$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/2accdeca-a2f8-366c-b1cf-50d64c9e319f.roa File: 2accdeca-a2f8-366c-b1cf-50d64c9e319f.roa (raw, json) Hash identifier: LPixA0itt+Axj43Hj63JD6nmRHMNTPc2Oj+sRfDSSFg= Subject key identifier: E3:AC:2C:0B:A7:EF:15:E8:1C:54:57:F5:94:51:54:50:7A:62:F7:DF Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584D55BA3DEFE16BFF6CCDA3BA80 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/2accdeca-a2f8-366c-b1cf-50d64c9e319f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 55720 IP address blocks: 172.93.165.0/24 maxlen: 24 172.93.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3d:ef:e1:6b:ff:6c:cd:a3:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b60916fb-72a4-44c5-be5e-96b459f06386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:7f:9e:91:a7:78:01:38:09:ad:21:d1:50: 07:2e:cc:06:60:ee:e2:3f:80:05:46:bd:f9:88:c3: 1b:1e:d7:c2:9c:61:96:1a:3a:b5:ff:a0:e8:11:d4: fc:35:69:58:d4:03:b1:f8:97:5a:48:52:eb:d5:f9: 1f:03:01:ea:88:15:98:ea:08:50:d6:82:96:44:9b: 4b:47:ea:4b:f8:5c:1c:da:e8:70:71:9d:9a:5a:46: 7d:37:06:3b:75:2f:13:74:4b:08:be:bd:75:94:56: 01:05:69:e8:d7:d9:c6:27:8a:bc:17:53:bc:a2:4a: df:64:3b:67:ca:1d:0e:35:19:ac:b5:42:44:c6:69: c0:3a:1d:83:7c:ad:d9:e0:0a:f5:34:a0:9a:4a:81: da:1a:7f:e7:89:27:a0:aa:35:ad:ec:f2:c3:0a:96: e8:07:76:49:3c:37:32:e6:4e:2d:85:4b:de:fd:59: 5c:89:ef:d9:73:9f:0f:3c:39:92:25:aa:16:c8:4e: a1:61:d4:3d:4c:91:6e:98:1f:9a:28:32:4c:8e:a7: ea:f0:99:95:c1:3d:da:d5:5a:c6:61:9d:d4:6c:5a: 16:88:18:b1:e1:97:b5:66:bd:d3:2e:b7:04:e6:d2: 8e:87:6e:ab:3a:66:78:34:22:4b:34:59:c1:43:70: 44:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AC:2C:0B:A7:EF:15:E8:1C:54:57:F5:94:51:54:50:7A:62:F7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/2accdeca-a2f8-366c-b1cf-50d64c9e319f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 172.93.165.0/24 172.93.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ae:00:a7:1f:1b:56:03:27:cf:0d:fb:0f:d6:83:94:10:61: 55:84:0d:43:7c:b5:76:7a:37:da:32:c7:ec:af:14:cb:68:a6: c1:b3:db:81:51:25:4a:16:8e:b2:50:c0:18:4e:4b:8e:4c:8a: c5:f8:77:c0:7d:89:e4:e6:c4:26:5f:3a:f5:4b:d0:0f:5d:25: 2f:13:55:24:4f:39:81:2b:0e:a5:12:02:21:a2:f0:e5:b1:41: 07:24:4a:3a:dc:4e:33:03:6e:f9:42:14:12:a4:80:08:25:4d: f9:50:af:98:09:31:b9:84:69:a5:78:1d:a0:0e:97:91:74:d2: fe:1f:d6:de:ac:8f:7c:bc:ec:77:d0:1c:9c:6e:59:44:25:cc: bc:e6:75:18:9d:e0:88:78:b1:41:10:46:25:f6:76:f0:8a:e1: 41:bd:0b:4d:f4:d7:32:18:2c:c2:c6:2b:98:c3:35:96:a4:3c: ab:00:1f:bc:f9:c3:ae:23:6c:96:6d:92:8d:a8:a1:d0:94:54: 18:51:1a:3d:a0:df:5c:f5:d3:83:d5:e4:ca:32:4e:43:1d:68: ae:5d:7f:9d:c8:d1:cc:99:d5:d3:33:06:b4:48:e1:26:54:cb: 32:74:47:7b:e9:c5:d7:40:e8:86:04:73:46:a0:3a:80:40:8c: 27:1a:51:42 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1Vuj3v4Wv/bM2juoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjYwOTE2ZmItNzJhNC00NGM1LWJlNWUtOTZiNDU5ZjA2Mzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY9/npGneAE4Ca0h0VAHLswGYO7iP4AFRr35 iMMbHtfCnGGWGjq1/6DoEdT8NWlY1AOx+JdaSFLr1fkfAwHqiBWY6ghQ1oKWRJtL R+pL+Fwc2uhwcZ2aWkZ9NwY7dS8TdEsIvr11lFYBBWno19nGJ4q8F1O8okrfZDtn yh0ONRmstUJExmnAOh2DfK3Z4Ar1NKCaSoHaGn/niSegqjWt7PLDCpboB3ZJPDcy 5k4thUve/Vlcie/Zc58PPDmSJaoWyE6hYdQ9TJFumB+aKDJMjqfq8JmVwT3a1VrG YZ3UbFoWiBix4Ze1Zr3TLrcE5tKOh26rOmZ4NCJLNFnBQ3BEkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOOsLAun7xXoHFRX9ZRRVFB6YvffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvMmFjY2RlY2EtYTJmOC0z NjZjLWIxY2YtNTBkNjRjOWUzMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArF2lAwQB rF28MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAACuAKcfG1YDJ88N+w/Wg5QQYVWEDUN8tXZ6N9oyx+yvFMto psGz24FRJUoWjrJQwBhOS45MisX4d8B9ieTmxCZfOvVL0A9dJS8TVSRPOYErDqUS AiGi8OWxQQckSjrcTjMDbvlCFBKkgAglTflQr5gJMbmEaaV4HaAOl5F00v4f1t6s j3y87HfQHJxuWUQlzLzmdRid4Ih4sUEQRiX2dvCK4UG9C0301zIYLMLGK5jDNZak PKsAH7z5w64jbJZtko2oodCUVBhRGj2g31z104PV5MoyTkMdaK5df53I0cyZ1dMz BrRI4SZUyzJ0R3vpxddA6IYEc0agOoBAjCcaUUI= -----END CERTIFICATE-----Generated at Fri Apr 17 11:40:06 2026 by rpki-client