$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa File: 441364f7-b81f-3438-8e4e-5021ad9b611e.roa (raw, json) Hash identifier: plYm/FzLooBpVl+2lJTL16hSjZ2R2NkAUTz97RtKJiQ= Subject key identifier: 8A:84:46:CB:2F:0A:61:F7:9F:2C:50:44:90:CD:55:8C:5A:B0:AC:2F Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D651512503CEF439CDABB9400 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 399629 IP address blocks: 192.153.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:12:50:3c:ef:43:9c:da:bb:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=996c4847-60e6-49bd-aeae-4a2a8bd147af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:33:44:ab:a7:fe:79:e3:e2:46:cb:81:86: ab:b2:0e:c7:7a:4e:93:56:3f:55:ec:43:b9:a3:5a: d0:b3:74:fc:ca:d8:be:82:9e:eb:9e:a0:92:57:69: 73:9c:ae:63:dd:49:70:40:91:e9:f3:73:01:0e:9c: 8c:57:aa:22:40:a6:8f:b9:b1:72:d5:c7:99:6a:73: 1a:78:09:f0:45:88:bf:34:56:eb:0a:a7:b5:ae:cc: 38:f0:d9:ac:13:a1:ce:c7:42:1a:94:79:2b:d0:07: 55:1d:dc:5f:65:78:50:55:2a:81:f5:75:e6:b2:ff: cd:b4:bf:b4:90:b6:20:f9:fa:16:14:fd:ad:68:34: 7f:fe:d8:c1:3d:5f:ca:4e:47:c5:bd:31:71:f7:be: 55:f8:fe:77:25:a6:8e:90:27:fb:a9:b1:7c:22:33: 12:94:22:a8:2d:93:50:99:9e:f0:de:cd:46:0a:41: 8f:90:3c:ed:5a:a5:ad:89:7b:28:ab:85:a8:9b:b0: 10:0a:36:4b:bf:46:d6:c4:28:c7:0a:86:5a:ff:ea: 64:b6:6f:2b:b6:d1:f0:64:9f:37:b5:bf:59:f6:3d: ec:de:e6:19:eb:95:81:7e:59:6c:91:0e:f0:9d:d1: a6:ce:df:f9:61:01:93:a8:c9:46:2d:1d:8c:f4:79: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:84:46:CB:2F:0A:61:F7:9F:2C:50:44:90:CD:55:8C:5A:B0:AC:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 192.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:09:13:83:cf:ac:53:47:a9:73:5f:7d:6e:7c:4f:8c:c5:5a: 59:64:56:54:40:92:01:a8:85:10:49:ce:9a:ab:7f:ac:be:24: 3c:35:55:cc:25:01:5a:05:78:91:df:df:7e:a4:fa:ae:65:1c: c5:a9:d3:a8:1b:aa:4a:fe:20:e2:89:93:5d:63:d6:90:20:55: 40:dc:6f:d4:70:0e:69:99:ec:e1:00:0a:6e:04:07:cb:e0:e1: b8:d9:c9:5f:5e:35:a4:48:21:de:10:cb:2d:88:c0:7d:07:fa: 78:36:04:8d:49:94:d5:ce:75:35:8e:33:9d:54:8e:84:dc:e4: 3d:e0:56:e2:0c:19:b9:da:19:ac:96:2b:a6:2f:fb:06:39:f1: a5:68:ae:9f:6b:b2:b7:c6:50:22:4b:ee:df:88:e3:d5:78:af: df:6e:8c:52:de:fe:9c:6f:a1:5b:90:b2:b5:5b:52:5d:14:66: d0:67:a2:25:be:03:fc:6d:7d:e3:04:05:f2:b9:61:d5:33:36: d6:c9:f4:c7:f0:28:81:52:c5:60:86:10:ce:28:ab:7b:7d:05: 5b:e7:9a:7a:88:3d:c0:bc:33:ef:12:67:1c:f6:1b:06:39:47: 36:a2:53:47:cf:77:7d:6c:8e:ed:03:99:30:4a:1e:1a:2f:83: 56:29:b9:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRJQPO9DnNq7lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk OTk2YzQ4NDctNjBlNi00OWJkLWFlYWUtNGEyYThiZDE0N2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkozRKun/nnj4kbLgYarsg7Hek6TVj9V7EO5 o1rQs3T8yti+gp7rnqCSV2lznK5j3UlwQJHp83MBDpyMV6oiQKaPubFy1ceZanMa eAnwRYi/NFbrCqe1rsw48NmsE6HOx0IalHkr0AdVHdxfZXhQVSqB9XXmsv/NtL+0 kLYg+foWFP2taDR//tjBPV/KTkfFvTFx975V+P53JaaOkCf7qbF8IjMSlCKoLZNQ mZ7w3s1GCkGPkDztWqWtiXsoq4Wom7AQCjZLv0bWxCjHCoZa/+pktm8rttHwZJ83 tb9Z9j3s3uYZ65WBfllskQ7wndGmzt/5YQGTqMlGLR2M9HlJhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqERssvCmH3nyxQRJDNVYxasKwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDQxMzY0ZjctYjgxZi0z NDM4LThlNGUtNTAyMWFkOWI2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIJE4PPrFNHqXNffW58T4zFWllkVlRAkgGohRBJzpqrf6y+JDw1Vcwl AVoFeJHf336k+q5lHMWp06gbqkr+IOKJk11j1pAgVUDcb9RwDmmZ7OEACm4EB8vg 4bjZyV9eNaRIId4Qyy2IwH0H+ng2BI1JlNXOdTWOM51UjoTc5D3gVuIMGbnaGayW K6Yv+wY58aVorp9rsrfGUCJL7t+I49V4r99ujFLe/pxvoVuQsrVbUl0UZtBnoiW+ A/xtfeMEBfK5YdUzNtbJ9MfwKIFSxWCGEM4oq3t9BVvnmnqIPcC8M+8SZxz2GwY5 RzaiU0fPd31sju0DmTBKHhovg1YpuZA= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:03 2026 by rpki-client