$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa File: dd8ac448-7845-3707-82ae-e039ea217c8d.roa (raw, json) Hash identifier: RCktiXQo0W2Iszmis8Kf5nN6ZqHJXvK61LVnmWzJAPM= Subject key identifier: F7:89:F8:DF:F9:7F:FC:D1:BA:C3:F3:4D:9D:0B:8B:03:2E:2F:C4:D4 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D67DFCA03BF8AD5E2E97CC780 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 399629 IP address blocks: 65.38.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ca:03:bf:8a:d5:e2:e9:7c:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=e19065e2-fdf8-4609-a9c9-1bbff7453275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:56:ce:5f:dc:3b:4b:63:df:e1:a6:6a:ad:83: dc:37:0b:f3:7a:b8:9d:d3:06:60:8d:73:03:e1:6e: c3:13:9d:65:b8:94:17:93:fc:67:dc:2d:21:b3:22: 2d:ac:04:65:cd:3e:b8:17:47:c9:e0:37:4b:70:30: 13:70:8b:37:d0:f8:c6:8a:ba:37:78:98:52:20:48: 1a:21:b1:bf:26:24:72:a8:e2:68:40:11:6d:c2:2d: 41:32:14:85:09:b1:11:24:dc:e1:48:b3:c1:47:c9: be:65:43:77:39:33:4f:42:16:62:c8:1c:c1:b1:46: 05:1d:3e:0d:5d:2b:de:cb:df:59:95:2a:e9:c5:cf: cc:87:92:a4:39:30:26:59:00:70:e1:64:2a:19:07: 43:61:41:f6:dc:60:f0:11:04:a4:cf:f6:0d:38:e4: d6:f2:a7:c7:71:bd:50:58:76:d3:51:74:30:2b:81: bb:cf:26:b4:ba:a0:68:2c:d7:86:29:e0:7d:17:1d: be:60:2c:93:30:5a:c1:0e:6e:0a:a7:93:30:76:0c: 91:8d:cb:66:fc:92:dc:47:78:21:5c:80:75:4e:d5: 5d:cb:37:34:fe:77:b8:1a:72:d2:1a:33:aa:d2:0e: 40:80:7f:db:27:17:20:81:03:74:31:e1:c2:f7:94: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:89:F8:DF:F9:7F:FC:D1:BA:C3:F3:4D:9D:0B:8B:03:2E:2F:C4:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 65.38.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e7:91:6b:de:99:83:36:30:ea:db:44:4d:cf:ac:67:51:65: 07:ef:c4:e2:78:3a:25:78:d6:3c:f6:5f:f4:d2:48:de:e2:4a: be:a0:5d:ac:3b:d4:3f:2a:77:7b:9c:03:fe:79:5f:ea:e5:7d: fc:5f:43:83:4c:0b:77:5b:9e:81:f8:8a:aa:9f:74:b5:ca:78: 78:47:d7:1a:37:56:9e:fc:45:26:95:32:a5:45:79:71:89:e2: 1f:3a:66:40:4e:54:17:b0:ac:d0:8d:90:80:81:5a:8e:dd:a3: 4f:fa:6a:c5:6a:66:18:a8:c9:d3:16:f1:d7:d5:29:4e:38:84: 4e:13:c2:80:54:a0:59:4b:d6:c2:be:d8:58:bc:26:37:24:a8: be:e4:d0:9f:d5:6e:d3:e1:0d:50:90:48:ea:17:69:90:80:90: 10:8e:50:f6:57:db:3b:cf:62:b0:de:a9:bd:ca:83:00:ed:d8: 34:2b:43:d4:c5:71:81:f7:d2:21:e0:9e:41:42:be:e8:c9:cd: b9:67:c1:41:dc:96:68:9f:1e:69:c8:07:92:7f:84:d2:40:c3: 30:bc:bd:df:7c:58:6a:56:a3:1b:7c:c7:f7:bd:3b:d5:d3:86: e1:55:50:19:d4:93:d8:36:74:d4:63:6a:ce:8b:d7:e3:c9:de: 08:51:3c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38oDv4rV4ul8x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZTE5MDY1ZTItZmRmOC00NjA5LWE5YzktMWJiZmY3NDUzMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31bOX9w7S2Pf4aZqrYPcNwvzerid0wZgjXMD 4W7DE51luJQXk/xn3C0hsyItrARlzT64F0fJ4DdLcDATcIs30PjGiro3eJhSIEga IbG/JiRyqOJoQBFtwi1BMhSFCbERJNzhSLPBR8m+ZUN3OTNPQhZiyBzBsUYFHT4N XSvey99ZlSrpxc/Mh5KkOTAmWQBw4WQqGQdDYUH23GDwEQSkz/YNOOTW8qfHcb1Q WHbTUXQwK4G7zya0uqBoLNeGKeB9Fx2+YCyTMFrBDm4Kp5MwdgyRjctm/JLcR3gh XIB1TtVdyzc0/ne4GnLSGjOq0g5AgH/bJxcggQN0MeHC95R5YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeJ+N/5f/zRusPzTZ0LiwMuL8TUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZGQ4YWM0NDgtNzg0NS0z NzA3LTgyYWUtZTAzOWVhMjE3YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQSZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbnkWvemYM2MOrbRE3PrGdRZQfvxOJ4OiV41jz2X/TSSN7iSr6gXaw7 1D8qd3ucA/55X+rlffxfQ4NMC3dbnoH4iqqfdLXKeHhH1xo3Vp78RSaVMqVFeXGJ 4h86ZkBOVBewrNCNkICBWo7do0/6asVqZhioydMW8dfVKU44hE4TwoBUoFlL1sK+ 2Fi8JjckqL7k0J/VbtPhDVCQSOoXaZCAkBCOUPZX2zvPYrDeqb3KgwDt2DQrQ9TF cYH30iHgnkFCvujJzblnwUHclmifHmnIB5J/hNJAwzC8vd98WGpWoxt8x/e9O9XT huFVUBnUk9g2dNRjas6L1+PJ3ghRPC8= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:18 2026 by rpki-client