$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa File: 9767f7aa-c0a5-39f6-9881-91a15c53e053.roa (raw, json) Hash identifier: +PdmOJPxy/LgF1AvfltjDKngyRmsWinv79byWO+oXCk= Subject key identifier: E2:16:41:EC:A4:6F:09:83:E0:61:1F:97:BA:82:53:C9:48:DA:D0:2D Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584E18AEF30077B98D32498A7E40 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 5645 IP address blocks: 24.212.128.0/17 maxlen: 17 24.212.240.0/21 maxlen: 21 24.212.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:f3:00:77:b9:8d:32:49:8a:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=d616bda2-3751-4dfc-afda-df0d99dd9c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:af:b3:42:13:cd:87:be:de:14:3a:9d:cb:b2: 7c:12:d0:ea:20:9b:da:7a:56:e1:ca:8d:57:9a:b7: f1:e0:7d:82:89:f3:1e:e0:56:c9:8d:ef:f5:cb:43: 50:ff:e0:03:38:57:9a:ca:37:f4:f0:69:08:e7:bc: 19:a5:8e:b2:8f:dd:05:7f:04:ca:61:aa:e3:65:d8: 29:25:82:db:9f:ca:28:ce:26:42:49:bf:a5:28:2d: 26:65:6f:ce:4d:a7:57:33:b9:86:d7:4a:99:dc:83: 02:a0:52:7b:1d:df:bf:c9:ed:0c:af:db:73:89:0b: 5e:13:0b:fe:ef:68:6c:20:47:63:cf:39:67:ff:a9: c2:11:f1:fe:42:22:8c:1b:68:66:de:42:1e:0b:c4: 5f:c6:f3:76:de:79:20:1b:0c:1c:e4:05:3b:f8:be: 8f:8b:8a:96:07:db:1b:05:75:a0:e9:a4:75:c1:ce: 60:88:99:54:70:fb:93:5f:24:a4:9e:fe:47:a9:38: dc:75:8b:0c:33:2b:61:f3:47:c3:89:78:f3:a4:4b: 4c:f2:2c:65:ea:32:e2:b7:35:8b:44:f2:3a:83:78: 29:ca:60:76:3f:01:f5:d5:4d:34:08:31:46:42:d8: f0:98:bd:70:3c:e0:cd:e8:58:b9:33:27:b9:62:97: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:16:41:EC:A4:6F:09:83:E0:61:1F:97:BA:82:53:C9:48:DA:D0:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/9767f7aa-c0a5-39f6-9881-91a15c53e053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 24.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:27:8d:59:ed:f8:c2:a3:86:cc:61:1d:13:3f:2c:62:2b:92: 5d:98:ce:8d:be:79:52:6f:f2:0a:ca:6c:d4:30:30:c1:14:8a: 86:83:a4:f8:b1:78:db:76:90:11:1c:48:80:6d:91:5d:0a:df: 3e:bb:bc:9c:32:57:6b:16:3b:78:f9:7a:78:e6:89:1b:e7:06: 05:4b:8e:e9:ae:9e:21:d9:c7:68:15:ba:14:bc:a7:ba:80:0f: d6:af:73:58:8f:51:2e:75:f3:79:2e:f8:01:12:67:71:0c:75: 5f:f8:25:2b:f9:14:c0:59:d7:87:c0:a4:09:22:4d:24:84:13: 21:6b:89:5e:66:2e:cb:63:0d:8c:e3:2a:c2:18:20:d0:be:60: 80:96:06:c4:0f:a6:f0:8d:80:67:0f:84:3f:d5:6c:25:37:4e: d1:c8:03:e0:9f:17:7a:dc:2f:71:e9:7c:59:f1:95:65:74:4d: fb:02:67:7e:b8:c2:d7:b7:ad:f5:32:8f:ca:af:8c:c2:ea:bf: 6c:be:b9:dc:7c:3a:70:70:6a:00:e3:dd:f1:8d:41:d3:31:6c: 25:01:b2:9d:c6:5c:89:3b:40:24:2b:0d:99:1e:f5:31:fd:c5: 26:b4:94:b1:e6:40:cd:3b:4c:aa:f1:e3:d4:a7:e7:9b:bd:69: a5:21:d8:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrvMAd7mNMkmKfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk ZDYxNmJkYTItMzc1MS00ZGZjLWFmZGEtZGYwZDk5ZGQ5YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q+zQhPNh77eFDqdy7J8EtDqIJvaelbhyo1X mrfx4H2CifMe4FbJje/1y0NQ/+ADOFeayjf08GkI57wZpY6yj90FfwTKYarjZdgp JYLbn8ooziZCSb+lKC0mZW/OTadXM7mG10qZ3IMCoFJ7Hd+/ye0Mr9tziQteEwv+ 72hsIEdjzzln/6nCEfH+QiKMG2hm3kIeC8RfxvN23nkgGwwc5AU7+L6Pi4qWB9sb BXWg6aR1wc5giJlUcPuTXySknv5HqTjcdYsMMyth80fDiXjzpEtM8ixl6jLitzWL RPI6g3gpymB2PwH11U00CDFGQtjwmL1wPODN6Fi5Mye5YpfHLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIWQeykbwmD4GEfl7qCU8lI2tAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvOTc2N2Y3YWEtYzBhNS0z OWY2LTk4ODEtOTFhMTVjNTNlMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGNSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4njVnt+MKjhsxhHRM/LGIrkl2Yzo2+eVJv8grKbNQwMMEUioaDpPix eNt2kBEcSIBtkV0K3z67vJwyV2sWO3j5enjmiRvnBgVLjumuniHZx2gVuhS8p7qA D9avc1iPUS5183ku+AESZ3EMdV/4JSv5FMBZ14fApAkiTSSEEyFriV5mLstjDYzj KsIYINC+YICWBsQPpvCNgGcPhD/VbCU3TtHIA+CfF3rcL3HpfFnxlWV0TfsCZ364 wte3rfUyj8qvjMLqv2y+udx8OnBwagDj3fGNQdMxbCUBsp3GXIk7QCQrDZke9TH9 xSa0lLHmQM07TKrx49Sn55u9aaUh2HM= -----END CERTIFICATE-----Generated at Sun Jun 14 02:54:01 2026 by rpki-client