$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa File: e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa (raw, json) Hash identifier: mHLPw8Mu7P7wER19WjCws9LJG2FCO0tCzknfRitlNfI= Subject key identifier: EA:65:31:26:55:79:6F:C3:B9:54:0C:16:3F:D9:5F:95:F3:E1:39:02 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D65151E8D9191488202247780 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 399629 IP address blocks: 206.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:1e:8d:91:91:48:82:02:24:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=0f6f9ff5-bc49-4f63-a23d-17d3a86e5930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:7f:38:3d:30:5b:35:fa:80:33:2d:25:5e: 02:24:b5:55:59:41:c3:42:d0:d4:c1:9c:45:be:01: 6c:cd:41:b4:dd:05:56:3f:8c:b3:d9:c7:69:8b:05: be:74:67:e6:86:8c:85:a7:db:ce:b8:21:80:dc:42: 90:21:b1:71:8f:0b:fa:d2:c3:09:3e:7e:43:07:6e: b3:97:84:49:d1:ff:7f:cb:c9:e4:10:d8:7d:49:6b: 0f:bf:ec:38:d1:aa:ed:cf:01:e7:b7:5b:e8:7f:d6: 0e:04:e6:2c:37:30:ee:c6:7a:3d:44:f6:01:bf:6d: cf:ae:1c:5b:a5:f4:40:b1:8e:6e:7f:99:5b:de:3e: 75:ab:8a:75:d6:90:08:4e:16:87:dd:61:a7:f1:0b: dc:3a:36:68:ae:e6:6d:fd:42:51:f3:14:42:cc:2e: 48:ce:17:57:27:9b:06:ef:8e:f6:e3:af:af:6d:ff: e9:0a:26:8e:1d:f5:8b:12:6d:20:6b:12:fa:c3:3f: 26:7a:1a:f1:7b:4a:c5:e6:f2:88:7a:a6:99:5c:22: 1a:38:f7:0c:da:ea:0b:be:24:3c:bf:41:48:1e:91: 38:9b:e6:27:c8:06:1d:74:14:f0:ef:71:59:0f:5a: b8:4e:f2:d3:d6:ca:6e:a5:00:0d:4f:71:35:ef:8a: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:31:26:55:79:6F:C3:B9:54:0C:16:3F:D9:5F:95:F3:E1:39:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 206.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:64:65:77:eb:49:4a:70:30:62:3c:c3:18:f3:4b:e6:7c:ca: 01:42:21:68:eb:03:78:fd:39:a6:e4:68:d1:05:78:e1:82:b2: 46:84:4f:2a:62:61:4b:5a:31:0e:42:ae:84:2c:86:62:57:1d: 98:fa:30:10:d3:c3:c6:00:df:94:9b:73:3d:ed:96:88:52:4a: 6c:c0:8b:44:41:74:a0:25:6f:e7:ef:26:c2:8d:57:19:9a:94: 43:a7:61:18:53:5d:81:36:95:9d:9d:26:e1:47:9d:6d:15:97: a9:6e:d9:37:72:ec:73:de:cd:ef:44:6c:1f:51:98:f7:c6:16: 1c:59:7b:ce:6f:fa:00:9c:e3:17:e4:c8:0d:e9:9c:bf:ed:05: 68:cc:4a:b6:b8:81:27:b9:0d:98:a8:18:e6:bf:b0:ab:90:33: cf:cb:fb:e8:04:62:a0:c8:a0:bc:f1:f0:57:ba:2f:33:52:35: 83:8c:5c:b0:01:a7:70:b0:7f:39:b5:b1:48:b4:08:83:6a:f0: 1e:d5:56:85:38:00:e1:80:55:9d:1b:b0:b7:00:86:54:69:29: 4c:1d:48:e3:b6:0d:24:23:dd:f4:af:d1:cd:72:ef:92:8d:b9: 5e:09:73:95:94:13:ea:4b:03:92:58:48:f1:6b:5a:2d:d8:bd: 4a:e5:10:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFR6NkZFIggIkd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MGY2ZjlmZjUtYmM0OS00ZjYzLWEyM2QtMTdkM2E4NmU1OTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ap/OD0wWzX6gDMtJV4CJLVVWUHDQtDUwZxF vgFszUG03QVWP4yz2cdpiwW+dGfmhoyFp9vOuCGA3EKQIbFxjwv60sMJPn5DB26z l4RJ0f9/y8nkENh9SWsPv+w40artzwHnt1vof9YOBOYsNzDuxno9RPYBv23Prhxb pfRAsY5uf5lb3j51q4p11pAIThaH3WGn8QvcOjZoruZt/UJR8xRCzC5IzhdXJ5sG 747246+vbf/pCiaOHfWLEm0gaxL6wz8mehrxe0rF5vKIeqaZXCIaOPcM2uoLviQ8 v0FIHpE4m+YnyAYddBTw73FZD1q4TvLT1spupQANT3E174qNRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOplMSZVeW/DuVQMFj/ZX5Xz4TkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZTM0NjljMzItNjljNi0z MzlhLTliOTEtMGUxZTJhYjIyZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzrzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFkZXfrSUpwMGI8wxjzS+Z8ygFCIWjrA3j9OabkaNEFeOGCskaETypi YUtaMQ5CroQshmJXHZj6MBDTw8YA35Sbcz3tlohSSmzAi0RBdKAlb+fvJsKNVxma lEOnYRhTXYE2lZ2dJuFHnW0Vl6lu2Tdy7HPeze9EbB9RmPfGFhxZe85v+gCc4xfk yA3pnL/tBWjMSra4gSe5DZioGOa/sKuQM8/L++gEYqDIoLzx8Fe6LzNSNYOMXLAB p3Cwfzm1sUi0CINq8B7VVoU4AOGAVZ0bsLcAhlRpKUwdSOO2DSQj3fSv0c1y75KN uV4Jc5WUE+pLA5JYSPFrWi3YvUrlEHQ= -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:53 2026 by rpki-client