$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa File: 441364f7-b81f-3438-8e4e-5021ad9b611e.roa (raw, json) Hash identifier: Se5N5tnaPNkGXkbuOG5TnSYBHXkJ7n6rSvKCVjPW4eU= Subject key identifier: DC:5C:A7:5B:53:03:9A:C8:35:D8:6E:D7:4D:1C:32:BA:8C:44:E2:83 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584EE7BCA3B177D70552425E4440 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 399629 IP address blocks: 192.153.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:a3:b1:77:d7:05:52:42:5e:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=ead0c51b-0cf9-474d-8a03-220ad87d4cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3a:e4:c1:d0:b5:f1:73:ce:26:71:c2:61:5b: e6:9d:af:ea:d6:04:2b:44:3e:d9:dd:d6:92:b9:bb: 35:6a:62:71:f5:b4:c9:6d:46:8d:b8:07:e1:78:a0: 30:9e:e6:43:e6:c9:17:33:52:79:fc:de:c2:95:97: a2:26:bb:f3:98:b6:0d:cd:b2:6a:97:bf:b0:51:1f: f6:4d:cb:03:3e:6c:31:bb:ab:35:d4:ff:56:77:f5: 1c:3e:fe:1b:bc:4c:01:e4:36:15:0f:dc:92:dd:31: f8:91:48:8f:ee:ad:66:d5:b3:15:b2:ee:58:cb:77: 3f:7e:bd:c3:e7:b2:cb:b1:3f:9e:40:e7:8e:0f:3e: e3:59:df:3e:48:f6:86:79:38:99:5b:ff:31:90:0a: 62:2c:80:70:3d:35:bf:d7:fb:a1:90:cb:98:fa:42: 2d:ab:a8:1b:22:df:09:52:1d:e1:b6:0c:59:81:2d: f4:04:65:85:b3:12:24:68:e6:05:ec:b9:64:20:78: b8:a1:09:0d:e8:da:df:88:04:a9:1d:3b:02:81:c9: 3a:5c:04:41:5e:98:44:dc:b4:dd:bd:7d:ce:66:df: 4a:23:2c:de:b8:27:81:b2:d8:f6:11:d5:65:de:b1: f9:6e:f4:91:9e:c5:72:bb:24:23:33:b5:25:fa:ee: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5C:A7:5B:53:03:9A:C8:35:D8:6E:D7:4D:1C:32:BA:8C:44:E2:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 192.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b0:3f:79:ec:24:69:a8:b5:14:95:c3:e0:aa:7c:b3:5a:97: a2:69:4b:dc:9e:d1:9b:01:06:b2:25:c0:f5:b8:73:f4:cf:dc: 3f:8d:da:f8:85:3a:24:02:8d:5f:c9:c9:54:82:7e:9b:42:b1: 31:23:7c:45:98:4f:72:7b:cb:1d:ef:c6:b9:8f:69:e0:cf:9d: 44:12:96:5e:35:84:51:81:1c:e1:9b:d1:e4:6e:1e:db:fc:f6: 7c:64:e8:ca:de:62:31:6e:d7:16:3f:41:dd:5a:f9:1b:91:c3: e3:ca:47:81:39:13:d5:ad:fd:32:4c:a8:70:03:22:e3:b1:3b: 86:5d:3d:76:5b:ec:f0:f6:de:37:fa:59:7c:a9:da:54:80:3d: ea:19:f7:ab:c6:50:cb:b4:5f:af:13:b8:9b:6b:9c:e6:5e:38: 73:89:07:72:b8:b1:e6:9a:44:d8:d6:3a:da:ea:29:c0:49:98: 98:1a:20:b4:ae:19:36:3f:cb:1c:97:87:1b:cc:e0:ee:b4:22: 62:08:55:90:c8:e8:f0:d9:56:9f:84:b2:18:87:d4:c8:73:4c: eb:27:bc:05:75:9b:46:44:a5:88:f6:9a:73:30:49:66:7e:85: 2d:17:00:32:49:ae:a3:c3:fe:2b:1a:6c:3f:62:6f:4a:73:00: 1e:73:6e:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKOxd9cFUkJeREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZWFkMGM1MWItMGNmOS00NzRkLThhMDMtMjIwYWQ4N2Q0Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTrkwdC18XPOJnHCYVvmna/q1gQrRD7Z3daS ubs1amJx9bTJbUaNuAfheKAwnuZD5skXM1J5/N7ClZeiJrvzmLYNzbJql7+wUR/2 TcsDPmwxu6s11P9Wd/UcPv4bvEwB5DYVD9yS3TH4kUiP7q1m1bMVsu5Yy3c/fr3D 57LLsT+eQOeODz7jWd8+SPaGeTiZW/8xkApiLIBwPTW/1/uhkMuY+kItq6gbIt8J Uh3htgxZgS30BGWFsxIkaOYF7LlkIHi4oQkN6NrfiASpHTsCgck6XARBXphE3LTd vX3OZt9KIyzeuCeBstj2EdVl3rH5bvSRnsVyuyQjM7Ul+u7G/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxcp1tTA5rINdhu100cMrqMROKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDQxMzY0ZjctYjgxZi0z NDM4LThlNGUtNTAyMWFkOWI2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOwP3nsJGmotRSVw+CqfLNal6JpS9ye0ZsBBrIlwPW4c/TP3D+N2viF OiQCjV/JyVSCfptCsTEjfEWYT3J7yx3vxrmPaeDPnUQSll41hFGBHOGb0eRuHtv8 9nxk6MreYjFu1xY/Qd1a+RuRw+PKR4E5E9Wt/TJMqHADIuOxO4ZdPXZb7PD23jf6 WXyp2lSAPeoZ96vGUMu0X68TuJtrnOZeOHOJB3K4seaaRNjWOtrqKcBJmJgaILSu GTY/yxyXhxvM4O60ImIIVZDI6PDZVp+EshiH1MhzTOsnvAV1m0ZEpYj2mnMwSWZ+ hS0XADJJrqPD/isabD9ib0pzAB5zbps= -----END CERTIFICATE-----Generated at Fri Sep 25 09:37:29 2026 by rpki-client