$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa File: a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa (raw, json) Hash identifier: uxlTqFJFf+/IyLz25gkOTl4B1YwllIL2nTRx7Vo73xk= Subject key identifier: E9:AB:5D:40:68:4D:C5:76:5D:23:5D:26:4B:2B:E5:75:A7:8E:8F:B4 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584C8476CB54F8B3FFEE14B3E580 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 399629 IP address blocks: 168.100.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:cb:54:f8:b3:ff:ee:14:b3:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=9349eddd-1744-4737-96d0-84f3e3889ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:cc:eb:59:54:98:5f:d3:51:23:10:6e:f2: 43:a8:5b:ff:32:bc:6b:8a:33:a0:6d:2d:62:92:e1: fc:8d:4c:17:f7:c9:c5:50:7b:ad:80:0e:68:a3:b2: e3:7b:a1:5b:6e:1f:b2:d3:95:f0:ca:7e:d8:95:59: 4c:9e:14:46:4d:18:15:1f:d4:c5:92:1e:a8:bb:46: ab:04:dd:48:70:62:ec:9d:2f:79:a1:e1:42:07:fb: 6a:e9:cf:e8:1f:49:75:86:6a:d2:21:a0:64:41:cc: a0:8d:08:2e:d5:25:8e:7c:c3:c5:77:b6:94:95:39: c9:52:b0:3e:91:ef:53:b3:6b:00:06:16:d1:c0:ea: b0:26:5b:f9:e1:89:1a:41:4c:84:b7:70:48:2e:68: 5a:95:e6:dc:64:24:a7:1a:3e:03:b3:d5:81:0b:81: a5:d2:0d:10:36:c4:1f:ff:a2:6b:69:5a:bc:a5:c7: b5:48:ed:67:4f:52:c4:87:3c:5a:8c:2a:af:2a:85: 9e:22:2f:5c:c8:a9:76:1e:5a:54:13:43:ff:99:9f: 95:25:3a:ef:f8:21:a5:10:ae:6b:1e:dd:9d:22:52: a7:ce:0b:f6:5a:6b:76:07:98:56:66:ef:4f:c3:d0: 18:e7:7b:42:87:58:ad:43:95:5d:f7:f9:fd:5f:c6: e9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AB:5D:40:68:4D:C5:76:5D:23:5D:26:4B:2B:E5:75:A7:8E:8F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 168.100.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d5:b7:a3:cd:f4:40:51:20:b8:b1:2e:99:24:df:e4:a1:d6: 47:d5:ef:e9:ae:5e:1e:93:86:bc:54:1d:fc:2c:65:41:42:ee: cf:60:8e:c9:26:56:5b:42:af:7f:82:3a:9c:d9:f0:ae:e5:a0: 3b:80:a0:0f:e6:75:0e:33:f9:da:d1:eb:e5:00:63:96:80:f5: 6d:a4:16:10:31:87:4c:01:6d:b6:f8:3e:93:04:c5:2a:d6:8e: 50:17:d7:48:9a:8d:bc:cb:9f:77:aa:b2:b6:09:d2:69:ab:a8: c2:16:b1:20:e0:b4:a7:4c:6f:0e:3a:1b:7c:f4:eb:30:9a:79: 8c:66:1a:4c:e8:71:5b:0c:f0:05:b8:b5:aa:31:78:9f:32:cb: 6d:aa:f9:ad:6a:d0:4f:79:1b:5a:01:92:e3:8c:fc:ae:fb:e6: 76:cb:a4:ff:5c:eb:c5:bb:7c:ef:47:aa:63:b4:be:ff:ec:95: 43:63:00:51:75:ad:75:f3:66:d2:3f:98:ea:f2:5c:88:17:0b: 5f:43:21:91:fd:35:79:dd:58:56:ee:23:b6:c9:ab:14:11:6c: 77:db:05:ea:0e:8f:4e:a3:d2:f8:89:53:a4:91:77:a5:5a:4e: 70:e2:9b:99:9d:e4:32:61:70:a8:6d:f4:67:97:c7:73:b5:04: 03:c0:d3:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdstU+LP/7hSz5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk OTM0OWVkZGQtMTc0NC00NzM3LTk2ZDAtODRmM2UzODg5Y2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlLM61lUmF/TUSMQbvJDqFv/MrxrijOgbS1i kuH8jUwX98nFUHutgA5oo7Lje6Fbbh+y05Xwyn7YlVlMnhRGTRgVH9TFkh6ou0ar BN1IcGLsnS95oeFCB/tq6c/oH0l1hmrSIaBkQcygjQgu1SWOfMPFd7aUlTnJUrA+ ke9Ts2sABhbRwOqwJlv54YkaQUyEt3BILmhalebcZCSnGj4Ds9WBC4Gl0g0QNsQf /6JraVq8pce1SO1nT1LEhzxajCqvKoWeIi9cyKl2HlpUE0P/mZ+VJTrv+CGlEK5r Ht2dIlKnzgv2Wmt2B5hWZu9Pw9AY53tCh1itQ5Vd9/n9X8bp8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmrXUBoTcV2XSNdJksr5XWnjo+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTNmODM3MzYtYTJmNC0z ZThiLWE2OTQtZTRlYjcyZDVjNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnVt6PN9EBRILixLpkk3+Sh1kfV7+muXh6ThrxUHfwsZUFC7s9gjskm VltCr3+COpzZ8K7loDuAoA/mdQ4z+drR6+UAY5aA9W2kFhAxh0wBbbb4PpMExSrW jlAX10iajbzLn3eqsrYJ0mmrqMIWsSDgtKdMbw46G3z06zCaeYxmGkzocVsM8AW4 taoxeJ8yy22q+a1q0E95G1oBkuOM/K775nbLpP9c68W7fO9HqmO0vv/slUNjAFF1 rXXzZtI/mOryXIgXC19DIZH9NXndWFbuI7bJqxQRbHfbBeoOj06j0viJU6SRd6Va TnDim5md5DJhcKht9GeXx3O1BAPA00s= -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:17 2026 by rpki-client