$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa File: 8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa (raw, json) Hash identifier: kvBDe/uBis40ulDC8pINDvn34qDVlrddHW74HWRok1Y= Subject key identifier: A4:C9:7C:CA:E3:A5:9F:8E:EF:2B:94:E0:98:DA:01:98:0A:5C:1F:AD Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584C9966FF21B42A80D2AA3BE900 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 399629 IP address blocks: 64.190.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:66:ff:21:b4:2a:80:d2:aa:3b:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=90a85bb1-3cdc-427f-a8db-504595a5c772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:43:1b:ba:fd:fb:2f:a7:66:f0:e2:4f:07: d6:b6:5b:33:30:0d:91:b9:d4:94:34:18:93:01:4c: 5a:9c:bd:0d:35:9c:e3:8d:24:53:39:f5:b1:9d:21: f2:0f:53:58:0a:c0:f3:73:a5:da:bf:4a:7a:f1:0c: 2f:68:8c:83:04:c0:f6:be:c0:ad:22:25:aa:e0:64: 20:1a:fc:69:d7:2d:81:70:12:52:8c:ee:66:a7:e5: 6a:a1:8d:d9:6b:00:28:51:7e:5c:34:e6:dc:12:a7: d2:79:13:ca:fb:77:b9:3b:19:65:11:ca:e9:59:62: 1e:12:75:47:8c:2b:14:67:96:b9:b5:00:21:6c:41: ae:f9:0e:f0:a2:22:dd:26:75:13:d3:67:f5:bc:5a: c3:ae:70:ee:12:fe:bc:d3:92:80:05:49:2b:3f:f0: 13:d1:c2:53:9a:0b:8a:c5:90:0f:fd:85:a4:6a:92: 8e:63:aa:6f:67:5b:96:38:63:74:cb:23:e0:51:7b: 12:f3:c4:c4:0d:3b:55:0a:05:3e:9e:7e:fe:3b:2a: 19:3e:7c:05:ef:08:99:c7:b4:c8:2b:96:6b:e0:3b: 88:05:7e:2d:44:08:a2:a6:22:e0:8d:80:87:6e:dc: 6c:88:65:72:03:e2:a1:c6:25:81:ba:85:43:01:a6: e3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C9:7C:CA:E3:A5:9F:8E:EF:2B:94:E0:98:DA:01:98:0A:5C:1F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.190.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:50:1b:70:05:e4:01:27:44:08:80:02:43:26:88:2a:f5:f2: fd:e4:d4:15:b4:45:67:28:0d:ec:c6:5e:57:5b:ec:36:e9:0b: 20:58:c4:dc:e9:a3:3a:75:55:81:01:bf:0a:20:f0:42:dd:79: 65:8e:db:fd:8a:e3:3b:69:83:22:05:4c:2d:49:eb:e1:0f:65: 3a:29:b8:f1:04:b3:94:56:36:2e:c4:08:94:77:b7:d8:1f:41: 65:1e:92:99:b5:19:bb:29:7b:04:cf:fa:04:e9:76:93:65:98: fe:7e:57:f4:14:33:e3:6a:f7:49:c6:d3:18:b5:7e:fa:41:fa: 41:d0:61:cf:2a:b6:06:3d:b6:c6:8e:f0:f0:4f:cc:58:c0:d3: 68:57:19:f6:e6:d6:2e:75:df:3f:e0:a8:ed:cb:38:69:c9:44: 06:a3:60:ae:dd:3a:66:ce:4a:60:90:5e:82:17:a9:31:32:d5: 19:ca:6c:ae:2b:06:df:c7:a2:f2:bd:31:d6:cd:b0:d9:f5:bc: 57:aa:69:91:aa:6c:5e:55:92:d5:30:b9:b7:8d:19:ab:1f:9e: 5c:9a:11:c0:04:ed:0e:ae:b6:19:8e:29:c8:99:4d:7f:d9:62: dd:54:e0:38:a9:8e:ac:69:79:f6:d6:17:2e:c4:85:f9:43:dc: 78:7b:b4:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZv8htCqA0qo76QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk OTBhODViYjEtM2NkYy00MjdmLWE4ZGItNTA0NTk1YTVjNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfpDG7r9+y+nZvDiTwfWtlszMA2RudSUNBiT AUxanL0NNZzjjSRTOfWxnSHyD1NYCsDzc6Xav0p68QwvaIyDBMD2vsCtIiWq4GQg Gvxp1y2BcBJSjO5mp+VqoY3ZawAoUX5cNObcEqfSeRPK+3e5OxllEcrpWWIeEnVH jCsUZ5a5tQAhbEGu+Q7woiLdJnUT02f1vFrDrnDuEv6805KABUkrP/AT0cJTmguK xZAP/YWkapKOY6pvZ1uWOGN0yyPgUXsS88TEDTtVCgU+nn7+OyoZPnwF7wiZx7TI K5Zr4DuIBX4tRAiipiLgjYCHbtxsiGVyA+KhxiWBuoVDAabjrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTJfMrjpZ+O7yuU4JjaAZgKXB+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvOGVmM2M4ZTItOTY3YS0z MWRlLTg4Y2QtNmNiZGY1YjVjNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL5xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhQG3AF5AEnRAiAAkMmiCr18v3k1BW0RWcoDezGXldb7DbpCyBYxNzp ozp1VYEBvwog8ELdeWWO2/2K4ztpgyIFTC1J6+EPZTopuPEEs5RWNi7ECJR3t9gf QWUekpm1GbspewTP+gTpdpNlmP5+V/QUM+Nq90nG0xi1fvpB+kHQYc8qtgY9tsaO 8PBPzFjA02hXGfbm1i513z/gqO3LOGnJRAajYK7dOmbOSmCQXoIXqTEy1RnKbK4r Bt/HovK9MdbNsNn1vFeqaZGqbF5VktUwubeNGasfnlyaEcAE7Q6uthmOKciZTX/Z Yt1U4DipjqxpefbWFy7EhflD3Hh7tLE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:09 2026 by rpki-client