$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa File: 28664a9a-e120-3701-b0b7-b5858658be81.roa (raw, json) Hash identifier: aMdqBBKc9tevNJ0oxGFNDJXJ3XEwJ/5o4VepL1m3U3w= Subject key identifier: 80:2D:CC:8A:BB:CC:2D:6B:B6:09:EA:0A:4E:DC:F1:96:F3:BF:65:81 Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F4328584D75D5262CE08EB346F75696E0 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 14618 IP address blocks: 52.144.58.0/24 maxlen: 24 168.245.151.0/24 maxlen: 24 192.139.134.0/24 maxlen: 24 199.19.89.0/24 maxlen: 24 199.19.90.0/24 maxlen: 24 199.19.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:26:2c:e0:8e:b3:46:f7:56:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=30fb7a56-bfd9-4abd-b588-9c1f67684d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b9:f9:13:41:5f:40:1f:5e:3a:d5:8a:7d:0e: 2b:f4:db:13:bb:a8:90:61:46:f0:e3:d6:26:5a:a9: 29:67:f6:f0:17:a1:e3:f2:a7:62:72:ed:da:c2:ce: 0d:fe:3c:1e:1f:24:fd:ff:13:93:c0:a9:04:44:da: 97:39:84:14:3b:b8:16:39:7d:a2:09:78:70:ff:f0: 13:61:3e:fc:f9:7d:52:bf:2b:f8:ed:1f:40:22:2e: c1:1a:f5:e9:10:08:49:97:51:49:53:19:5b:0c:57: cc:12:0a:5f:24:fb:11:f7:82:e3:43:eb:35:93:f2: ab:91:bb:89:f3:0f:e3:66:69:cb:ae:7d:9a:fa:6d: 8d:45:aa:0c:d5:87:34:21:7a:d8:dc:8c:57:97:95: 8a:b5:d5:73:e6:03:e8:ca:a5:a4:f6:c4:24:b2:dd: f2:27:77:ee:d1:e0:3c:68:9d:7f:dd:5b:cf:c0:bb: 93:f0:2a:a7:94:fc:16:42:a8:2b:0a:62:ff:50:46: 5f:52:26:52:56:0a:35:31:41:49:fb:c8:be:96:26: 2b:bd:d7:5a:b4:4c:e6:29:68:b1:f6:4a:70:8c:e2: 9b:53:27:f1:e5:9c:92:c4:e4:57:51:84:a0:46:4d: 8a:74:85:ec:da:37:b5:29:d9:a2:32:b4:a7:c4:a0: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2D:CC:8A:BB:CC:2D:6B:B6:09:EA:0A:4E:DC:F1:96:F3:BF:65:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 52.144.58.0/24 168.245.151.0/24 192.139.134.0/24 199.19.89.0-199.19.91.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:77:13:28:e5:59:a6:ab:0e:07:30:0c:df:c0:ed:26:8d:dd: b0:7d:bd:1e:76:58:f8:54:0c:f0:eb:df:0a:6a:0b:de:77:a8: 45:7a:13:6d:b4:fb:b1:6a:1e:12:81:cb:9f:28:ef:4e:5d:d6: 51:41:39:0f:c1:64:7e:c4:68:af:f6:8b:dd:89:a7:29:b0:9f: 53:d4:69:84:84:9e:95:da:8c:b3:08:d1:98:ef:f5:8d:21:97: fd:a5:cb:40:69:81:57:74:b9:e5:54:40:d8:f5:92:04:bd:b9: 7f:93:9d:02:9a:d0:e3:e0:51:50:dc:02:de:d2:03:1c:02:06: 3c:d2:db:ff:05:ae:12:a5:a1:86:bf:30:a5:56:4d:96:7a:91: 06:fb:8a:74:a8:53:14:11:ab:07:42:a0:5f:0d:bc:f4:ad:36: a4:c0:16:bf:4a:2e:a1:49:f0:75:c0:b0:54:90:86:5c:c8:bc: bb:26:67:59:4d:af:e6:07:d2:e9:a8:d9:aa:b7:2a:87:85:12: c1:7b:df:a0:63:21:b8:6f:09:93:db:00:f9:c2:0b:f4:26:05: 67:4f:b0:19:5c:79:e2:87:1b:56:91:05:a7:fb:80:55:be:15: 15:51:6a:08:ee:e5:ff:ea:ce:ee:d2:6c:62:fa:b8:6a:11:7e: 2f:c3:98:62 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE111SYs4I6zRvdWluAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk MzBmYjdhNTYtYmZkOS00YWJkLWI1ODgtOWMxZjY3Njg0ZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLn5E0FfQB9eOtWKfQ4r9NsTu6iQYUbw49Ym WqkpZ/bwF6Hj8qdicu3aws4N/jweHyT9/xOTwKkERNqXOYQUO7gWOX2iCXhw//AT YT78+X1Svyv47R9AIi7BGvXpEAhJl1FJUxlbDFfMEgpfJPsR94LjQ+s1k/KrkbuJ 8w/jZmnLrn2a+m2NRaoM1Yc0IXrY3IxXl5WKtdVz5gPoyqWk9sQkst3yJ3fu0eA8 aJ1/3VvPwLuT8CqnlPwWQqgrCmL/UEZfUiZSVgo1MUFJ+8i+liYrvddatEzmKWix 9kpwjOKbUyfx5ZySxORXUYSgRk2KdIXs2je1KdmiMrSnxKDwTwIDAQABo4IDbzCC A2swHQYDVR0OBBYEFIAtzIq7zC1rtgnqCk7c8Zbzv2WBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvMjg2NjRhOWEtZTEyMC0z NzAxLWIwYjctYjU4NTg2NThiZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQANJA6AwQA qPWXAwQAwIuGMAwDBADHE1kDBALHE1gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbXcTKOVZpqsOBzAM38Dt Jo3dsH29HnZY+FQM8OvfCmoL3neoRXoTbbT7sWoeEoHLnyjvTl3WUUE5D8FkfsRo r/aL3YmnKbCfU9RphISeldqMswjRmO/1jSGX/aXLQGmBV3S55VRA2PWSBL25f5Od AprQ4+BRUNwC3tIDHAIGPNLb/wWuEqWhhr8wpVZNlnqRBvuKdKhTFBGrB0KgXw28 9K02pMAWv0ouoUnwdcCwVJCGXMi8uyZnWU2v5gfS6ajZqrcqh4USwXvfoGMhuG8J k9sA+cIL9CYFZ0+wGVx54ocbVpEFp/uAVb4VFVFqCO7l/+rO7tJsYvq4ahF+L8OY Yg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:43:52 2026 by rpki-client