$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa File: e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa (raw, json) Hash identifier: QmLLqF82xOBv8spxIdvbj5TJwdvBw10waQqV+OgLINk= Subject key identifier: 04:20:65:E1:E1:03:45:2B:68:F2:0B:08:5C:00:EE:59:70:13:1F:DF Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F4328584D83CA9E3E66CAD0A33C686B00 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 199.19.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:9e:3e:66:ca:d0:a3:3c:68:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=09775e5a-a888-4d11-8e52-9bbcef34ed5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c9:fa:ea:0a:91:10:85:0e:f1:94:63:78:82: 19:17:a4:f2:96:d5:38:0b:d9:88:0f:ee:46:63:c4: 8b:c8:00:de:50:f8:7e:30:d4:21:75:de:94:26:ed: 62:be:a5:16:c0:33:d8:b3:62:83:8a:8f:73:35:64: af:23:20:04:3c:7d:e5:84:e2:3f:45:64:6c:dc:10: ae:cf:7d:9e:30:99:b8:f6:40:7e:7c:6d:41:e3:7f: 2e:89:f9:db:1c:df:02:86:53:96:92:18:ce:4d:d9: d1:68:d0:41:f9:13:7d:75:13:14:2e:0a:76:7a:f4: b7:e6:27:0d:82:d2:f1:1e:e8:7f:ca:cd:a4:e8:2b: 43:37:2c:e9:d6:1c:66:98:90:1d:66:b8:c4:cc:42: 6c:33:e7:46:5a:fe:76:b5:5b:65:e6:5a:35:7a:52: fd:35:f1:6a:67:a3:f7:c3:73:64:8a:8f:1b:2d:a5: 72:6f:b3:9d:9e:b5:34:ed:01:6e:eb:32:43:53:34: ef:39:ed:90:51:88:39:08:79:fd:80:69:05:44:9b: d7:d3:d0:9b:39:e0:ee:74:89:00:e0:94:61:0f:84: 2b:c5:bf:9b:6b:29:27:99:7a:3b:f9:aa:1a:f2:54: 05:2e:92:dc:d6:0a:9e:22:00:f0:a8:6a:73:70:95: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:20:65:E1:E1:03:45:2B:68:F2:0B:08:5C:00:EE:59:70:13:1F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 199.19.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4c:4b:2d:27:a9:94:b2:64:37:12:37:71:48:ff:5c:9e:40: b3:af:4f:52:3e:43:6c:8a:04:e0:8b:0d:b5:ee:a9:36:6c:72: 76:5b:6a:9e:3b:78:62:70:3c:e9:eb:a5:35:7f:2b:b7:99:10: c4:2b:50:c3:cb:a1:5e:e3:e5:d9:70:99:62:5a:c7:32:d2:35: 47:68:2a:03:f7:f5:1d:79:66:f0:f9:0a:da:4e:49:81:37:79: 6d:6e:97:af:54:94:a7:49:3e:e0:a9:31:1f:2b:cf:40:4e:7b: 1f:6e:dc:6c:ea:30:ad:49:16:d2:ee:54:a4:cf:34:66:fb:d0: 33:78:aa:0c:83:3f:40:f2:e2:a0:05:c9:c5:7b:4c:3c:ce:1b: a1:a8:2d:77:6a:44:4c:6d:3f:d1:a7:70:53:5b:67:73:a0:6d: 13:b3:f0:5d:a9:6d:65:98:bf:74:c2:79:91:ac:9b:5e:2a:00: 38:38:ce:3f:23:80:f8:e7:ac:64:cf:f9:f3:02:77:82:17:f9: e4:cc:77:98:69:13:97:18:02:21:ad:65:24:59:a7:73:15:90: 08:13:8d:09:9c:c7:71:a5:f4:3d:55:75:ab:f8:d5:49:94:c4: 69:ec:42:ee:ac:42:24:40:36:8c:38:65:9f:d7:5e:9b:f4:42: f9:ef:83:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyp4+ZsrQozxoawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk MDk3NzVlNWEtYTg4OC00ZDExLThlNTItOWJiY2VmMzRlZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cn66gqREIUO8ZRjeIIZF6TyltU4C9mID+5G Y8SLyADeUPh+MNQhdd6UJu1ivqUWwDPYs2KDio9zNWSvIyAEPH3lhOI/RWRs3BCu z32eMJm49kB+fG1B438uifnbHN8ChlOWkhjOTdnRaNBB+RN9dRMULgp2evS35icN gtLxHuh/ys2k6CtDNyzp1hxmmJAdZrjEzEJsM+dGWv52tVtl5lo1elL9NfFqZ6P3 w3Nkio8bLaVyb7OdnrU07QFu6zJDUzTvOe2QUYg5CHn9gGkFRJvX09CbOeDudIkA 4JRhD4Qrxb+bayknmXo7+aoa8lQFLpLc1gqeIgDwqGpzcJUOEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQgZeHhA0UraPILCFwA7llwEx/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvZTMyZGNhNmYtZTBkNy0z YTFmLWI1MWUtYTJkZGE0YThiMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdMSy0nqZSyZDcSN3FI/1yeQLOvT1I+Q2yKBOCLDbXuqTZscnZbap47 eGJwPOnrpTV/K7eZEMQrUMPLoV7j5dlwmWJaxzLSNUdoKgP39R15ZvD5CtpOSYE3 eW1ul69UlKdJPuCpMR8rz0BOex9u3GzqMK1JFtLuVKTPNGb70DN4qgyDP0Dy4qAF ycV7TDzOG6GoLXdqRExtP9GncFNbZ3OgbROz8F2pbWWYv3TCeZGsm14qADg4zj8j gPjnrGTP+fMCd4IX+eTMd5hpE5cYAiGtZSRZp3MVkAgTjQmcx3Gl9D1Vdav41UmU xGnsQu6sQiRANow4ZZ/XXpv0Qvnvg+M= -----END CERTIFICATE-----Generated at Fri Apr 17 09:38:16 2026 by rpki-client