$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa File: ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa (raw, json) Hash identifier: ouxv++r5AK+kU/diYtq2Yr+tDshfSh3KzhLfwf0SmXc= Subject key identifier: A4:A1:66:11:80:06:70:58:2F:1E:E2:19:25:9F:60:36:DB:4F:F1:F3 Certificate issuer: /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d Certificate serial: 010D0C9F4328584CA5F7096237A13B634B3964C0 Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 212.32.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:09:62:37:a1:3b:63:4b:39:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=11d3fd56-0f8a-49c2-a039-5ce8bb847ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:76:87:05:57:3b:4d:d1:4d:cc:67:6b:57: cc:16:af:a6:ae:b3:05:54:bc:28:e7:b7:31:55:d3: 76:3b:21:4d:3d:70:46:a3:55:77:57:f4:2d:ac:70: 62:47:1b:eb:55:e2:4b:ab:d3:16:e4:fa:de:04:43: 5e:90:bb:b5:e7:0d:50:75:78:b9:fe:af:9f:6d:ef: da:e9:da:0d:a7:4d:05:52:bb:13:b0:3a:a3:52:e8: bc:b3:c9:03:f7:6b:80:a6:1b:f6:1a:99:f5:e9:a6: 2b:2c:a2:ab:2b:b3:ca:b8:fc:54:7a:96:00:93:9e: df:6f:c5:5b:2a:07:6e:d1:4d:c8:ab:d1:d0:d1:44: df:48:1e:a8:7b:65:37:e6:98:f4:55:99:e8:ba:7b: 85:20:9f:db:7a:b2:da:3a:b0:cd:0a:5b:fa:3e:4b: 33:b7:b1:b0:a0:2c:9e:75:30:ea:33:b3:25:21:80: 08:13:6a:2f:70:eb:7e:d5:2c:82:01:08:75:da:75: 22:44:c2:44:92:d4:c3:3b:58:fd:02:7b:ba:66:93: 41:e2:15:34:e8:bf:44:aa:0c:d0:55:d4:2d:d7:5c: a9:f1:87:c7:25:db:ef:ba:a0:3d:90:1a:66:56:b3: 64:d1:4c:90:90:3a:01:95:5c:cd:b6:ae:88:3e:84: 96:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A1:66:11:80:06:70:58:2F:1E:E2:19:25:9F:60:36:DB:4F:F1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl X509v3 Authority Key Identifier: keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer sbgp-ipAddrBlock: critical IPv4: 212.32.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4a:60:d1:c1:08:79:61:21:2b:7d:36:2b:24:a5:83:f2:d1: 37:cf:ce:38:65:05:e8:86:c8:d8:bc:e7:2b:b8:cb:f6:47:28: 38:0b:a0:8a:f2:9e:23:aa:8c:c7:ba:5b:e5:b1:08:ab:55:39: 48:66:2a:05:b4:2d:c7:96:7b:80:e1:97:8d:d7:3b:c2:71:7f: 00:a6:43:6c:af:48:8b:a6:37:91:2a:3e:13:ee:b6:32:3e:3b: 09:12:a9:bf:ce:2e:5b:45:4a:b9:d9:a6:3e:70:2f:03:67:db: 08:a3:af:ee:d3:ca:70:25:1b:59:da:83:3e:a8:f5:40:79:6f: 3c:8f:da:ed:cb:2e:0a:05:c4:61:de:a8:65:0a:3c:f0:7e:e8: 53:ec:74:3d:99:3d:c7:b8:59:6b:48:fe:eb:88:93:34:8f:9b: a7:f0:be:1b:75:3f:14:47:ba:8c:02:91:09:f2:2c:bf:8f:16: 53:aa:ce:86:d1:aa:d2:c5:da:15:9e:1a:81:e1:04:d7:2d:c1: ab:11:30:71:12:93:ca:fe:35:aa:2e:6a:d2:cf:40:04:e6:98: ef:71:09:1b:48:f1:9e:f3:6b:0c:84:1d:48:35:51:43:55:44: 92:a2:08:db:e0:71:15:cb:b0:ed:e9:20:01:29:d1:45:bb:c4: 9d:15:03:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wliN6E7Y0s5ZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4NTI2ZDUtMmFhMi00ZDJmLThjYjEtNWM0MTc3Mjhh OTdkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MTFkM2ZkNTYtMGY4YS00OWMyLWEwMzktNWNlOGJiODQ3YWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+12hwVXO03RTcxna1fMFq+mrrMFVLwo57cx VdN2OyFNPXBGo1V3V/QtrHBiRxvrVeJLq9MW5PreBENekLu15w1QdXi5/q+fbe/a 6doNp00FUrsTsDqjUui8s8kD92uAphv2Gpn16aYrLKKrK7PKuPxUepYAk57fb8Vb Kgdu0U3Iq9HQ0UTfSB6oe2U35pj0VZnounuFIJ/berLaOrDNClv6Pkszt7GwoCye dTDqM7MlIYAIE2ovcOt+1SyCAQh12nUiRMJEktTDO1j9Anu6ZpNB4hU06L9EqgzQ VdQt11yp8YfHJdvvuqA9kBpmVrNk0UyQkDoBlVzNtq6IPoSWvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKShZhGABnBYLx7iGSWfYDbbT/HzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MTg1 MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQxNzcyOGE5N2QvY2E4Y2QyZjgtNzFmOC0z NTEwLWI5MGQtY2RhYmM5ZDhjYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDE4NTI2ZDUtMmFhMi00ZDJmLThj YjEtNWM0MTc3MjhhOTdkLzQxODUyNmQ1LTJhYTItNGQyZi04Y2IxLTVjNDE3NzI4 YTk3ZC5jcmwwHwYDVR0jBBgwFoAUiiN/rn53wAJd+TDx/Eb8Xh6ECRIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MTg1MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQx NzcyOGE5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1CAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFKYNHBCHlhISt9NiskpYPy0TfPzjhlBeiGyNi85yu4y/ZHKDgLoIry niOqjMe6W+WxCKtVOUhmKgW0LceWe4Dhl43XO8JxfwCmQ2yvSIumN5EqPhPutjI+ OwkSqb/OLltFSrnZpj5wLwNn2wijr+7TynAlG1nagz6o9UB5bzyP2u3LLgoFxGHe qGUKPPB+6FPsdD2ZPce4WWtI/uuIkzSPm6fwvht1PxRHuowCkQnyLL+PFlOqzobR qtLF2hWeGoHhBNctwasRMHESk8r+NaouatLPQATmmO9xCRtI8Z7zawyEHUg1UUNV RJKiCNvgcRXLsO3pIAEp0UW7xJ0VA0Y= -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:49 2026 by rpki-client