$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa File: 59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa (raw, json) Hash identifier: VCD5JyFYzfIqoc1Ek9WTgUoSAn5g2amaTqESclLx3hc= Subject key identifier: 45:49:57:26:AF:0E:B7:7C:A9:0D:2A:CC:F9:0A:97:25:61:DC:C3:9B Certificate issuer: /CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Certificate serial: 010D0C9F4328584EF18206FCE263596AC7726680 Authority key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 209242 IP address blocks: 199.33.230.0/24 maxlen: 24 199.33.231.0/24 maxlen: 24 199.33.232.0/24 maxlen: 24 199.33.233.0/24 maxlen: 24 2001:503:ff40::/48 maxlen: 48 2001:503:ff41::/48 maxlen: 48 2001:503:ff42::/48 maxlen: 48 2001:503:ff43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:06:fc:e2:63:59:6a:c7:72:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=3a009635-2205-4ac8-b60b-9d805e3f0578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:22:be:9c:1a:10:71:20:74:5c:10:d0:61: 58:5a:e0:2b:95:46:d1:e1:f5:ff:6c:10:4b:ec:f5: 70:3e:ee:80:85:f8:f2:bb:99:6e:23:32:13:98:f3: ee:99:aa:a6:32:f4:2a:37:44:41:35:ca:24:91:bf: 04:91:46:d1:f0:ab:82:22:f0:a7:e9:35:d9:7e:49: bd:65:7c:62:cf:fa:0f:f3:e6:d4:8f:f5:ec:d6:ce: d4:2c:58:3f:11:6e:5b:4e:5d:35:a6:db:74:c9:41: 5b:aa:b9:38:b7:b7:c5:c3:7c:cc:09:90:d3:f3:1c: af:a3:5d:ee:46:14:ca:ca:89:80:ed:d8:d7:16:c7: fe:24:92:51:f0:1f:31:d4:34:67:e9:25:3b:40:c8: c2:87:d3:34:4e:b4:5a:fb:aa:23:70:45:2f:42:a3: fa:30:b0:37:6e:58:52:e1:13:5f:9a:d3:e2:de:19: 17:f2:d2:70:f6:ff:f1:59:bb:b9:83:4e:26:af:97: 94:d5:30:c6:b1:ef:0c:8f:93:54:a2:bd:01:a1:4f: b1:c9:9e:0d:e3:1f:7a:1f:07:2c:b1:fd:95:8b:22: 36:47:20:90:2e:95:20:32:92:f2:5e:44:cf:6b:d0: e7:ce:5f:1b:d3:bd:95:58:2e:bd:ab:aa:91:57:85: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:49:57:26:AF:0E:B7:7C:A9:0D:2A:CC:F9:0A:97:25:61:DC:C3:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl X509v3 Authority Key Identifier: keyid:3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer sbgp-ipAddrBlock: critical IPv4: 199.33.230.0-199.33.233.255 IPv6: 2001:503:ff40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ff:db:a5:ae:63:ab:82:93:87:99:57:9a:40:33:41:aa:d1: a2:b3:98:0b:39:44:88:f0:6a:55:dc:c2:ba:32:e5:05:6e:ba: 5e:ba:bd:56:23:da:e8:0e:82:e5:af:7b:ef:f9:c1:57:ec:00: 8d:08:67:7f:dd:68:45:f4:b2:70:68:a5:c6:35:bc:21:3e:11: 6c:42:5c:6e:a6:9e:45:a2:4f:59:e9:62:ff:3b:dd:a1:1e:11: ac:4c:3a:9b:99:27:97:5b:3f:68:1c:f3:a4:02:e0:a7:6a:fa: c3:c7:6c:91:1a:f0:8d:5c:e4:d5:8c:3e:43:91:d2:09:bd:3c: 2a:d3:58:be:fc:fa:89:bd:00:e4:e3:60:01:75:cd:57:bf:fc: dd:60:a5:7a:24:ef:fc:57:40:1b:93:c0:e8:83:36:0c:30:7d: 25:6b:8c:f1:b7:0c:f5:09:ff:7e:99:70:45:e5:9e:a0:fd:0e: aa:e7:66:8a:dd:4b:b3:23:a7:63:21:04:1a:a8:0d:f0:28:23: 7b:e0:3b:1a:d5:23:8c:f2:a2:17:c2:61:30:39:45:ed:2d:dc: 43:e8:1d:f9:78:6c:e3:fc:f7:b0:b9:25:81:63:2f:b2:ee:b8: d0:e4:4e:da:e8:33:6f:e5:3a:b9:45:c4:49:09:04:68:b3:43: 57:2d:bf:c2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7xggb84mNZasdyZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJkOWI2YTctMmVkNS00NDhiLTliY2ItOGQyNjJhY2Mz Zjc2MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk M2EwMDk2MzUtMjIwNS00YWM4LWI2MGItOWQ4MDVlM2YwNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu8ivpwaEHEgdFwQ0GFYWuArlUbR4fX/bBBL 7PVwPu6Ahfjyu5luIzITmPPumaqmMvQqN0RBNcokkb8EkUbR8KuCIvCn6TXZfkm9 ZXxiz/oP8+bUj/Xs1s7ULFg/EW5bTl01ptt0yUFbqrk4t7fFw3zMCZDT8xyvo13u RhTKyomA7djXFsf+JJJR8B8x1DRn6SU7QMjCh9M0TrRa+6ojcEUvQqP6MLA3blhS 4RNfmtPi3hkX8tJw9v/xWbu5g04mr5eU1TDGse8Mj5NUor0BoU+xyZ4N4x96Hwcs sf2ViyI2RyCQLpUgMpLyXkTPa9Dnzl8b072VWC69q6qRV4Xu5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEVJVyavDrd8qQ0qzPkKlyVh3MObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMmQ5 YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFjYzNmNzYvNTljMTRkZWItNTc5NC0z ZDU1LWEzM2EtZGQ1MGRjN2U2YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzJkOWI2YTctMmVkNS00NDhiLTli Y2ItOGQyNjJhY2MzZjc2LzMyZDliNmE3LTJlZDUtNDQ4Yi05YmNiLThkMjYyYWNj M2Y3Ni5jcmwwHwYDVR0jBBgwFoAUP3+qd7+v5ysqs8rSHqxMEAEdpCowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2 MmFjYzNmNzYuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAHHIeYD BAHHIegwDwQCAAIwCQMHAiABBQP/QDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD/9ulrmOrgpOHmVeaQDNB qtGis5gLOUSI8GpV3MK6MuUFbrpeur1WI9roDoLlr3vv+cFX7ACNCGd/3WhF9LJw aKXGNbwhPhFsQlxupp5Fok9Z6WL/O92hHhGsTDqbmSeXWz9oHPOkAuCnavrDx2yR GvCNXOTVjD5DkdIJvTwq01i+/PqJvQDk42ABdc1Xv/zdYKV6JO/8V0Abk8DogzYM MH0la4zxtwz1Cf9+mXBF5Z6g/Q6q52aK3UuzI6djIQQaqA3wKCN74Dsa1SOM8qIX wmEwOUXtLdxD6B35eGzj/PewuSWBYy+y7rjQ5E7a6DNv5Tq5RcRJCQRos0NXLb/C -----END CERTIFICATE-----Generated at Tue Sep 22 00:02:46 2026 by rpki-client