$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/12003cbc-301f-3cc3-8dbb-be97412b366c.roa File: 12003cbc-301f-3cc3-8dbb-be97412b366c.roa (raw, json) Hash identifier: J5xBLzCddhddxH6BLxxUpqB/tijmNnlCDnTS8HcBUBU= Subject key identifier: 11:6B:EF:C7:9F:BF:75:47:0A:37:E8:EB:1F:57:98:F9:D7:63:B6:8D Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584F30528ACBFE8B0D11EDBFDA00 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/12003cbc-301f-3cc3-8dbb-be97412b366c.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 399629 IP address blocks: 199.91.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:8a:cb:fe:8b:0d:11:ed:bf:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=f9193bd7-f25b-41e2-b366-f2b1403efb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:17:02:81:7e:0d:22:ec:dc:99:f1:28:b0: 28:be:6b:8c:41:5b:fe:77:fb:1c:45:0a:a2:6f:d8: dc:10:b2:de:7d:c5:ef:7d:73:f2:09:89:0d:d0:a9: cf:27:80:1c:f7:00:34:35:5e:1d:0c:24:48:bd:d6: d2:e9:6b:20:86:2a:a2:c1:25:15:c7:68:ca:ec:4f: 9c:de:1b:3d:a7:d8:64:a2:87:74:cc:ee:e8:46:ef: 83:82:64:54:eb:ff:2d:c2:d2:b2:b4:0c:aa:98:eb: 4b:08:bd:5a:dd:1b:ee:17:07:04:ef:4a:3f:e8:24: 72:f8:b9:a2:db:a1:e1:cb:44:a5:ee:bb:15:cc:cd: 4b:78:76:93:cb:8b:c3:57:58:92:8f:b1:07:9c:88: 4f:7d:42:95:74:04:c0:b5:0c:0b:98:c3:3c:a9:80: 48:b6:a7:47:ff:5e:4b:5d:6c:1e:1b:c0:b6:97:90: b3:16:d8:5d:36:fb:17:b5:52:d4:53:24:b9:2e:43: 21:83:19:69:f4:3e:03:be:b0:f2:85:54:e9:c4:af: a9:c5:26:62:49:a8:ab:b2:7a:2a:3d:5f:13:3d:d4: cf:bd:6c:d9:b3:5b:70:c2:93:52:3a:ac:73:34:a1: 74:ea:86:08:65:e0:8a:ef:ac:5b:b7:16:8a:2b:54: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6B:EF:C7:9F:BF:75:47:0A:37:E8:EB:1F:57:98:F9:D7:63:B6:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/12003cbc-301f-3cc3-8dbb-be97412b366c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 199.91.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a2:d5:15:8b:b0:c1:f9:d5:85:fb:00:b2:26:b6:e5:df:60: 7d:d4:b4:f3:b1:c0:77:1e:fd:90:df:b9:ce:01:85:8b:d2:0c: c1:3a:c1:dc:04:f2:4e:98:ed:27:4d:b9:f5:0f:04:4a:1c:83: e5:26:32:5d:50:66:8f:73:17:5f:5a:1c:b4:b3:9a:4a:88:13: 6c:1e:83:17:c1:96:7e:07:9f:ad:19:1a:21:9a:56:0a:df:2d: 28:c1:fc:10:aa:3f:4d:c4:6e:d0:30:6e:bd:0a:2e:40:66:ec: 0a:30:5c:99:94:69:3f:e3:73:e1:ad:35:f9:44:93:8d:23:42: 8d:16:b3:36:d8:ec:04:95:a0:70:27:5d:5d:64:80:d7:5f:13: e3:af:38:1c:2a:41:42:b7:b9:6b:ca:be:98:89:73:9f:cc:38: 09:35:e8:12:39:37:a9:67:90:55:08:7a:db:a7:24:96:a8:57: c8:80:b6:6b:a5:95:c5:db:2a:c8:d1:52:95:3a:06:c5:59:a7: 12:bb:54:75:6f:a1:5c:d2:80:a0:09:3f:fb:11:31:f4:6d:78: 6c:d2:52:d0:8f:dc:46:e3:2b:7b:ec:97:41:6a:25:63:ef:57: d9:f8:84:3a:a2:10:c1:40:ec:f6:44:5f:02:d5:49:a0:74:f6: 9b:61:8c:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUorL/osNEe2/2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZjkxOTNiZDctZjI1Yi00MWUyLWIzNjYtZjJiMTQwM2VmYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdcXAoF+DSLs3JnxKLAovmuMQVv+d/scRQqi b9jcELLefcXvfXPyCYkN0KnPJ4Ac9wA0NV4dDCRIvdbS6WsghiqiwSUVx2jK7E+c 3hs9p9hkood0zO7oRu+DgmRU6/8twtKytAyqmOtLCL1a3RvuFwcE70o/6CRy+Lmi 26Hhy0Sl7rsVzM1LeHaTy4vDV1iSj7EHnIhPfUKVdATAtQwLmMM8qYBItqdH/15L XWweG8C2l5CzFthdNvsXtVLUUyS5LkMhgxlp9D4DvrDyhVTpxK+pxSZiSairsnoq PV8TPdTPvWzZs1twwpNSOqxzNKF06oYIZeCK76xbtxaKK1SOpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFr78efv3VHCjfo6x9XmPnXY7aNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMTIwMDNjYmMtMzAxZi0z Y2MzLThkYmItYmU5NzQxMmIzNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmi1RWLsMH51YX7ALImtuXfYH3UtPOxwHce/ZDfuc4BhYvSDME6wdwE 8k6Y7SdNufUPBEocg+UmMl1QZo9zF19aHLSzmkqIE2wegxfBln4Hn60ZGiGaVgrf LSjB/BCqP03EbtAwbr0KLkBm7AowXJmUaT/jc+GtNflEk40jQo0WszbY7ASVoHAn XV1kgNdfE+OvOBwqQUK3uWvKvpiJc5/MOAk16BI5N6lnkFUIetunJJaoV8iAtmul lcXbKsjRUpU6BsVZpxK7VHVvoVzSgKAJP/sRMfRteGzSUtCP3EbjK3vsl0FqJWPv V9n4hDqiEMFA7PZEXwLVSaB09pthjHA= -----END CERTIFICATE-----Generated at Thu Sep 24 18:43:52 2026 by rpki-client