$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa File: 02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa (raw, json) Hash identifier: LIgBnnO3TvrrUmziXrOxu2oH3s1gJe+eiZNPSddF7U8= Subject key identifier: 71:14:D2:BD:44:1A:8B:89:64:2C:D8:55:FD:E9:9B:BA:7D:10:33:8D Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584F0ED233EDE1EA821225A08D80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 399629 IP address blocks: 64.95.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:33:ed:e1:ea:82:12:25:a0:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=2caa902e-ae0e-4613-a4ca-b1c540c2baf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e4:45:75:44:0e:f9:d2:be:c6:98:0a:3b:5d: c9:b1:2a:d5:83:3b:a6:6c:c2:ab:4b:76:ba:96:d9: b4:0d:7e:94:37:5f:f7:26:cb:7e:d1:c8:11:21:2c: c9:9e:20:71:24:58:bf:2b:44:e5:fc:01:c7:61:9b: 61:bc:52:49:fd:a2:4e:92:ab:2d:1a:aa:9d:d1:37: 03:4c:d6:27:34:22:06:36:6a:b8:42:4d:f3:b5:18: 10:02:79:a5:8b:3e:de:bd:a1:c3:11:0d:d7:8a:3c: 89:d8:84:1a:bb:90:13:38:ff:16:aa:e4:67:68:1f: 13:31:cc:81:85:ea:2d:12:ed:e2:15:28:24:44:16: e7:73:f6:ed:e0:55:f2:06:63:1b:8a:df:0b:97:ae: f8:dd:f7:e0:bc:59:20:a8:47:73:3b:b3:1c:4c:a7: 58:1d:f5:9b:3c:0a:63:2e:98:a9:df:c1:0b:dd:5a: 8e:b1:55:16:f6:13:f4:02:82:75:16:1d:12:aa:f3: c0:05:1c:bd:21:fb:2a:e4:9d:b7:ac:41:1b:4e:77: d0:ba:cb:8d:0d:77:d5:98:64:11:5f:fb:9f:6d:42: b7:d3:74:f3:ee:19:fc:8a:5c:01:e3:3d:3b:9a:00: 18:42:68:c3:43:30:f8:9e:62:70:46:81:43:6a:6f: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:14:D2:BD:44:1A:8B:89:64:2C:D8:55:FD:E9:9B:BA:7D:10:33:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.95.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:cc:e2:2f:b7:d0:c3:78:ab:0e:bf:02:da:40:3a:5c:f9:89: c7:cd:4b:07:e0:bb:2e:2c:57:2c:d4:5c:04:9a:75:ac:7d:ab: 27:d1:a6:79:ae:91:14:c6:41:bd:78:9b:ee:43:cd:31:e1:c5: 9b:b0:5c:4d:36:ff:da:89:69:54:44:1d:77:58:01:b3:b7:de: d1:dd:c4:f0:9a:82:93:58:e3:8e:c7:a7:80:8f:9b:a5:4d:30: 0f:bc:75:6c:5f:02:24:f3:7e:d6:33:fe:ec:b6:57:5a:79:a7: 84:9b:59:5a:b4:be:9d:91:43:33:e9:48:3f:c7:dc:0a:41:f8: 8c:7d:df:0e:24:d4:01:4f:cd:2b:f0:7d:d4:a9:f1:3f:87:15: 17:d1:fa:c5:20:68:b2:1d:44:7a:ad:f3:27:7d:08:c9:78:1d: f0:fd:69:53:fa:20:59:87:1a:16:6a:4c:82:21:81:43:d4:a9: ba:8a:91:ee:89:45:41:a8:ad:39:be:4e:fe:ed:21:1e:1a:1e: 82:6f:52:93:4d:8a:f6:26:57:0b:3a:cd:be:ab:49:c0:61:eb: fc:9f:b4:a8:f2:d0:d9:20:94:06:e3:11:89:fb:51:a0:6c:a3: 34:9a:4c:8b:a5:55:19:a1:ed:ca:0e:98:3f:56:b9:07:d5:39: a9:1f:a9:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jPt4eqCEiWgjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MmNhYTkwMmUtYWUwZS00NjEzLWE0Y2EtYjFjNTQwYzJiYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeRFdUQO+dK+xpgKO13JsSrVgzumbMKrS3a6 ltm0DX6UN1/3Jst+0cgRISzJniBxJFi/K0Tl/AHHYZthvFJJ/aJOkqstGqqd0TcD TNYnNCIGNmq4Qk3ztRgQAnmliz7evaHDEQ3XijyJ2IQau5ATOP8WquRnaB8TMcyB heotEu3iFSgkRBbnc/bt4FXyBmMbit8Ll6743ffgvFkgqEdzO7McTKdYHfWbPApj Lpip38EL3VqOsVUW9hP0AoJ1Fh0SqvPABRy9Ifsq5J23rEEbTnfQusuNDXfVmGQR X/ufbUK303Tz7hn8ilwB4z07mgAYQmjDQzD4nmJwRoFDam/neQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEU0r1EGouJZCzYVf3pm7p9EDONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMDJlNWI1ZTgtZDUyNy0z YmRmLTljOWMtNmRlNjNhMDgyZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF8KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvM4i+30MN4qw6/AtpAOlz5icfNSwfguy4sVyzUXASadax9qyfRpnmu kRTGQb14m+5DzTHhxZuwXE02/9qJaVREHXdYAbO33tHdxPCagpNY447Hp4CPm6VN MA+8dWxfAiTzftYz/uy2V1p5p4SbWVq0vp2RQzPpSD/H3ApB+Ix93w4k1AFPzSvw fdSp8T+HFRfR+sUgaLIdRHqt8yd9CMl4HfD9aVP6IFmHGhZqTIIhgUPUqbqKke6J RUGorTm+Tv7tIR4aHoJvUpNNivYmVws6zb6rScBh6/yftKjy0NkglAbjEYn7UaBs ozSaTIulVRmh7coOmD9WuQfVOakfqTE= -----END CERTIFICATE-----Generated at Thu Sep 24 23:13:30 2026 by rpki-client