$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa File: 4687eb35-ec35-3007-bacb-6e57bd51c87b.roa (raw, json) Hash identifier: LmBaYwZrFtXtY7VYwtxRKAAMxGtcOUUxRVK2E1lddE0= Subject key identifier: 92:B0:DB:39:D6:10:35:17:AE:9D:77:6A:89:99:53:D1:50:7A:10:94 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584CAB8C4B6CEEE5364B55DB1600 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 399629 IP address blocks: 64.7.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:4b:6c:ee:e5:36:4b:55:db:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=8bc7fbfd-0a2c-46d4-b866-c7ca941efe33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:52:32:82:1d:c9:b1:f8:66:f8:4d:21:1e: e5:93:66:33:57:96:1a:63:fc:f4:39:06:d4:66:07: c8:5b:10:2d:09:e0:85:66:9b:de:79:e2:8f:67:38: e1:bb:71:cc:2f:7c:e3:94:33:75:f3:29:17:75:05: ec:39:3b:a7:b9:68:ce:1e:10:e8:4f:6f:31:b6:10: d8:78:c7:41:d1:37:b4:2f:31:33:61:32:9d:82:d9: a2:73:03:83:54:e1:6d:2e:43:dc:17:88:38:6f:83: 27:b6:7a:f1:8a:94:73:2d:12:15:c0:56:65:9d:81: c7:03:d6:4e:ac:16:2f:a3:0c:71:c4:44:fc:8d:96: 31:23:09:6d:0e:77:6a:8a:63:59:cd:64:77:ea:c8: c8:b2:a8:2c:5b:d3:5a:eb:d4:60:9a:ef:08:0d:a2: fc:5a:12:cf:bd:6c:35:54:62:93:48:63:6f:7c:19: 3c:4a:2c:9b:f6:98:73:37:20:31:5c:3a:2b:c4:13: 1b:d6:6c:5a:d1:48:28:22:09:7b:46:37:6f:9d:31: 8a:2e:27:11:54:3d:ae:fa:19:9a:bc:71:5a:24:42: bc:4a:29:2a:0d:5b:b5:e6:6c:7c:e3:64:2c:1c:8a: 93:23:cf:97:c1:1f:f6:53:88:bb:9e:03:b2:69:fb: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B0:DB:39:D6:10:35:17:AE:9D:77:6A:89:99:53:D1:50:7A:10:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.7.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d5:9a:f7:b4:3c:7b:2b:f7:69:21:f7:6e:9f:d1:b3:98:03: 70:3d:48:c3:6f:be:1b:dd:5c:80:05:1a:62:56:2b:72:2d:48: ee:c8:d2:fa:e8:9e:49:52:89:a1:5d:17:d2:89:f1:52:9a:91: 66:03:4f:f3:a6:17:8d:85:78:02:d4:3c:b7:9b:23:9f:ae:8c: bc:5a:fd:b4:18:6e:13:93:d1:1f:2c:7b:d8:10:0c:12:4b:ff: 2c:2c:65:b0:14:9f:03:97:f8:d0:1b:7f:52:af:ce:65:1a:f0: 7e:d0:64:72:ea:cd:63:76:9e:fa:72:c5:34:dd:d0:51:1a:bf: 08:7e:cf:23:4b:1b:5b:b0:6f:3b:5e:18:a8:4d:f3:f5:32:cc: 8f:7d:86:89:47:1f:d5:47:ab:7c:b4:96:29:b1:b3:f5:72:fa: 08:88:0f:ac:83:37:23:d1:91:4c:0a:43:4d:85:f0:d7:08:cf: 6d:a1:94:88:f3:06:83:1c:ad:86:44:b2:2a:5f:fe:79:fd:55: d9:f8:05:c0:bc:bd:16:be:54:9e:12:f4:a4:63:a7:54:57:74: 0f:50:52:c4:52:cc:c2:6e:27:db:fc:50:97:d1:e2:20:77:a6: 74:e3:e5:6a:3a:89:7c:ec:e4:02:b9:55:7a:35:80:6a:6f:26: 56:8a:63:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjEts7uU2S1XbFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk OGJjN2ZiZmQtMGEyYy00NmQ0LWI4NjYtYzdjYTk0MWVmZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrFSMoIdybH4ZvhNIR7lk2YzV5YaY/z0OQbU ZgfIWxAtCeCFZpveeeKPZzjhu3HML3zjlDN18ykXdQXsOTunuWjOHhDoT28xthDY eMdB0Te0LzEzYTKdgtmicwODVOFtLkPcF4g4b4MntnrxipRzLRIVwFZlnYHHA9ZO rBYvowxxxET8jZYxIwltDndqimNZzWR36sjIsqgsW9Na69Rgmu8IDaL8WhLPvWw1 VGKTSGNvfBk8Siyb9phzNyAxXDorxBMb1mxa0UgoIgl7RjdvnTGKLicRVD2u+hma vHFaJEK8SikqDVu15mx842QsHIqTI8+XwR/2U4i7ngOyafssfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKw2znWEDUXrp13aomZU9FQehCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDY4N2ViMzUtZWMzNS0z MDA3LWJhY2ItNmU1N2JkNTFjODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLVmve0PHsr92kh926f0bOYA3A9SMNvvhvdXIAFGmJWK3ItSO7I0vro nklSiaFdF9KJ8VKakWYDT/OmF42FeALUPLebI5+ujLxa/bQYbhOT0R8se9gQDBJL /ywsZbAUnwOX+NAbf1KvzmUa8H7QZHLqzWN2nvpyxTTd0FEavwh+zyNLG1uwbzte GKhN8/UyzI99holHH9VHq3y0limxs/Vy+giID6yDNyPRkUwKQ02F8NcIz22hlIjz BoMcrYZEsipf/nn9Vdn4BcC8vRa+VJ4S9KRjp1RXdA9QUsRSzMJuJ9v8UJfR4iB3 pnTj5Wo6iXzs5AK5VXo1gGpvJlaKY9A= -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:43 2026 by rpki-client