0kPAUcr/9+vTYr0RrpKrXGFUj2J3BkurKJ+MmrFZ4 eKFdeMrqBKJN3hIw3q+IqS13789eBdlS5wVDZaurHmNWLgiuycydCaoE8XX1rC8Q EOmSnokjVejofAdGzMboK2yOEVYAy7RKXrnhzuf7lhR1cBpOut2Sq3SOxuYEsyVW LA4MI1JPxfMMsm32wkBiUkZGpUjBRFw= -----END CERTIFICATE-----Generated at Sun Oct 11 19:06:32 2026 by rpki-client