$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a7d423dd-5605-3d14-9b50-79ed7feff77f.roa File: a7d423dd-5605-3d14-9b50-79ed7feff77f.roa (raw, json) Hash identifier: RRR+MLDBi/CRqCSOQ6smCoh3U1w+2LyZ/D0K2Gm1hPc= Subject key identifier: BE:B4:EC:62:94:C3:36:10:E7:50:D1:DC:80:9D:2C:04:FE:0F:1E:94 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D6C0FAE7BF946F42C7D95F100 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a7d423dd-5605-3d14-9b50-79ed7feff77f.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 399629 IP address blocks: 193.149.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:ae:7b:f9:46:f4:2c:7d:95:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=a0e9d189-ab6f-44a8-b9fe-2166eed3b4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:9c:3a:82:c2:2a:f5:f4:aa:b1:52:5a:80: 96:93:5d:f4:88:48:f6:cb:63:ca:4d:ca:b8:1f:37: 9b:d7:e4:88:08:d5:2f:2a:7d:c3:84:94:a4:ef:dd: f0:92:49:02:48:ba:30:e0:2b:74:3e:7c:92:25:08: 54:01:5e:bb:ab:be:cc:96:20:1a:ce:1c:69:7e:be: c8:a7:2a:0c:82:d2:9c:94:9b:37:81:59:8b:a4:b4: 86:35:dc:3a:38:92:ca:10:4c:c6:5b:f1:74:a0:ed: cb:b4:31:91:c4:e1:4e:9c:51:52:02:6e:33:6c:ba: 37:fa:f6:c8:f2:72:74:da:e2:35:56:12:a8:8c:01: af:ad:d1:73:27:ef:52:7b:7c:ac:8f:bc:87:e9:e3: df:b4:d9:12:0c:fd:7e:04:74:c4:78:06:19:f0:6f: 6a:50:6b:d7:00:cf:38:63:48:c1:9c:e9:5d:76:b8: 3c:92:4a:79:b9:83:bf:39:c8:d8:4c:4a:f7:22:df: ed:cb:c0:ba:f0:3a:d9:2f:7e:9c:a1:12:cc:e3:fa: c5:74:ba:e8:f1:b4:b6:a4:65:f6:bf:0c:7f:59:a9: 83:7b:49:39:ff:58:df:a9:4b:8c:f5:3e:9d:8d:3d: 5b:fc:47:de:7f:45:6c:ea:35:a7:ba:95:67:bb:b6: a3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B4:EC:62:94:C3:36:10:E7:50:D1:DC:80:9D:2C:04:FE:0F:1E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a7d423dd-5605-3d14-9b50-79ed7feff77f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 193.149.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a7:05:1b:c7:a3:6c:ae:cb:f1:a3:db:f6:40:fc:d5:c1:7b: 6d:cd:fb:a7:07:5b:13:45:15:48:86:71:b0:b1:eb:9e:87:64: 7e:3b:da:5f:48:a1:c3:8a:2b:a7:8a:08:07:d2:b6:62:38:7d: 15:1e:30:85:bd:21:78:ba:f3:f4:34:45:3d:ab:5d:61:1c:d3: f0:54:84:7d:63:15:40:ad:72:87:bd:83:c4:3e:51:2d:22:32: c3:06:24:cb:c3:a7:06:a5:d1:ce:86:34:39:5f:8a:3a:3e:ca: 0e:77:79:49:20:d0:f5:45:77:a7:b9:40:21:5a:f4:21:e1:1a: 62:d2:8e:ee:8a:b0:da:85:e1:5c:cf:86:6f:fe:e0:fa:42:96: 44:35:b0:0d:50:91:e7:ed:b0:76:ae:d9:6b:6b:10:a8:00:1c: d5:a0:c5:06:5d:c3:73:bd:1d:15:97:a3:ee:38:63:35:69:f9: 61:c5:5f:76:ec:34:31:45:dd:82:f3:81:fe:2f:ba:64:d7:50: a2:70:5f:a3:77:7d:6f:e8:f4:b8:7e:95:ca:6f:b6:bf:93:77: c3:9e:49:10:a6:83:e7:08:b1:80:4a:d8:3e:c3:f8:38:e0:cb: 43:1f:c0:77:7f:5b:5a:5f:19:e1:d7:b9:17:90:f5:51:1b:81: 0d:13:b1:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD657+Ub0LH2V8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YTBlOWQxODktYWI2Zi00NGE4LWI5ZmUtMjE2NmVlZDNiNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f+cOoLCKvX0qrFSWoCWk130iEj2y2PKTcq4 Hzeb1+SICNUvKn3DhJSk793wkkkCSLow4Ct0PnySJQhUAV67q77MliAazhxpfr7I pyoMgtKclJs3gVmLpLSGNdw6OJLKEEzGW/F0oO3LtDGRxOFOnFFSAm4zbLo3+vbI 8nJ02uI1VhKojAGvrdFzJ+9Se3ysj7yH6ePftNkSDP1+BHTEeAYZ8G9qUGvXAM84 Y0jBnOlddrg8kkp5uYO/OcjYTEr3It/ty8C68DrZL36coRLM4/rFdLro8bS2pGX2 vwx/WamDe0k5/1jfqUuM9T6djT1b/Efef0Vs6jWnupVnu7aj/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL607GKUwzYQ51DR3ICdLAT+Dx6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTdkNDIzZGQtNTYwNS0z ZDE0LTliNTAtNzllZDdmZWZmNzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2nBRvHo2yuy/Gj2/ZA/NXBe23N+6cHWxNFFUiGcbCx656HZH472l9I ocOKK6eKCAfStmI4fRUeMIW9IXi68/Q0RT2rXWEc0/BUhH1jFUCtcoe9g8Q+US0i MsMGJMvDpwal0c6GNDlfijo+yg53eUkg0PVFd6e5QCFa9CHhGmLSju6KsNqF4VzP hm/+4PpClkQ1sA1QkeftsHau2WtrEKgAHNWgxQZdw3O9HRWXo+44YzVp+WHFX3bs NDFF3YLzgf4vumTXUKJwX6N3fW/o9Lh+lcpvtr+Td8OeSRCmg+cIsYBK2D7D+Djg y0MfwHd/W1pfGeHXuReQ9VEbgQ0Tsf8= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:05 2026 by rpki-client