$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/89e755dd-5037-3fa3-8d6f-7c673dec299d.roa File: 89e755dd-5037-3fa3-8d6f-7c673dec299d.roa (raw, json) Hash identifier: Ztq+D/wcAWQ8wDY4XcgNlNILUW8AByD4b4XtWt8DGcg= Subject key identifier: 46:EE:9E:57:5D:A7:AD:58:99:35:36:FA:55:7A:55:2A:AC:74:EA:EF Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584E02D07BFB12F496CF110FEC00 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/89e755dd-5037-3fa3-8d6f-7c673dec299d.roa Signing time: Sun 31 May 2026 01:00:10 +0000 ROA not before: Sun 31 May 2026 01:00:10 +0000 ROA not after: Sat 29 Aug 2026 01:00:10 +0000 asID: 399629 IP address blocks: 216.203.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:02:d0:7b:fb:12:f4:96:cf:11:0f:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: May 31 01:00:10 2026 GMT Not After : Aug 29 01:00:10 2026 GMT Subject: CN=c46b45b7-ede0-43b3-b2c8-3c006c36304b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7a:fa:c3:e6:2c:a4:55:da:c5:0a:05:32:56: 2b:5f:cd:12:27:69:5d:d4:6b:2d:39:46:71:e6:13: c8:c1:4b:a5:68:89:fa:c9:3b:1d:eb:cc:6a:03:7c: be:98:a4:2c:df:83:f5:cb:b4:87:cf:7b:6e:6c:da: 51:b6:a3:c9:c0:85:21:8a:70:ce:19:22:a2:f1:9e: 2f:56:77:c6:33:0f:40:ea:33:3c:10:40:8d:ac:4b: ac:c9:7f:45:d7:27:f1:f8:4f:68:83:af:95:d8:c0: da:c3:4e:e8:1a:df:c4:e2:c6:5d:e2:a8:89:ca:51: b8:d2:49:81:67:2e:58:d3:58:32:3c:8e:eb:96:e9: 83:65:9b:a9:7e:9b:ea:e2:76:f4:c0:ad:96:30:39: fb:70:81:13:66:06:37:83:53:a0:64:92:ae:f7:dd: 27:c8:d7:ff:4f:c3:5e:19:c4:a0:26:75:cf:09:4e: 1a:c5:a2:cd:8a:03:80:06:0f:4f:60:dc:c6:be:ba: 69:3f:a5:95:0b:6e:cf:2e:b6:49:f5:08:6c:e1:32: 00:00:29:e6:ac:46:f6:48:ea:52:ba:1c:9b:39:5d: 88:45:fd:ee:7e:ca:a2:83:69:e6:11:2b:52:50:c1: 2c:e0:13:9b:4a:3a:bd:de:9e:b4:2d:e8:6c:e7:d6: 89:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EE:9E:57:5D:A7:AD:58:99:35:36:FA:55:7A:55:2A:AC:74:EA:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/89e755dd-5037-3fa3-8d6f-7c673dec299d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 216.203.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f7:74:c3:73:7c:6b:ea:dd:b7:20:b3:48:d1:45:23:a7:08: 3c:2b:2d:d7:13:aa:93:6c:f2:f0:25:92:b4:61:05:51:c8:ea: b8:cc:85:02:cc:b8:45:00:78:63:e1:2d:b6:2c:94:c8:91:6c: a8:cd:74:7b:53:0d:67:f0:d0:12:c1:09:ba:88:a8:bf:50:88: 8f:a7:d8:eb:3a:7e:5a:ff:83:d4:a2:c5:f8:dd:1e:e1:69:52: fb:ec:d7:c9:85:3e:83:45:ac:04:77:22:f7:77:b8:ee:bf:66: a1:1c:59:f4:4c:60:1d:67:59:53:d1:3e:66:63:52:6d:47:31: 9f:d8:b7:5d:12:e9:63:cb:e8:9b:74:bb:66:ec:83:2e:5c:bb: 2c:10:ff:6d:89:78:02:81:5a:0a:19:a9:00:6c:8e:76:23:ec: 94:27:87:9d:c7:bf:af:42:9a:0a:62:56:63:32:22:8e:fa:92: 2b:57:cd:f7:0b:e6:3f:74:da:7b:a0:c9:3c:7a:0e:df:b5:0e: 9c:0a:d5:2d:3a:e6:35:66:e5:26:70:0d:77:9c:b0:f5:db:fc: 3c:23:cb:42:2c:06:c3:e5:e1:ce:e1:08:72:cc:e1:38:1b:89: fc:f4:e9:b8:4a:5b:f6:ee:27:16:52:ea:ed:f4:f0:df:e7:22: 29:87:f1:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4C0Hv7EvSWzxEP7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDUzMTAxMDAxMFoXDTI2MDgyOTAxMDAxMFowLzEtMCsGA1UEAxMk YzQ2YjQ1YjctZWRlMC00M2IzLWIyYzgtM2MwMDZjMzYzMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Hr6w+YspFXaxQoFMlYrX80SJ2ld1GstOUZx 5hPIwUulaIn6yTsd68xqA3y+mKQs34P1y7SHz3tubNpRtqPJwIUhinDOGSKi8Z4v VnfGMw9A6jM8EECNrEusyX9F1yfx+E9og6+V2MDaw07oGt/E4sZd4qiJylG40kmB Zy5Y01gyPI7rlumDZZupfpvq4nb0wK2WMDn7cIETZgY3g1OgZJKu990nyNf/T8Ne GcSgJnXPCU4axaLNigOABg9PYNzGvrppP6WVC27PLrZJ9Qhs4TIAACnmrEb2SOpS uhybOV2IRf3ufsqig2nmEStSUMEs4BObSjq93p60Lehs59aJjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbunlddp61YmTU2+lV6VSqsdOrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvODllNzU1ZGQtNTAzNy0z ZmEzLThkNmYtN2M2NzNkZWMyOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT3dMNzfGvq3bcgs0jRRSOnCDwrLdcTqpNs8vAlkrRhBVHI6rjMhQLM uEUAeGPhLbYslMiRbKjNdHtTDWfw0BLBCbqIqL9QiI+n2Os6flr/g9SixfjdHuFp Uvvs18mFPoNFrAR3Ivd3uO6/ZqEcWfRMYB1nWVPRPmZjUm1HMZ/Yt10S6WPL6Jt0 u2bsgy5cuywQ/22JeAKBWgoZqQBsjnYj7JQnh53Hv69CmgpiVmMyIo76kitXzfcL 5j902nugyTx6Dt+1DpwK1S065jVm5SZwDXecsPXb/Dwjy0IsBsPl4c7hCHLM4Tgb ifz06bhKW/buJxZS6u308N/nIimH8Zs= -----END CERTIFICATE-----Generated at Sat Jun 13 14:44:09 2026 by rpki-client