$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa File: d22c3402-a212-36a9-b07f-cea36e6bf20f.roa (raw, json) Hash identifier: kLPVP74jrGFQ1ZZIgEN8vhfvDEMqTweCqYhAkI97/5I= Subject key identifier: AD:F1:F7:0C:C7:19:D7:3B:58:BB:25:C1:21:0C:A0:AD:30:58:EA:BC Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584F093CDEC2E877BB2707B1F780 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 400402 IP address blocks: 64.44.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:de:c2:e8:77:bb:27:07:b1:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=f08632fd-e489-4803-9163-1970670a6e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:96:9d:95:c7:29:fe:a5:94:95:c8:65:ef: 13:4a:b0:46:39:11:9b:d5:fa:a7:bc:12:fd:81:5c: 56:67:28:d8:a4:34:bc:17:45:02:7c:fa:11:48:2f: e2:90:c2:bb:45:fd:9a:ed:de:e5:3b:fe:40:c0:dc: 16:2a:3f:ce:38:1c:4d:74:13:66:ed:9a:55:b8:10: 0b:02:62:dc:f2:60:58:14:ea:31:d7:49:67:ee:4d: fb:b0:55:0a:a6:b9:1d:2a:23:4e:7c:d2:29:63:ce: 84:1f:1e:2f:08:0f:6f:3e:5f:0c:ce:b2:3b:09:22: 05:dd:8f:50:f5:75:e4:54:01:2d:03:48:ba:d5:08: 91:8a:7e:02:82:14:3e:49:9c:06:60:fd:76:e7:00: 2a:0a:f4:20:46:45:a0:7d:36:1a:2e:79:c0:0d:96: 10:10:0d:1b:2b:41:de:3f:4d:de:a4:61:91:80:ff: 32:ef:eb:5c:e7:35:77:58:0e:18:dd:52:93:df:fb: b2:b5:0a:43:03:d4:f5:13:23:fb:31:c0:e7:6d:1f: 41:d5:c8:76:43:7d:3f:2f:aa:f2:71:e0:0a:4c:aa: 94:85:2b:47:26:89:28:8d:39:b3:84:dd:86:70:6a: 35:d2:b5:cf:3e:00:a0:55:20:0f:85:b2:24:b9:dc: 61:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F1:F7:0C:C7:19:D7:3B:58:BB:25:C1:21:0C:A0:AD:30:58:EA:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 64.44.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a6:49:d4:ea:d2:d1:ba:7f:61:9e:94:95:16:2f:27:fd:e9: 4a:35:49:28:f3:0b:b7:1a:de:f7:69:2d:9f:51:d7:be:8f:1a: b8:5d:e4:15:d8:fd:8f:fd:46:dc:7b:de:04:f7:ad:67:33:29: a0:b2:fe:b7:64:e2:d6:3d:6d:52:66:3a:66:b3:2f:f1:63:d1: 9e:53:f9:1a:f3:fc:0a:38:d3:bb:c8:2b:d1:a1:df:25:e1:4f: 72:0a:b3:70:46:89:4b:52:50:db:e5:cd:65:0b:8e:69:ca:bd: dd:bb:72:1e:34:92:98:d4:36:c6:7f:40:84:93:97:67:7a:3f: 22:a2:13:15:35:28:b0:65:de:1d:b3:9d:db:ef:31:c2:4d:c7: 6f:fb:ea:d5:71:a9:bc:d6:84:d8:cd:d2:9c:d7:78:07:c9:97: 73:f7:1c:3b:73:bb:1e:a3:32:93:2c:8a:de:cc:72:c3:26:c2: ea:3e:db:9b:62:ad:26:f7:4e:86:a7:50:3c:c1:b1:39:3b:6e: 75:8c:aa:43:09:01:eb:48:24:60:4d:0f:ea:bf:a2:50:3d:d5: 57:2c:6e:e0:98:97:0c:7e:59:cd:3b:ad:be:67:af:8e:9c:3c: 31:63:5b:78:4c:12:2a:aa:20:a2:f9:32:aa:ff:07:d4:87:3f: 29:2a:5d:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPN7C6He7Jwex94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjA4NjMyZmQtZTQ4OS00ODAzLTkxNjMtMTk3MDY3MGE2ZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWiWnZXHKf6llJXIZe8TSrBGORGb1fqnvBL9 gVxWZyjYpDS8F0UCfPoRSC/ikMK7Rf2a7d7lO/5AwNwWKj/OOBxNdBNm7ZpVuBAL AmLc8mBYFOox10ln7k37sFUKprkdKiNOfNIpY86EHx4vCA9vPl8MzrI7CSIF3Y9Q 9XXkVAEtA0i61QiRin4CghQ+SZwGYP125wAqCvQgRkWgfTYaLnnADZYQEA0bK0He P03epGGRgP8y7+tc5zV3WA4Y3VKT3/uytQpDA9T1EyP7McDnbR9B1ch2Q30/L6ry ceAKTKqUhStHJokojTmzhN2GcGo10rXPPgCgVSAPhbIkudxhGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3x9wzHGdc7WLslwSEMoK0wWOq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvZDIyYzM0MDItYTIxMi0z NmE5LWIwN2YtY2VhMzZlNmJmMjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWmSdTq0tG6f2GelJUWLyf96Uo1SSjzC7ca3vdpLZ9R176PGrhd5BXY /Y/9Rtx73gT3rWczKaCy/rdk4tY9bVJmOmazL/Fj0Z5T+Rrz/Ao407vIK9Gh3yXh T3IKs3BGiUtSUNvlzWULjmnKvd27ch40kpjUNsZ/QISTl2d6PyKiExU1KLBl3h2z ndvvMcJNx2/76tVxqbzWhNjN0pzXeAfJl3P3HDtzux6jMpMsit7McsMmwuo+25ti rSb3ToanUDzBsTk7bnWMqkMJAetIJGBND+q/olA91VcsbuCYlwx+Wc07rb5nr46c PDFjW3hMEiqqIKL5Mqr/B9SHPykqXbY= -----END CERTIFICATE-----Generated at Tue Sep 22 21:02:55 2026 by rpki-client