$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa File: 8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa (raw, json) Hash identifier: wdNwxDKAyXAcCaa5tMEDFFym1J8byM62WqJsvvgONDU= Subject key identifier: 30:BF:92:91:03:61:D0:B0:FE:9F:B1:82:0D:3C:61:59:E1:26:98:85 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D7A052487C7D60C13A4F1CF00 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 399629 IP address blocks: 64.190.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:24:87:c7:d6:0c:13:a4:f1:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=d9d01bba-b188-4e61-8a27-6f506a071ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:38:73:ce:90:1e:82:00:59:9b:db:d2:15: f5:ff:b8:f5:27:21:5d:2e:fc:ca:6c:48:95:f7:e2: 2d:fc:68:f9:b7:81:1b:92:42:72:87:84:78:f8:09: 28:ea:a5:01:30:16:01:ae:48:91:ad:86:d3:d8:a5: 5a:7c:09:b7:1a:bd:16:4f:08:70:02:1b:90:a6:dd: 1d:7a:c1:e1:7b:6d:c7:48:d8:0f:b9:e2:ea:69:9a: d6:6c:cc:a3:ec:f2:2f:c2:35:9a:ec:df:23:b8:4e: 8a:12:fb:2e:84:c6:db:81:f9:1a:7e:2c:a6:a8:5e: 1a:7a:9b:7e:89:08:51:bd:40:c6:09:4c:37:c1:6f: c7:90:bb:66:be:20:2d:dd:a3:c7:80:94:72:51:86: d1:59:f8:ea:2a:fd:2e:8f:2c:8a:80:b6:e2:c7:19: 3e:cb:4f:a5:54:b9:7a:43:d6:8b:cf:18:45:10:2a: b4:bc:32:60:e2:ee:78:5b:b2:dc:ad:3b:7a:90:8b: 7c:0e:f2:0e:20:6a:a8:e9:a3:c6:c6:40:00:27:f2: 89:b9:13:d7:1a:d6:fd:06:f3:63:f5:e3:fe:6f:0c: 7a:cb:84:42:69:6e:be:63:a3:ad:b4:d6:eb:ce:94: 5f:81:07:08:dd:ed:cc:8c:45:32:2d:3d:22:e7:b7: 2f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BF:92:91:03:61:D0:B0:FE:9F:B1:82:0D:3C:61:59:E1:26:98:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.190.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:08:5f:d6:b2:2f:66:89:56:bc:35:bf:4e:2b:a8:6f:ed:12: cd:84:8f:c9:79:78:e8:39:39:da:b3:fc:c3:7e:87:28:1b:de: 15:b1:77:c7:08:d0:5c:4b:b6:9a:e1:fd:5f:4e:61:0b:3d:b2: b7:e8:65:f2:c9:cc:8f:2b:87:b8:aa:9e:91:5d:49:e5:d8:2a: 0b:cc:56:0a:a8:1b:de:54:c0:9d:2c:3c:54:0a:fb:22:2f:1b: 4f:66:a1:46:44:fa:1b:ad:e1:a8:8e:db:58:41:25:12:6f:29: 4b:8b:2d:8c:e4:27:b4:d2:a2:0c:d3:77:73:d6:90:36:ac:bc: 3e:b9:cb:ec:b3:f7:cb:5e:2f:c2:b7:f3:a6:2b:27:9f:a0:dd: e0:c4:cb:b0:17:ed:e7:5c:e1:ec:79:c2:8f:d2:bf:3a:09:37: 06:df:75:24:f1:b4:87:2e:95:7c:69:f6:f1:03:b1:e9:cc:57: 70:34:6d:71:5c:45:63:93:ce:31:57:af:6c:1a:f1:78:e9:93: d0:00:c0:c5:b1:aa:ea:89:4d:36:ba:e9:61:b9:90:68:68:b2: a2:3d:73:16:f0:fd:6f:0a:5d:e4:18:fd:00:17:bf:7c:d1:00: 0c:5f:f7:77:6f:f3:56:9e:a2:31:27:71:6c:be:8f:f5:ab:86: 15:13:86:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSSHx9YME6TxzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZDlkMDFiYmEtYjE4OC00ZTYxLThhMjctNmY1MDZhMDcxZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQk4c86QHoIAWZvb0hX1/7j1JyFdLvzKbEiV 9+It/Gj5t4EbkkJyh4R4+Ako6qUBMBYBrkiRrYbT2KVafAm3Gr0WTwhwAhuQpt0d esHhe23HSNgPueLqaZrWbMyj7PIvwjWa7N8juE6KEvsuhMbbgfkafiymqF4aept+ iQhRvUDGCUw3wW/HkLtmviAt3aPHgJRyUYbRWfjqKv0ujyyKgLbixxk+y0+lVLl6 Q9aLzxhFECq0vDJg4u54W7LcrTt6kIt8DvIOIGqo6aPGxkAAJ/KJuRPXGtb9BvNj 9eP+bwx6y4RCaW6+Y6OttNbrzpRfgQcI3e3MjEUyLT0i57cvGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDC/kpEDYdCw/p+xgg08YVnhJpiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvOGVmM2M4ZTItOTY3YS0z MWRlLTg4Y2QtNmNiZGY1YjVjNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL5xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwIX9ayL2aJVrw1v04rqG/tEs2Ej8l5eOg5Odqz/MN+hygb3hWxd8cI 0FxLtprh/V9OYQs9srfoZfLJzI8rh7iqnpFdSeXYKgvMVgqoG95UwJ0sPFQK+yIv G09moUZE+hut4aiO21hBJRJvKUuLLYzkJ7TSogzTd3PWkDasvD65y+yz98teL8K3 86YrJ5+g3eDEy7AX7edc4ex5wo/SvzoJNwbfdSTxtIculXxp9vEDsenMV3A0bXFc RWOTzjFXr2wa8Xjpk9AAwMWxquqJTTa66WG5kGhosqI9cxbw/W8KXeQY/QAXv3zR AAxf93dv81aeojEncWy+j/WrhhUThtA= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:24 2026 by rpki-client