$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa File: 647e7e1b-886d-378b-8f0d-f521fdee6616.roa (raw, json) Hash identifier: sy69C52e8AgXIMaShcFO6CgN/p41x5NdVSb/R02Sgyc= Subject key identifier: 61:39:DB:CF:EC:03:DC:EE:20:18:9D:59:26:E2:DE:91:93:36:EE:44 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584C55011DE9BB05D3486E4866C0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 399629 IP address blocks: 96.9.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:1d:e9:bb:05:d3:48:6e:48:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=a5136f0c-8eef-4e79-80af-549376dc744f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dc:45:8a:1c:2b:05:71:c6:90:f2:f8:9a:89: 98:8e:3e:48:24:ce:f4:b9:5c:88:17:cd:96:ef:d4: e1:40:e0:ff:85:c9:e2:81:d8:50:57:b5:43:f6:8a: 8f:28:22:d1:fd:ff:2f:f1:bf:c8:8c:b3:20:c7:e7: c1:81:a5:c9:48:2a:64:f4:41:80:30:a9:21:7f:5b: 6e:3c:3b:50:a1:41:91:e2:a6:3b:ec:1b:04:12:bb: 21:9f:89:9f:8a:32:bd:c9:1d:fe:00:61:cb:61:c8: 21:2a:7f:35:5a:34:aa:db:94:e6:ad:7d:c2:50:e7: 7d:33:3e:40:1d:b6:f7:c5:a2:1b:ad:f1:cc:1b:78: 60:32:fd:ac:04:70:c2:92:15:e5:fc:5b:6e:70:d5: 33:1d:73:53:3e:97:0a:65:85:e9:1c:af:6a:d5:75: d9:e6:29:9f:05:57:7c:58:0f:ea:2e:b1:78:0a:d1: b4:f8:2d:db:20:5b:9b:5d:cb:b4:b0:87:a5:26:d9: ea:15:4d:5d:4e:52:dc:5a:0f:de:78:26:2d:64:aa: 3f:2f:68:59:61:60:05:5d:61:74:23:b6:b9:53:78: 71:45:d1:7b:b0:5b:05:12:45:a6:e8:91:4b:78:b8: 1d:7b:af:44:63:7a:35:88:45:a3:dd:ec:66:68:23: bb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:39:DB:CF:EC:03:DC:EE:20:18:9D:59:26:E2:DE:91:93:36:EE:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 96.9.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:73:9a:44:57:04:7b:15:7a:69:dc:bd:07:41:c8:b8:45:73: 72:91:75:87:89:4b:17:10:57:0e:8d:39:56:76:24:cc:f0:17: 45:31:c8:d8:69:b2:cd:6a:c2:f8:b8:2c:eb:fc:85:b4:75:20: f6:e3:25:79:65:50:a0:f1:db:90:05:72:59:d0:74:71:7c:89: 20:60:bd:a6:85:ac:9a:b3:b4:88:e3:82:ed:a3:17:9e:7d:60: 14:1f:8b:87:6e:50:14:5c:27:90:fb:ba:4f:90:33:bb:d6:3e: 7b:25:55:fb:23:63:f1:cb:b1:2f:f6:01:05:e5:7c:bc:c3:2d: 3a:60:06:80:ee:e8:cc:9f:9c:d6:a0:d5:36:3f:a6:12:67:87: e1:de:07:74:af:7b:e5:9c:25:37:a0:1d:17:43:ab:a2:d2:2f: e6:18:38:4a:48:2e:70:de:f4:58:4a:34:6e:1e:74:27:ad:b5: 43:f9:41:74:05:3e:96:01:1f:42:d9:b2:66:bd:3f:2b:78:60: 6c:e5:8b:a0:07:6b:59:c4:bc:b0:30:84:62:4b:ce:1c:2e:cc: cc:df:76:88:30:95:c2:6a:8c:38:73:b8:60:32:db:3e:02:8d: 89:b2:73:96:69:a9:2b:4e:60:04:22:a6:41:d0:be:51:8d:91: 00:14:99:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVAR3puwXTSG5IZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk YTUxMzZmMGMtOGVlZi00ZTc5LTgwYWYtNTQ5Mzc2ZGM3NDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtxFihwrBXHGkPL4momYjj5IJM70uVyIF82W 79ThQOD/hcnigdhQV7VD9oqPKCLR/f8v8b/IjLMgx+fBgaXJSCpk9EGAMKkhf1tu PDtQoUGR4qY77BsEErshn4mfijK9yR3+AGHLYcghKn81WjSq25TmrX3CUOd9Mz5A Hbb3xaIbrfHMG3hgMv2sBHDCkhXl/FtucNUzHXNTPpcKZYXpHK9q1XXZ5imfBVd8 WA/qLrF4CtG0+C3bIFubXcu0sIelJtnqFU1dTlLcWg/eeCYtZKo/L2hZYWAFXWF0 I7a5U3hxRdF7sFsFEkWm6JFLeLgde69EY3o1iEWj3exmaCO7HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE528/sA9zuIBidWSbi3pGTNu5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNjQ3ZTdlMWItODg2ZC0z NzhiLThmMGQtZjUyMWZkZWU2NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9zmkRXBHsVemncvQdByLhFc3KRdYeJSxcQVw6NOVZ2JMzwF0UxyNhp ss1qwvi4LOv8hbR1IPbjJXllUKDx25AFclnQdHF8iSBgvaaFrJqztIjjgu2jF559 YBQfi4duUBRcJ5D7uk+QM7vWPnslVfsjY/HLsS/2AQXlfLzDLTpgBoDu6MyfnNag 1TY/phJnh+HeB3Sve+WcJTegHRdDq6LSL+YYOEpILnDe9FhKNG4edCettUP5QXQF PpYBH0LZsma9Pyt4YGzli6AHa1nEvLAwhGJLzhwuzMzfdogwlcJqjDhzuGAy2z4C jYmyc5ZpqStOYAQipkHQvlGNkQAUmYM= -----END CERTIFICATE-----Generated at Mon Mar 2 18:28:22 2026 by rpki-client