$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa File: 647e7e1b-886d-378b-8f0d-f521fdee6616.roa (raw, json) Hash identifier: UFbX/SWJ+ny9zTCNIpV1/atADZ1mVWATe8qs4AAFEmQ= Subject key identifier: 41:97:C2:62:E0:5C:F2:CA:2B:0B:CD:CA:48:71:AC:BE:62:9F:63:69 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584E147ED6ADD6077BD61151BA00 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 399629 IP address blocks: 96.9.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:d6:ad:d6:07:7b:d6:11:51:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=4c894cf5-4542-4c3c-a98d-1227648c8a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:44:b3:f9:e6:cc:11:61:0f:3c:04:9b:aa: c4:57:71:8b:7b:1b:e0:1c:9f:b1:ec:e0:33:0e:94: c6:a8:b9:4c:fb:41:1c:97:44:6e:88:63:3b:5e:bd: 7d:f4:2e:93:b7:45:d4:fa:69:80:fe:99:32:35:cb: ca:44:2e:cc:e8:96:4a:c2:13:c4:f4:fb:2b:49:f3: 65:64:46:0c:57:4d:eb:1b:00:69:43:97:d8:dd:d4: a5:b1:83:79:84:a4:e7:a1:70:ed:51:cf:19:91:48: ea:61:01:32:34:35:16:a5:43:e3:e4:4d:4a:cf:b1: e6:bb:40:6f:52:9c:1c:f9:40:01:64:df:39:c0:d1: 57:74:8a:c0:c8:c3:3a:64:21:36:a8:ed:ba:6d:c1: a8:0a:0f:9d:b4:04:f9:eb:b5:68:89:e6:e1:5d:e0: 61:ef:f6:b6:63:f0:b3:b2:2d:77:eb:91:8a:38:b1: 95:39:81:4b:5a:f5:21:ea:13:57:88:37:39:b8:a2: cc:30:81:1b:e1:48:21:b4:d7:24:03:56:b6:36:98: f7:06:09:14:99:ac:f6:b0:c0:fc:e5:26:4f:b2:22: 37:45:99:f1:96:21:4d:22:20:70:67:0f:c0:a9:d7: 26:2d:91:d7:27:64:e0:1d:69:ad:b4:70:d3:1c:c5: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:97:C2:62:E0:5C:F2:CA:2B:0B:CD:CA:48:71:AC:BE:62:9F:63:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 96.9.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e8:7a:24:ff:70:00:1b:5e:83:2d:99:0c:1f:f5:d1:bf:99: b4:23:83:b2:09:51:77:66:a7:44:00:85:03:8b:83:f1:1c:ac: 9f:70:26:d0:e6:ce:c9:f8:7b:9c:68:42:5f:e4:34:a7:cc:6a: f9:9e:f7:3f:68:1c:24:9d:3a:1e:be:ca:d2:87:dc:74:ed:86: 42:d2:90:83:e1:c9:10:f1:cd:d3:13:db:dd:2d:d8:53:57:d4: 31:cb:a5:ad:4f:94:78:62:a7:51:a9:3e:ff:80:cb:63:a1:dc: bf:05:0c:a1:9c:44:b4:47:f7:4d:74:2a:81:20:4b:09:94:32: 90:89:38:e8:67:63:03:c9:12:de:eb:09:ce:a3:9d:23:c8:0d: 08:4f:bc:b5:6f:cc:b2:0b:2f:78:8a:df:a5:b0:98:5a:33:b5: a6:05:6a:2c:a2:8d:a9:e1:53:9f:6b:56:a4:86:c6:76:ec:bb: 22:b8:08:e7:4b:45:89:d2:72:41:21:b6:6e:78:06:80:47:00: ef:ba:77:29:5b:2a:10:e0:c1:f1:8d:c1:81:49:5d:bf:27:cc: 55:ae:0c:2d:e4:2a:88:3b:f4:aa:a3:d8:07:29:75:ba:27:90: b6:cb:5e:8e:4a:b5:89:bf:c1:4e:ec:1a:ec:b2:27:60:0b:fa: db:8a:60:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Uftat1gd71hFRugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk NGM4OTRjZjUtNDU0Mi00YzNjLWE5OGQtMTIyNzY0OGM4YTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jpEs/nmzBFhDzwEm6rEV3GLexvgHJ+x7OAz DpTGqLlM+0Ecl0RuiGM7Xr199C6Tt0XU+mmA/pkyNcvKRC7M6JZKwhPE9PsrSfNl ZEYMV03rGwBpQ5fY3dSlsYN5hKTnoXDtUc8ZkUjqYQEyNDUWpUPj5E1Kz7Hmu0Bv Upwc+UABZN85wNFXdIrAyMM6ZCE2qO26bcGoCg+dtAT567VoiebhXeBh7/a2Y/Cz si1365GKOLGVOYFLWvUh6hNXiDc5uKLMMIEb4UghtNckA1a2Npj3BgkUmaz2sMD8 5SZPsiI3RZnxliFNIiBwZw/AqdcmLZHXJ2TgHWmttHDTHMWaYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGXwmLgXPLKKwvNykhxrL5in2NpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNjQ3ZTdlMWItODg2ZC0z NzhiLThmMGQtZjUyMWZkZWU2NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALoeiT/cAAbXoMtmQwf9dG/mbQjg7IJUXdmp0QAhQOLg/EcrJ9wJtDm zsn4e5xoQl/kNKfMavme9z9oHCSdOh6+ytKH3HTthkLSkIPhyRDxzdMT290t2FNX 1DHLpa1PlHhip1GpPv+Ay2Oh3L8FDKGcRLRH9010KoEgSwmUMpCJOOhnYwPJEt7r Cc6jnSPIDQhPvLVvzLILL3iK36WwmFoztaYFaiyijanhU59rVqSGxnbsuyK4COdL RYnSckEhtm54BoBHAO+6dylbKhDgwfGNwYFJXb8nzFWuDC3kKog79Kqj2Acpdbon kLbLXo5KtYm/wU7sGuyyJ2AL+tuKYAI= -----END CERTIFICATE-----Generated at Sun Jun 14 01:41:50 2026 by rpki-client