$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa File: 820be15f-1ab0-3e6c-8554-951d99d18e99.roa (raw, json) Hash identifier: B8NDTFQKECAAKuLVvJeESBEqYH1H9iAwJUazXXeuzxw= Subject key identifier: 4A:B7:E6:A9:39:3A:73:87:5D:84:61:51:92:60:3A:58:29:29:BE:2F Certificate issuer: /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Certificate serial: 010D0C9F4328584D80FFF5C372159A8E65A1AFB6 Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 3555 IP address blocks: 192.31.9.0/24 maxlen: 24 198.17.99.0/24 maxlen: 24 198.22.152.0/24 maxlen: 24 198.137.234.0/23 maxlen: 23 199.74.244.0/24 maxlen: 24 199.79.216.0/24 maxlen: 24 199.89.132.0/23 maxlen: 23 199.89.158.0/23 maxlen: 23 199.89.160.0/24 maxlen: 24 204.89.153.0/24 maxlen: 24 204.89.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f5:c3:72:15:9a:8e:65:a1:af:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=76ce9831-5749-4dbd-943b-0cf0538711dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4b:72:9d:8e:09:85:c4:51:10:4c:f6:4b:c8: d5:c3:97:c8:21:da:c4:f4:3f:d5:ab:b3:61:ad:e7: 3a:17:91:d0:81:cb:34:42:20:36:e6:19:0f:0d:6e: 08:8e:1e:d6:87:98:d4:01:fb:a9:2c:87:78:37:39: ae:aa:68:47:a4:c2:06:fe:ed:eb:d3:8d:7a:63:8c: 3e:a9:f4:a7:d0:8c:02:ed:d9:80:35:de:88:da:00: be:7f:e5:ad:26:cd:51:05:44:5d:c9:0d:7e:9b:c3: 3a:7a:b9:09:a0:70:97:d4:32:b5:77:3c:5a:a2:48: d8:ee:2a:1b:7f:41:8d:e4:e8:d7:7b:3a:64:25:87: c8:3c:89:21:b6:fb:75:88:80:7a:35:2f:af:af:2b: fa:2e:70:55:14:d9:d3:45:2f:32:0e:d8:a7:53:a1: 11:6b:44:69:d0:7c:16:59:1b:54:51:91:3e:cb:73: 80:38:08:99:d5:81:f9:d4:16:2f:0c:c7:08:21:af: fa:35:8a:b2:92:63:76:b6:64:87:f4:af:d1:42:6e: cc:a7:5c:b0:2e:ac:ae:b6:87:9d:38:a3:92:e0:85: a0:5d:a6:b5:68:ef:31:49:d2:c7:67:64:85:df:4f: d0:9f:1e:a8:36:0b:26:5a:90:a0:17:4a:ee:d4:5d: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B7:E6:A9:39:3A:73:87:5D:84:61:51:92:60:3A:58:29:29:BE:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl X509v3 Authority Key Identifier: keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer sbgp-ipAddrBlock: critical IPv4: 192.31.9.0/24 198.17.99.0/24 198.22.152.0/24 198.137.234.0/23 199.74.244.0/24 199.79.216.0/24 199.89.132.0/23 199.89.158.0-199.89.160.255 204.89.153.0-204.89.154.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c7:ab:07:7e:e3:9b:a9:8a:3f:08:e1:6f:a5:92:9c:0c:74: 55:5f:78:f9:32:d4:8d:7f:90:2f:0a:2e:8a:dd:1d:b0:c3:2e: 07:96:30:a6:2c:82:28:ec:61:30:5a:ed:64:f6:93:4e:cc:c0: 8e:90:ee:7a:72:63:5e:d5:83:e2:23:d6:38:ae:48:f7:78:ce: 39:ed:29:58:d5:f8:b4:e9:76:23:ce:99:c4:7c:b9:59:a4:db: 1a:af:fa:8b:8f:a3:80:7b:8f:7b:e0:31:75:05:b5:58:86:b7: eb:08:7a:ea:dc:20:c5:4d:93:0c:42:14:bc:6f:d8:19:96:42: 10:aa:21:88:2d:34:a0:59:18:03:d8:84:21:50:97:23:c2:58: d3:75:ca:80:cf:38:49:7c:18:60:b2:5b:f6:8a:30:d2:2a:a1: 9e:e6:c4:fd:0b:e2:8a:67:a7:85:c3:01:8a:20:ae:c0:7a:8c: d0:d1:ea:f3:6b:8e:2b:cd:63:2b:47:8d:af:be:b9:d3:9b:0f: 63:15:22:f3:16:e6:01:59:02:4e:27:f1:2a:bf:b8:b8:c2:72: 2d:ec:8e:5a:87:cc:77:6d:66:7d:f2:d2:b2:b9:c5:bf:ef:67: 6d:6d:2a:33:0e:4b:a7:d0:02:ff:34:4e:12:5e:07:d5:78:36: f7:8d:04:90 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWE2A//XDchWajmWhr7YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiY2YzOGItYzQ2ZC00YmYxLTg3MDUtODhhZWVjMTlh YmYxMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk NzZjZTk4MzEtNTc0OS00ZGJkLTk0M2ItMGNmMDUzODcxMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0tynY4JhcRREEz2S8jVw5fIIdrE9D/Vq7Nh rec6F5HQgcs0QiA25hkPDW4Ijh7Wh5jUAfupLId4NzmuqmhHpMIG/u3r0416Y4w+ qfSn0IwC7dmANd6I2gC+f+WtJs1RBURdyQ1+m8M6erkJoHCX1DK1dzxaokjY7iob f0GN5OjXezpkJYfIPIkhtvt1iIB6NS+vryv6LnBVFNnTRS8yDtinU6ERa0Rp0HwW WRtUUZE+y3OAOAiZ1YH51BYvDMcIIa/6NYqykmN2tmSH9K/RQm7Mp1ywLqyutoed OKOS4IWgXaa1aO8xSdLHZ2SF30/Qnx6oNgsmWpCgF0ru1F1ugQIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFEq35qk5OnOHXYRhUZJgOlgpKb4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJj ZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFlZWMxOWFiZjEvODIwYmUxNWYtMWFiMC0z ZTZjLTg1NTQtOTUxZDk5ZDE4ZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzJiY2YzOGItYzQ2ZC00YmYxLTg3 MDUtODhhZWVjMTlhYmYxLzMyYmNmMzhiLWM0NmQtNGJmMS04NzA1LTg4YWVlYzE5 YWJmMS5jcmwwHwYDVR0jBBgwFoAUZ4kEXXo/RjGOHDz4F8NW8uOG+JswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJjZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFl ZWMxOWFiZjEuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAwB8JAwQA xhFjAwQAxhaYAwQBxonqAwQAx0r0AwQAx0/YAwQBx1mEMAwDBAHHWZ4DBADHWaAw DAMEAMxZmQMEAMxZmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFx6sHfuObqYo/COFvpZKcDHRVX3j5MtSN f5AvCi6K3R2wwy4HljCmLIIo7GEwWu1k9pNOzMCOkO56cmNe1YPiI9Y4rkj3eM45 7SlY1fi06XYjzpnEfLlZpNsar/qLj6OAe4974DF1BbVYhrfrCHrq3CDFTZMMQhS8 b9gZlkIQqiGILTSgWRgD2IQhUJcjwljTdcqAzzhJfBhgslv2ijDSKqGe5sT9C+KK Z6eFwwGKIK7AeozQ0erza44rzWMrR42vvrnTmw9jFSLzFuYBWQJOJ/Eqv7i4wnIt 7I5ah8x3bWZ98tKyucW/72dtbSozDkun0AL/NE4SXgfVeDb3jQSQ -----END CERTIFICATE-----Generated at Fri Apr 17 23:42:13 2026 by rpki-client