$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa File: e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa (raw, json) Hash identifier: r0vWmu2cOxeHD6rzNBahXwbrqTOn6WnQKOQNDAPik68= Subject key identifier: 87:87:85:D0:88:D6:04:1C:15:E5:6D:16:29:3D:F8:B6:82:E2:72:CB Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F4328584F06723140867DC4BF7B8EA980 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 199.19.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:31:40:86:7d:c4:bf:7b:8e:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=f5a4a850-02ae-4548-8ee7-10e0fd29f6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ed:42:50:07:22:43:ce:fd:95:2b:36:b8:ac: c4:4c:58:dc:29:17:18:1b:6f:37:94:ac:fc:7d:dc: 25:34:e5:22:9a:64:5f:1d:4d:86:ac:de:21:13:3b: bc:c3:d5:c6:dd:f9:2c:f8:d7:ea:a7:45:a1:ad:95: 61:93:9e:f6:67:fd:ef:4e:6a:ad:ae:a8:93:75:23: 90:b0:b0:3c:ea:55:da:8e:fd:18:ed:a1:67:45:dd: da:f9:c1:52:b2:3c:6f:e8:0d:29:d1:60:9f:39:43: 70:c3:58:0e:8c:c3:0c:15:5d:26:6e:e5:27:52:88: 6d:22:86:3a:27:fb:59:75:8a:94:91:00:ec:3c:d9: b0:ad:26:f4:a6:21:16:a6:2c:0d:23:79:2d:79:d4: c4:ed:2c:0d:02:c8:74:ac:d7:8e:c1:43:77:9e:c5: 15:3b:d7:5f:68:2c:fa:56:5f:44:6b:4b:9e:de:7a: a0:84:0e:7b:58:c7:36:91:21:20:38:0e:54:d8:53: d5:2b:11:5a:29:a0:ac:4d:cd:b8:31:b5:dc:1c:97: 27:e2:8f:42:9a:0b:e1:a6:81:33:b2:f8:a8:5f:3c: 18:fb:08:9d:db:fc:18:5d:93:0b:3a:c9:ed:d2:46: 2b:66:40:d8:71:47:da:84:f4:26:34:3b:cc:ca:57: e3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:87:85:D0:88:D6:04:1C:15:E5:6D:16:29:3D:F8:B6:82:E2:72:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 199.19.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ae:a8:f2:25:27:67:c9:b9:67:76:96:aa:5e:d8:0f:49:7c: bf:8c:f0:34:cd:fb:67:71:08:dc:6c:60:08:33:ba:15:03:ec: 5e:a1:3b:cc:56:3b:3f:7c:69:1c:fd:b3:42:0e:85:3c:c1:4f: a8:5d:41:6c:6f:96:c0:98:0e:d5:67:f5:fa:b7:04:ad:1f:05: 1e:da:a9:4e:d0:da:fb:30:02:c9:89:00:73:d5:f6:1f:6f:ed: f4:61:ed:58:5a:09:05:cc:5a:3d:62:a0:7b:b6:1c:6d:87:59: de:12:58:ef:75:8e:7d:98:18:1d:d3:c0:61:3e:8a:af:36:ea: 6a:5f:64:9e:91:0f:d6:00:77:da:9d:25:73:45:d6:e3:04:ec: ef:f1:c0:9b:7d:98:5c:51:0f:1e:c8:c1:6c:5b:2f:5a:6f:2c: 9c:45:a4:f1:eb:35:af:cc:04:15:92:7f:ee:e1:21:f3:94:c4: 7c:9b:78:5d:61:2c:4e:38:88:61:ca:62:c1:5d:81:c8:3f:67: 93:97:d7:88:b6:81:00:18:d4:04:af:2d:00:7a:04:23:e6:29: e3:2f:eb:5b:bb:dd:b0:9b:98:24:f5:34:25:4c:89:0f:13:19: b0:12:f3:55:22:ac:20:83:e0:cb:53:96:be:fd:ac:ba:9a:a7: 17:89:e8:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjFAhn3Ev3uOqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjVhNGE4NTAtMDJhZS00NTQ4LThlZTctMTBlMGZkMjlmNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie1CUAciQ879lSs2uKzETFjcKRcYG283lKz8 fdwlNOUimmRfHU2GrN4hEzu8w9XG3fks+Nfqp0WhrZVhk572Z/3vTmqtrqiTdSOQ sLA86lXajv0Y7aFnRd3a+cFSsjxv6A0p0WCfOUNww1gOjMMMFV0mbuUnUohtIoY6 J/tZdYqUkQDsPNmwrSb0piEWpiwNI3ktedTE7SwNAsh0rNeOwUN3nsUVO9dfaCz6 Vl9Ea0ue3nqghA57WMc2kSEgOA5U2FPVKxFaKaCsTc24MbXcHJcn4o9CmgvhpoEz svioXzwY+wid2/wYXZMLOsnt0kYrZkDYcUfahPQmNDvMylfjvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeHhdCI1gQcFeVtFik9+LaC4nLLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvZTMyZGNhNmYtZTBkNy0z YTFmLWI1MWUtYTJkZGE0YThiMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmuqPIlJ2fJuWd2lqpe2A9JfL+M8DTN+2dxCNxsYAgzuhUD7F6hO8xW Oz98aRz9s0IOhTzBT6hdQWxvlsCYDtVn9fq3BK0fBR7aqU7Q2vswAsmJAHPV9h9v 7fRh7VhaCQXMWj1ioHu2HG2HWd4SWO91jn2YGB3TwGE+iq826mpfZJ6RD9YAd9qd JXNF1uME7O/xwJt9mFxRDx7IwWxbL1pvLJxFpPHrNa/MBBWSf+7hIfOUxHybeF1h LE44iGHKYsFdgcg/Z5OX14i2gQAY1ASvLQB6BCPmKeMv61u73bCbmCT1NCVMiQ8T GbAS81UirCCD4MtTlr79rLqapxeJ6Ec= -----END CERTIFICATE-----Generated at Wed Sep 23 02:57:59 2026 by rpki-client