$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/687faca5-0e52-3d30-8990-878524cd4035.roa File: 687faca5-0e52-3d30-8990-878524cd4035.roa (raw, json) Hash identifier: xEMvM45NWUxzJL/U0WZIBsBaaHhk31L2peUBf8rm4GM= Subject key identifier: B9:AD:82:B7:47:37:64:94:CA:66:C4:78:39:C6:43:E4:76:54:70:48 Certificate issuer: /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291 Certificate serial: 010D0C9F4328584CD13CA5748110D29A5A1C2300 Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/687faca5-0e52-3d30-8990-878524cd4035.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 399898 IP address blocks: 24.149.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:a5:74:81:10:d2:9a:5a:1c:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291 Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=a0a95e4e-09f7-4ac5-b43b-f13191202bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:85:9b:74:11:ec:5f:5e:49:f7:be:53:c5: b3:64:05:8a:34:42:b0:5c:aa:9e:55:bf:13:8c:77: 07:2f:54:0c:6b:f6:c7:95:dd:a8:59:75:08:4c:34: 76:2f:31:f5:cb:9c:78:ca:61:33:25:83:44:76:96: 9c:9e:d1:b5:4c:92:79:77:74:97:fc:d7:4d:39:06: 52:19:6c:d6:14:45:ed:6d:1c:4c:0f:6f:75:47:1a: 67:09:aa:6c:29:56:ab:19:ee:45:4c:31:62:8c:4b: 2d:de:72:f2:a6:a1:ce:59:75:6a:6f:8d:f6:79:ae: 53:0e:88:b3:a2:34:09:3d:08:82:20:49:69:5f:40: c3:b5:8f:48:40:13:8d:c9:d3:d6:39:5c:33:c6:3c: 00:39:f2:d3:a8:a7:c3:b3:c7:60:57:2c:f1:be:7d: 61:bd:12:f8:3d:c7:6d:95:65:b9:e3:00:b6:87:6e: f8:99:75:32:28:75:24:fb:39:32:86:dd:56:d4:c9: e8:ab:c8:03:48:cb:e7:d7:e3:97:71:4f:40:18:dd: d8:aa:8c:85:ad:30:89:5d:2c:67:8c:9e:95:be:0b: f8:0e:00:98:e1:18:b0:cd:c4:d9:6b:52:74:98:f9: aa:ae:ed:f2:4f:72:b2:7b:27:38:49:56:26:b6:37: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AD:82:B7:47:37:64:94:CA:66:C4:78:39:C6:43:E4:76:54:70:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/687faca5-0e52-3d30-8990-878524cd4035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl X509v3 Authority Key Identifier: keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer sbgp-ipAddrBlock: critical IPv4: 24.149.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:57:2b:db:04:bd:9c:f7:1c:2b:8e:a6:9c:92:6c:27:d4:6b: 69:31:3a:1d:0c:59:43:5d:89:0b:0b:6e:93:f9:4e:05:81:19: bf:37:6e:56:35:00:62:e5:bf:42:c6:4b:2f:a6:02:1c:34:d6: ba:2f:a5:a1:10:b7:7d:bb:61:73:ea:8c:44:27:51:87:a6:a5: f9:d4:f8:21:2c:e9:6d:1e:01:b5:3a:51:b7:36:23:2e:9b:04: c6:64:3b:f2:2f:8d:46:55:5b:6a:0f:4f:11:b7:9b:a1:f4:07: 53:ad:07:93:3f:83:54:52:6d:e3:c6:bb:e7:35:69:6d:55:cf: e4:f9:2f:10:4b:b3:7d:fa:43:7e:88:39:80:0f:7d:bc:54:7f: 3f:a0:86:e8:6c:6e:b9:d2:f6:fa:1f:5f:50:f3:e6:7e:3d:d2: b7:b1:4e:b8:0b:fa:44:55:0d:a9:7c:5e:85:f4:00:71:4a:9f: 67:aa:cf:16:a4:fc:37:54:58:af:11:d6:be:0f:3b:53:bf:e9: 87:c8:8c:13:9d:92:39:83:44:dd:8e:a1:e8:24:97:b8:4f:11: 4b:0d:cd:4b:50:aa:7e:da:48:3f:3a:b0:24:d2:ad:30:dc:64: 13:cf:36:1a:89:cf:23:70:58:5d:8a:8f:c7:42:2d:a0:0f:2a: d2:41:67:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPKV0gRDSmlocIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyZjFkMjMtMmM0Yy00ZWY1LWJhYjEtNTU5ZGNiNDkx MjkxMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk YTBhOTVlNGUtMDlmNy00YWM1LWI0M2ItZjEzMTkxMjAyYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7mFm3QR7F9eSfe+U8WzZAWKNEKwXKqeVb8T jHcHL1QMa/bHld2oWXUITDR2LzH1y5x4ymEzJYNEdpacntG1TJJ5d3SX/NdNOQZS GWzWFEXtbRxMD291RxpnCapsKVarGe5FTDFijEst3nLypqHOWXVqb432ea5TDoiz ojQJPQiCIElpX0DDtY9IQBONydPWOVwzxjwAOfLTqKfDs8dgVyzxvn1hvRL4Pcdt lWW54wC2h274mXUyKHUk+zkyht1W1Mnoq8gDSMvn1+OXcU9AGN3YqoyFrTCJXSxn jJ6Vvgv4DgCY4RiwzcTZa1J0mPmqru3yT3Kyeyc4SVYmtjea8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmtgrdHN2SUymbEeDnGQ+R2VHBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJm MWQyMy0yYzRjLTRlZjUtYmFiMS01NTlkY2I0OTEyOTEvNjg3ZmFjYTUtMGU1Mi0z ZDMwLTg5OTAtODc4NTI0Y2Q0MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjMyZjFkMjMtMmM0Yy00ZWY1LWJh YjEtNTU5ZGNiNDkxMjkxL2YzMmYxZDIzLTJjNGMtNGVmNS1iYWIxLTU1OWRjYjQ5 MTI5MS5jcmwwHwYDVR0jBBgwFoAUwO8qm2fyW3+QCH6t3QSVwKfX1PcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJmMWQyMy0yYzRjLTRlZjUtYmFiMS01NTlk Y2I0OTEyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZXK9sEvZz3HCuOppySbCfUa2kxOh0MWUNdiQsLbpP5TgWBGb83blY1 AGLlv0LGSy+mAhw01rovpaEQt327YXPqjEQnUYempfnU+CEs6W0eAbU6Ubc2Iy6b BMZkO/IvjUZVW2oPTxG3m6H0B1OtB5M/g1RSbePGu+c1aW1Vz+T5LxBLs336Q36I OYAPfbxUfz+ghuhsbrnS9vofX1Dz5n490rexTrgL+kRVDal8XoX0AHFKn2eqzxak /DdUWK8R1r4PO1O/6YfIjBOdkjmDRN2Ooegkl7hPEUsNzUtQqn7aSD86sCTSrTDc ZBPPNhqJzyNwWF2Kj8dCLaAPKtJBZ98= -----END CERTIFICATE-----Generated at Mon Mar 2 14:30:54 2026 by rpki-client