$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa File: 647e7e1b-886d-378b-8f0d-f521fdee6616.roa (raw, json) Hash identifier: XQzRWibb+J+rpipl0zBXBs45ya+fYTDfrZCsca98I60= Subject key identifier: 51:68:D4:82:A4:6E:C5:97:1D:79:67:64:CE:C7:B9:C2:A3:BA:5E:A9 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584F58CD505BB38590F4943D8A00 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 399629 IP address blocks: 96.9.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:50:5b:b3:85:90:f4:94:3d:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=763daaaf-7fbf-4f20-9bb4-e04257248a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:e2:ad:79:5b:7b:68:08:7d:d8:9f:db:3a: fa:dd:42:5c:39:92:4e:b9:77:79:81:39:16:b5:4a: 52:64:31:9e:37:ca:cd:56:2d:68:ad:e8:4b:3e:85: 24:b2:e8:eb:e8:92:42:5e:41:e2:67:66:f6:dc:b9: aa:bd:17:3a:f0:a7:d8:a9:36:44:15:48:8c:c2:f0: 74:9f:92:1b:d8:d0:9c:6e:fd:45:c1:83:28:00:25: ac:71:8a:27:10:e9:e7:7d:f7:04:4c:28:bc:78:85: 19:75:57:77:f0:cd:84:cd:1a:7b:d5:47:74:0b:aa: 08:38:4d:15:5a:5f:17:9e:04:f0:75:9d:ae:d2:c9: 14:05:0f:e6:c9:4e:3d:ef:6d:d4:c5:22:88:66:ea: de:ab:9f:c1:41:1a:49:de:64:bc:d4:4b:b5:11:39: e0:ab:95:84:0d:65:fa:e9:c4:18:d9:09:83:7c:e0: bb:6d:30:aa:82:53:ed:e8:f6:e8:30:c9:73:f9:f7: cb:14:07:89:e1:4d:83:71:4b:9f:da:af:9b:41:02: 38:00:83:b5:12:ea:a9:d1:0d:38:a4:3d:62:24:b0: 5e:a9:0f:e7:d7:b6:2f:fc:c8:42:48:e3:7b:f3:73: 13:c8:9d:56:54:b3:01:d7:ef:10:0e:61:c4:e3:fb: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:68:D4:82:A4:6E:C5:97:1D:79:67:64:CE:C7:B9:C2:A3:BA:5E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 96.9.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ca:31:70:33:74:42:94:98:a4:7a:e1:ec:aa:0c:82:75:b1: 82:27:dd:b0:94:af:ba:85:c3:26:1a:0c:8b:11:f2:79:3c:11: 34:af:73:65:c4:de:25:04:3f:8b:e0:3f:9e:05:aa:61:4d:4c: 5b:c4:20:56:21:7c:36:56:43:9b:e6:1c:3c:8d:b1:29:61:f8: ce:a6:56:36:9e:57:a2:57:b3:33:62:10:00:fa:c0:7f:a8:47: 90:e8:34:89:02:ed:08:76:a1:0c:18:23:1d:2b:d2:18:50:0b: 78:0f:86:24:c0:7b:ab:48:04:95:bf:47:7b:8d:52:4f:08:ef: 77:76:24:dc:71:ac:bd:37:60:37:cc:1a:1d:ad:13:2c:f3:8e: 1f:8a:8c:ca:d6:4a:7d:09:dc:8d:de:a5:09:31:ca:d0:b0:a0: b3:8f:e8:54:67:f8:a3:f7:e5:3e:3d:d9:b0:62:92:f5:91:56: 58:35:b9:b2:f3:57:68:eb:4b:d7:78:17:8c:bc:93:ea:43:4a: a9:f1:88:d6:fa:c9:c4:71:95:cc:34:9f:3a:ff:ae:dc:2d:2b: 7a:e1:5b:1f:dd:3c:3b:43:12:18:c0:38:6a:83:dc:7a:2c:09: e6:9c:10:36:d0:50:4f:7e:4f:ae:43:ba:c5:2a:89:7a:3f:c3: d5:ca:25:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVBbs4WQ9JQ9igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk NzYzZGFhYWYtN2ZiZi00ZjIwLTliYjQtZTA0MjU3MjQ4YTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu7irXlbe2gIfdif2zr63UJcOZJOuXd5gTkW tUpSZDGeN8rNVi1orehLPoUksujr6JJCXkHiZ2b23LmqvRc68KfYqTZEFUiMwvB0 n5Ib2NCcbv1FwYMoACWscYonEOnnffcETCi8eIUZdVd38M2EzRp71Ud0C6oIOE0V Wl8XngTwdZ2u0skUBQ/myU49723UxSKIZureq5/BQRpJ3mS81Eu1ETngq5WEDWX6 6cQY2QmDfOC7bTCqglPt6PboMMlz+ffLFAeJ4U2DcUuf2q+bQQI4AIO1Euqp0Q04 pD1iJLBeqQ/n17Yv/MhCSON783MTyJ1WVLMB1+8QDmHE4/v/9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFo1IKkbsWXHXlnZM7HucKjul6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNjQ3ZTdlMWItODg2ZC0z NzhiLThmMGQtZjUyMWZkZWU2NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALKMXAzdEKUmKR64eyqDIJ1sYIn3bCUr7qFwyYaDIsR8nk8ETSvc2XE 3iUEP4vgP54FqmFNTFvEIFYhfDZWQ5vmHDyNsSlh+M6mVjaeV6JXszNiEAD6wH+o R5DoNIkC7Qh2oQwYIx0r0hhQC3gPhiTAe6tIBJW/R3uNUk8I73d2JNxxrL03YDfM Gh2tEyzzjh+KjMrWSn0J3I3epQkxytCwoLOP6FRn+KP35T492bBikvWRVlg1ubLz V2jrS9d4F4y8k+pDSqnxiNb6ycRxlcw0nzr/rtwtK3rhWx/dPDtDEhjAOGqD3Hos CeacEDbQUE9+T65DusUqiXo/w9XKJc8= -----END CERTIFICATE-----Generated at Sun Oct 11 22:44:43 2026 by rpki-client