$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/32b29642-ba16-320d-b3e0-0bc5925f2e4b.roa File: 32b29642-ba16-320d-b3e0-0bc5925f2e4b.roa (raw, json) Hash identifier: dknrMWIxlaHcLh2Af0KYmMoe2MTYXbXW1mCANIe39hA= Subject key identifier: E6:64:A0:9B:AF:38:5E:BD:E5:A3:4C:BE:E5:C4:29:15:0B:BC:74:99 Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e Certificate serial: 010D0C9F4328584F6292CD3A9BBFEC4D7731FB80 Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/32b29642-ba16-320d-b3e0-0bc5925f2e4b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 26286 IP address blocks: 104.167.241.0/24 maxlen: 24 104.167.242.0/24 maxlen: 24 2602:fccf::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:cd:3a:9b:bf:ec:4d:77:31:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=f12f0b1a-7491-44c3-80ab-3c29b134e933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:b8:d3:da:db:fc:78:05:6d:51:e4:ae:70: 2c:2c:d5:4a:9f:a7:70:8e:9e:90:d9:58:18:33:ee: ab:3c:2e:cf:af:cd:66:85:5d:e7:f1:ea:19:30:20: 87:e7:9e:f7:f1:63:db:ac:da:b9:ea:a8:95:b4:32: a4:6e:12:93:29:1f:25:56:fd:a8:dd:8f:cd:d9:af: e0:40:7d:3f:40:98:9d:a7:8d:29:38:06:c7:af:08: f1:2a:0a:98:19:56:4e:c8:d8:e5:99:24:ff:6f:db: 77:3d:c0:ff:d8:9f:59:c3:00:0f:cb:55:6b:86:88: fd:ca:9c:86:d6:1a:7b:e6:13:f8:71:69:2c:67:84: 4e:3f:09:78:ad:a0:a5:a3:81:b4:04:aa:e2:d9:f5: 07:df:66:58:98:ac:ea:44:e6:5d:9c:62:1e:d0:68: 51:6e:3a:6c:16:69:d8:36:2b:99:47:ed:af:35:24: ec:24:22:3f:1f:e5:5a:8d:ba:d2:d9:0c:84:c3:d5: 5c:2c:fe:1d:7c:ae:76:79:87:07:33:83:59:01:78: d9:d2:8d:3a:75:16:06:52:ec:90:6b:e0:70:78:35: 88:73:a3:ff:8e:47:cf:62:00:a0:71:c3:0c:93:84: 01:b4:32:6a:24:3a:2a:6a:b3:fc:2e:f7:8c:3c:2a: 13:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:64:A0:9B:AF:38:5E:BD:E5:A3:4C:BE:E5:C4:29:15:0B:BC:74:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/32b29642-ba16-320d-b3e0-0bc5925f2e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl X509v3 Authority Key Identifier: keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer sbgp-ipAddrBlock: critical IPv4: 104.167.241.0-104.167.242.255 IPv6: 2602:fccf::/37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b1:41:ff:02:9c:b4:0a:14:84:09:d3:f4:88:80:4d:4a:d1: 20:fc:b2:25:51:fb:e1:e4:48:a2:df:d4:54:bb:0c:11:55:7e: 8c:3a:e1:b2:2e:fb:14:6b:3d:06:87:f3:7a:1a:b8:e3:7b:43: 01:ae:ac:b0:96:1e:a4:68:59:57:1d:60:fb:77:a3:65:97:2c: 9e:69:fd:be:9d:1b:95:90:4a:ab:a9:99:00:e2:a3:cd:f9:4b: c5:0d:75:ae:db:ca:fb:db:30:5f:1d:69:5b:a2:1d:f1:b8:be: 33:39:10:ed:61:94:6c:e9:b8:ee:51:99:95:d8:e2:cd:e7:84: 85:c9:c1:89:2c:a5:88:3e:a8:e0:b1:9e:24:69:87:0c:af:80: 94:a2:f5:b8:29:4f:f1:04:8e:0a:0c:0f:f0:1f:a3:86:c5:05: 6e:aa:35:e7:20:31:0f:75:21:d1:bc:de:38:69:e0:2b:c8:ae: 26:f9:a2:44:dc:40:5f:ed:db:5f:4e:87:c7:b9:e9:dc:27:78: af:37:40:00:09:1c:81:c4:a8:90:c3:52:fe:59:53:13:2a:36: c9:55:5a:68:1c:e4:7c:1b:28:f1:ae:c0:7f:8c:92:08:86:ba: 52:27:78:50:a3:bd:ed:06:35:4c:ed:f7:b1:0c:68:9c:8a:b0: e1:33:7a:f2 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE9iks06m7/sTXcx+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw OTVlMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjEyZjBiMWEtNzQ5MS00NGMzLTgwYWItM2MyOWIxMzRlOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3a409rb/HgFbVHkrnAsLNVKn6dwjp6Q2VgY M+6rPC7Pr81mhV3n8eoZMCCH55738WPbrNq56qiVtDKkbhKTKR8lVv2o3Y/N2a/g QH0/QJidp40pOAbHrwjxKgqYGVZOyNjlmST/b9t3PcD/2J9ZwwAPy1Vrhoj9ypyG 1hp75hP4cWksZ4ROPwl4raClo4G0BKri2fUH32ZYmKzqROZdnGIe0GhRbjpsFmnY NiuZR+2vNSTsJCI/H+VajbrS2QyEw9VcLP4dfK52eYcHM4NZAXjZ0o06dRYGUuyQ a+BweDWIc6P/jkfPYgCgccMMk4QBtDJqJDoqarP8LveMPCoTVQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFOZkoJuvOF695aNMvuXEKRULvHSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1 ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvMzJiMjk2NDItYmExNi0z MjBkLWIzZTAtMGJjNTkyNWYyZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4 YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5 MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh MjhkOTA5NWUuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBABop/ED BABop/IwDgQCAAIwCAMGAyYC/M8AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACCxQf8CnLQKFIQJ0/SIgE1K 0SD8siVR++HkSKLf1FS7DBFVfow64bIu+xRrPQaH83oauON7QwGurLCWHqRoWVcd YPt3o2WXLJ5p/b6dG5WQSqupmQDio835S8UNda7byvvbMF8daVuiHfG4vjM5EO1h lGzpuO5RmZXY4s3nhIXJwYkspYg+qOCxniRphwyvgJSi9bgpT/EEjgoMD/Afo4bF BW6qNecgMQ91IdG83jhp4CvIrib5okTcQF/t219Oh8e56dwneK83QAAJHIHEqJDD Uv5ZUxMqNslVWmgc5HwbKPGuwH+MkgiGulIneFCjve0GNUzt97EMaJyKsOEzevI= -----END CERTIFICATE-----Generated at Sun Oct 4 21:13:35 2026 by rpki-client