$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/03b32a0e-8e9a-390d-a60e-04c0225aabf1.roa File: 03b32a0e-8e9a-390d-a60e-04c0225aabf1.roa (raw, json) Hash identifier: /W76cSI0kTVSFzU+8YZdnq5MKcrgYPYxeZvL8G9zbHE= Subject key identifier: 58:E9:37:21:61:0E:95:40:B4:E2:8F:2D:B6:1A:4C:AD:16:7B:C4:E0 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584EA786EB604761E7F357B94EC0 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/03b32a0e-8e9a-390d-a60e-04c0225aabf1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 59 IP address blocks: 198.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:eb:60:47:61:e7:f3:57:b9:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cd33ec5b-270e-4e4d-a317-33325693c7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2b:82:5c:53:fa:9f:36:e3:b7:7f:4f:f4:ad: 6c:b7:f8:0d:c4:e1:3e:11:fe:fd:2e:92:81:fa:80: 3b:bc:0f:24:cc:52:8e:4b:4c:28:65:6e:66:c5:85: 87:af:38:38:e5:23:91:95:6a:01:87:6f:3f:b8:08: b3:74:08:c3:f8:eb:b4:0b:f2:06:3b:85:41:97:7e: 16:f4:92:e7:8d:6e:fb:ba:2b:0f:b6:c8:6c:74:18: de:9c:9c:ee:5a:8c:ee:e7:8f:d7:a0:bc:85:f4:c6: a2:49:d9:ea:e4:e7:1e:6c:bd:cd:69:d3:5b:ff:39: 95:1e:35:60:66:87:8a:02:d4:3e:8f:11:50:78:2a: aa:c9:8c:d9:27:77:81:a0:2a:65:bd:6e:c8:43:c5: 89:da:e1:55:f6:3f:ac:37:2f:75:bf:db:f2:6e:c7: 23:2f:53:60:20:1d:a2:3d:34:5f:59:a1:e5:1b:85: 20:f4:6b:de:87:08:ea:10:47:f7:8c:45:2b:eb:da: 81:86:d1:b9:6b:aa:d4:6d:3d:fc:5f:42:0a:45:bd: ef:2d:63:fc:8f:bf:57:98:4d:6c:4a:8d:49:74:c4: c0:7f:85:ec:7c:b7:1a:34:d5:c2:ec:31:68:4a:6a: 80:12:0f:e5:08:18:b4:c4:e3:b6:e6:b1:e7:3f:51: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E9:37:21:61:0E:95:40:B4:E2:8F:2D:B6:1A:4C:AD:16:7B:C4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/03b32a0e-8e9a-390d-a60e-04c0225aabf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ec:f9:6e:52:19:64:57:b2:d3:0a:f7:91:28:f1:8a:fb:4d: d6:16:0e:e0:12:9d:2d:c3:76:fe:3a:6c:41:df:20:c2:69:62: 5d:fb:e6:d9:77:f8:1e:60:34:a4:a7:3b:4a:ae:7e:6e:cf:18: 41:27:d8:bb:61:e1:1a:45:db:00:ed:03:b6:36:31:67:76:3a: 6f:e6:34:09:56:41:2f:78:dc:37:12:7a:98:5c:1e:06:d0:3b: b9:63:36:82:02:42:bd:34:4a:51:40:91:ab:f8:88:b7:66:ba: ae:b4:4f:9d:f7:4c:ea:34:68:8d:b8:ff:de:02:c2:83:18:b4: d9:c0:9c:28:b0:2b:91:9a:d5:ad:7f:20:8a:a6:db:f5:98:4f: d7:a4:13:a2:0c:69:39:be:e3:04:98:a7:a7:9c:c0:70:61:2f: 27:f7:ab:da:e5:37:3d:9f:18:f1:97:b8:eb:77:41:dd:80:ca: 4e:09:ea:1c:fb:af:c9:13:dd:df:11:2c:ba:62:e7:03:f2:09: cd:c1:09:0e:37:7d:25:00:74:83:95:56:c4:d5:ae:47:8d:87: 09:5d:6a:71:46:2c:60:71:b1:88:f9:2e:c8:e5:d3:39:84:92: f5:5b:e3:28:34:83:61:48:79:ef:50:0b:5f:b5:a9:4d:fe:ce: 68:aa:49:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhutgR2Hn81e5TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2QzM2VjNWItMjcwZS00ZTRkLWEzMTctMzMzMjU2OTNjN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCuCXFP6nzbjt39P9K1st/gNxOE+Ef79LpKB +oA7vA8kzFKOS0woZW5mxYWHrzg45SORlWoBh28/uAizdAjD+Ou0C/IGO4VBl34W 9JLnjW77uisPtshsdBjenJzuWozu54/XoLyF9MaiSdnq5OcebL3NadNb/zmVHjVg ZoeKAtQ+jxFQeCqqyYzZJ3eBoCplvW7IQ8WJ2uFV9j+sNy91v9vybscjL1NgIB2i PTRfWaHlG4Ug9GvehwjqEEf3jEUr69qBhtG5a6rUbT38X0IKRb3vLWP8j79XmE1s So1JdMTAf4XsfLcaNNXC7DFoSmqAEg/lCBi0xOO25rHnP1HMlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjpNyFhDpVAtOKPLbYaTK0We8TgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvMDNiMzJhMGUtOGU5YS0z OTBkLWE2MGUtMDRjMDIyNWFhYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLs+W5SGWRXstMK95Eo8Yr7TdYWDuASnS3Ddv46bEHfIMJpYl375tl3 +B5gNKSnO0qufm7PGEEn2Lth4RpF2wDtA7Y2MWd2Om/mNAlWQS943DcSephcHgbQ O7ljNoICQr00SlFAkav4iLdmuq60T533TOo0aI24/94CwoMYtNnAnCiwK5Ga1a1/ IIqm2/WYT9ekE6IMaTm+4wSYp6ecwHBhLyf3q9rlNz2fGPGXuOt3Qd2Ayk4J6hz7 r8kT3d8RLLpi5wPyCc3BCQ43fSUAdIOVVsTVrkeNhwldanFGLGBxsYj5Lsjl0zmE kvVb4yg0g2FIee9QC1+1qU3+zmiqSdA= -----END CERTIFICATE-----Generated at Wed Jul 29 09:16:34 2026 by rpki-client