$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3235322e302f32322d3234203d3e20383334.roa File: 32332e38382e3235322e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: ShpxheWt2VOqhzHuvA8AtCKRbnNLblelFGLCP/s08BM= Subject key identifier: 64:D5:14:B8:4D:D7:06:18:C7:69:9D:DD:7F:60:A2:A6:7D:E5:E7:B7 Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 02D497FDD845457C5D6A8ECB1CCE76E46AED594B Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3235322e302f32322d3234203d3e20383334.roa Signing time: Fri 30 Oct 2026 11:58:18 +0000 ROA not before: Fri 30 Oct 2026 11:53:18 +0000 ROA not after: Fri 29 Oct 2027 11:58:18 +0000 asID: 834 IP address blocks: 23.88.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 13:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d4:97:fd:d8:45:45:7c:5d:6a:8e:cb:1c:ce:76:e4:6a:ed:59:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Oct 30 11:53:18 2026 GMT Not After : Oct 29 11:58:18 2027 GMT Subject: CN=64D514B84DD70618C7699DDD7F60A2A67DE5E7B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9e:19:d7:69:f3:43:86:02:8e:7f:b8:29:ac: 0f:60:2c:3b:cc:ad:77:08:30:1f:27:2f:3a:28:55: 48:fd:34:fa:9a:f7:93:67:02:d7:f6:33:12:2a:9d: ba:66:13:f0:a7:0a:f5:42:60:1e:8f:fb:5f:3b:3e: cd:2d:8f:d9:75:9b:01:36:60:dc:aa:c0:bd:30:3e: f1:a8:55:2f:e9:46:b9:e0:91:fc:7e:56:49:c0:a6: 65:e9:8a:09:92:53:9e:af:3d:bf:75:b9:a2:fe:18: d2:f5:fa:02:5b:39:e5:6f:7e:af:b8:b0:ad:91:c3: 76:f6:ea:a8:77:ed:5a:15:68:ca:10:44:e8:2f:7c: 26:7d:51:ad:68:af:97:be:69:fd:07:7c:1c:ca:07: 66:75:5e:c9:ce:4e:a4:f6:31:0c:6b:0e:46:4e:8f: 7c:b5:dc:e8:af:79:9a:b7:39:cf:5a:7a:dc:3c:9c: 07:1d:ee:17:ad:09:c3:cf:4e:7f:ed:79:0a:13:13: 42:a0:06:53:54:28:83:f3:9b:5d:3e:d3:99:11:c4: 8f:bc:37:7e:d3:c2:a6:ac:17:27:2c:dd:18:3d:35: 35:17:d7:30:e8:6f:da:3f:5a:0d:94:81:14:98:61: 34:d9:0a:02:bb:b6:73:14:23:68:3a:ad:43:0b:44: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D5:14:B8:4D:D7:06:18:C7:69:9D:DD:7F:60:A2:A6:7D:E5:E7:B7 X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3235322e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.88.252.0/22 Signature Algorithm: sha256WithRSAEncryption 54:8d:3f:18:c2:c1:81:fd:74:f4:ee:71:d7:69:30:9b:16:2b: cd:1f:44:1b:03:84:dc:77:43:8c:62:4d:06:1e:42:67:eb:b1: 12:96:e5:df:4a:39:f1:90:15:35:43:c3:f8:85:89:85:c6:e4: bf:16:24:75:74:41:c2:ef:35:17:cb:e1:1b:d0:9e:ad:b4:a0: 65:28:70:d1:6e:49:f6:33:bf:d4:55:14:4f:a0:18:cb:46:64: 04:5c:fd:d6:49:15:6c:64:1c:7f:17:1d:7f:1a:6a:2d:29:89: d8:63:d2:e7:e5:52:f1:52:64:3b:ce:e8:eb:ad:a5:58:17:9d: 43:1b:af:53:cf:8e:20:64:68:98:ca:ce:f5:e7:4f:e1:1c:90: 57:87:81:7a:b2:09:47:25:51:c2:c5:ea:b9:22:13:8a:81:f9: b2:34:ae:c9:2e:05:33:da:aa:ef:0b:e4:ea:de:02:05:db:1c: 93:e4:96:ec:da:25:1b:67:6e:25:d2:08:cb:d2:97:1a:67:38: 44:02:d5:f9:c8:3c:43:f8:bb:08:40:2d:17:86:e2:c3:79:62: 54:f2:d4:df:41:51:23:80:00:ec:e5:44:a4:1a:21:5c:1a:d6: 98:85:30:0d:bf:fc:b1:6b:c8:3f:fa:92:3d:e4:2a:c1:a4:e8: cc:70:4b:fa -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIUAtSX/dhFRXxdao7LHM525GrtWUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYxMDMwMTE1MzE4WhcNMjcxMDI5MTE1ODE4 WjAzMTEwLwYDVQQDEyg2NEQ1MTRCODRERDcwNjE4Qzc2OTlEREQ3RjYwQTJBNjdE RTVFN0I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p4Z12nzQ4YC jn+4KawPYCw7zK13CDAfJy86KFVI/TT6mveTZwLX9jMSKp26ZhPwpwr1QmAej/tf Oz7NLY/ZdZsBNmDcqsC9MD7xqFUv6Ua54JH8flZJwKZl6YoJklOerz2/dbmi/hjS 9foCWznlb36vuLCtkcN29uqod+1aFWjKEEToL3wmfVGtaK+Xvmn9B3wcygdmdV7J zk6k9jEMaw5GTo98tdzor3matznPWnrcPJwHHe4XrQnDz05/7XkKExNCoAZTVCiD 85tdPtOZEcSPvDd+08KmrBcnLN0YPTU1F9cw6G/aP1oNlIEUmGE02QoCu7ZzFCNo Oq1DC0RMLwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGTVFLhN1wYYx2md3X9goqZ9 5ee3MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk MzdkYWM3MmYxLzEvMzIzMzJlMzgzODJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzNDIw M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1j8MA0GCSqGSIb3DQEBCwUAA4IBAQBU jT8YwsGB/XT07nHXaTCbFivNH0QbA4Tcd0OMYk0GHkJn67ESluXfSjnxkBU1Q8P4 hYmFxuS/FiR1dEHC7zUXy+Eb0J6ttKBlKHDRbkn2M7/UVRRPoBjLRmQEXP3WSRVs ZBx/Fx1/GmotKYnYY9Ln5VLxUmQ7zujrraVYF51DG69Tz44gZGiYys7150/hHJBX h4F6sglHJVHCxeq5IhOKgfmyNK7JLgUz2qrvC+Tq3gIF2xyT5Jbs2iUbZ24l0gjL 0pcaZzhEAtX5yDxD+LsIQC0XhuLDeWJU8tTfQVEjgADs5USkGiFcGtaYhTANv/yx a8g/+pI95CrBpOjMcEv6 -----END CERTIFICATE-----Generated at Thu Nov 5 19:52:07 2026 by rpki-client