$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa File: ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa (raw, json) Hash identifier: m26er/Hq9nYNg4PooepUZ14q+JFknY0VwO9fCYtX8O0= Subject key identifier: 3D:E5:AB:A2:72:82:D2:4E:46:23:10:F6:5E:E7:81:09:FD:8F:CB:78 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584C874175CB474A6F7810044680 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa Signing time: Thu 15 Jan 2026 02:00:31 +0000 ROA not before: Thu 15 Jan 2026 02:00:31 +0000 ROA not after: Wed 15 Apr 2026 01:00:31 +0000 asID: 399629 IP address blocks: 67.217.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:87:41:75:cb:47:4a:6f:78:10:04:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jan 15 02:00:31 2026 GMT Not After : Apr 15 01:00:31 2026 GMT Subject: CN=7970abbd-97b9-4914-8ea3-d6f2ac746e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:5e:40:b4:d6:de:6e:88:ba:a0:56:b5:20: a5:3c:35:05:99:60:96:10:5a:6d:82:ad:e1:8b:7a: 78:be:10:d6:8f:65:13:61:39:ac:e1:2c:b0:bf:f9: ce:f4:aa:12:5b:f0:3b:3f:b4:ca:e4:e1:27:6e:b6: 82:34:41:c3:29:d4:5f:c4:a7:ff:56:81:eb:76:87: d0:55:ae:f7:f6:51:f7:f3:1a:f3:74:57:19:da:e7: dd:45:06:6f:98:87:e3:f3:df:15:10:07:c6:22:e1: c7:34:94:a2:c8:0d:66:8a:15:53:d3:a1:96:27:97: 40:62:10:5e:61:a7:37:46:a1:f2:aa:2d:27:43:64: a3:7d:01:5d:a2:7d:d7:9f:af:b1:74:2c:c9:9d:e2: e5:e3:48:27:59:7d:c3:90:81:9b:bb:39:76:ca:e7: 17:59:52:6f:29:30:56:21:f0:5e:d8:23:04:cc:85: 3d:6c:59:01:18:01:ea:65:bc:6e:8a:01:c2:37:12: 26:60:c5:34:6c:c4:bb:5a:be:82:96:3b:dc:fc:cf: 08:71:fb:5f:a8:f2:89:03:5c:e0:9f:05:92:66:a4: 19:83:15:88:23:b1:92:4f:bf:4e:0e:69:86:d7:09: b3:e2:9f:d4:d3:b7:23:e2:43:dd:eb:b2:dd:96:60: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E5:AB:A2:72:82:D2:4E:46:23:10:F6:5E:E7:81:09:FD:8F:CB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 67.217.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:0f:8a:d6:7e:31:15:7f:74:89:36:bc:d5:86:a1:5b:bf:83: 0f:9c:69:11:6b:15:b0:76:50:80:e2:ca:1d:25:d6:71:ef:76: 23:94:05:75:2d:50:a9:86:27:2c:86:ea:3b:50:be:57:b7:1e: 53:79:7a:12:d7:d8:82:6d:df:6d:f1:bf:8d:58:88:e2:a8:07: d6:66:ab:7b:39:52:83:09:c8:b1:ea:5b:2b:fb:e8:1f:bd:42: b5:90:23:91:af:64:32:aa:b7:d8:ce:7d:f4:44:77:7c:25:10: 90:6a:1b:da:b8:87:83:dd:7b:29:ef:1e:6e:d1:1b:42:22:66: f6:69:21:2a:01:b8:d0:85:25:4e:ae:27:13:0c:aa:34:0d:08: 66:74:c1:c8:a7:60:24:30:83:bf:00:29:0d:0e:40:2a:be:16: eb:de:46:10:f1:48:f1:83:62:c5:17:20:70:75:37:8c:c4:e0: 01:aa:87:00:a4:08:30:26:ff:72:81:83:5b:81:b8:e3:e1:5e: 6f:a5:79:3e:f6:ad:cf:fe:cb:b0:cd:1c:c0:87:99:c1:0c:ff: 60:33:61:71:de:73:2c:41:66:02:22:0f:68:ba:79:8c:67:3b: a7:56:81:1e:c0:7a:6f:b3:6e:50:92:f6:bf:27:45:cf:02:8b: 73:59:34:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQXXLR0pveBAERoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk Nzk3MGFiYmQtOTdiOS00OTE0LThlYTMtZDZmMmFjNzQ2ZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIdeQLTW3m6IuqBWtSClPDUFmWCWEFptgq3h i3p4vhDWj2UTYTms4Sywv/nO9KoSW/A7P7TK5OEnbraCNEHDKdRfxKf/VoHrdofQ Va739lH38xrzdFcZ2ufdRQZvmIfj898VEAfGIuHHNJSiyA1mihVT06GWJ5dAYhBe Yac3RqHyqi0nQ2SjfQFdon3Xn6+xdCzJneLl40gnWX3DkIGbuzl2yucXWVJvKTBW IfBe2CMEzIU9bFkBGAHqZbxuigHCNxImYMU0bMS7Wr6Cljvc/M8IcftfqPKJA1zg nwWSZqQZgxWII7GST79ODmmG1wmz4p/U07cj4kPd67LdlmDAlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3lq6JygtJORiMQ9l7ngQn9j8t4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZWQ1NjY1NjItMWM3Yi0z YzZlLTljYjEtODdiZjljNDNkMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9nkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQPitZ+MRV/dIk2vNWGoVu/gw+caRFrFbB2UIDiyh0l1nHvdiOUBXUt UKmGJyyG6jtQvle3HlN5ehLX2IJt323xv41YiOKoB9Zmq3s5UoMJyLHqWyv76B+9 QrWQI5GvZDKqt9jOffREd3wlEJBqG9q4h4PdeynvHm7RG0IiZvZpISoBuNCFJU6u JxMMqjQNCGZ0wcinYCQwg78AKQ0OQCq+FuveRhDxSPGDYsUXIHB1N4zE4AGqhwCk CDAm/3KBg1uBuOPhXm+leT72rc/+y7DNHMCHmcEM/2AzYXHecyxBZgIiD2i6eYxn O6dWgR7Aem+zblCS9r8nRc8Ci3NZNKE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:33 2026 by rpki-client