$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa File: 32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa (raw, json) Hash identifier: VtRJsMnah3HHvwt4+bVvSG2SPB6hWjtHEqtgfl9CDg0= Subject key identifier: 6D:9C:11:62:5F:0A:8F:07:F3:E3:5E:95:B2:7C:44:DD:8E:C7:00:0A Certificate issuer: /CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Certificate serial: 010D0C9F4328584F03A7845101659857F28B30A0 Authority key identifier: 98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 2386 IP address blocks: 170.190.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:84:51:01:65:98:57:f2:8b:30:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=18ed80cf-ccbe-4187-85ea-5d1f537b2ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:02:c8:87:9f:55:60:0d:55:db:a0:c9:bd: 47:c1:d9:bc:c1:0a:f7:b7:29:70:ce:1c:e2:5b:4e: e6:b0:93:23:60:6d:03:b3:1f:fa:60:8e:6a:cb:af: 09:d2:90:e8:b6:84:84:4b:2b:d7:b0:c5:50:90:c4: 23:f2:fa:5a:f3:80:37:45:0c:9d:63:f5:ab:9c:9b: d7:33:64:ed:5b:0d:e5:fa:98:4c:9c:d5:67:bb:2f: ee:e0:9c:12:b1:5e:3f:60:b7:d0:8c:7e:c6:d1:c8: 0d:d0:c2:a4:f1:fc:a2:0b:e7:b1:a0:12:58:c1:58: ad:06:4d:5e:da:24:64:b1:9f:c6:5d:88:83:cb:83: 2c:84:46:be:52:94:a2:77:d5:8e:e9:db:13:4b:69: c6:f2:84:96:5e:8d:65:93:3a:8b:35:7b:52:04:bd: 65:13:4d:59:53:9b:c7:43:9f:63:70:91:37:3a:84: 0f:bd:dd:d2:e4:f1:e1:dd:be:97:cc:78:0b:b4:de: d2:1a:95:02:9a:78:ab:72:a0:ed:03:27:69:1d:72: 30:97:31:74:df:29:09:f5:bb:e6:d2:fe:c2:49:7f: b7:7b:da:d5:cf:d8:6f:01:65:43:b4:fb:4b:ab:0a: 57:31:f6:e0:3a:76:90:88:51:a1:ea:89:b7:73:3b: ae:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9C:11:62:5F:0A:8F:07:F3:E3:5E:95:B2:7C:44:DD:8E:C7:00:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl X509v3 Authority Key Identifier: keyid:98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer sbgp-ipAddrBlock: critical IPv4: 170.190.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:59:9c:b2:b3:42:46:3f:b0:95:79:ac:38:86:7f:18:15:77: 3b:f1:50:20:6b:e8:cc:81:d6:77:c5:a8:c7:f4:af:38:6f:94: a1:bc:69:fe:28:1c:94:f0:84:76:c2:42:43:e1:3a:7f:04:83: b5:e5:40:bf:4b:50:a2:9b:4b:26:d5:42:a3:48:aa:a7:02:05: 01:66:ad:7d:29:a9:33:16:9b:1b:ca:75:10:5e:56:ea:29:33: bd:6a:17:cc:40:fc:86:3c:88:ba:5d:fc:79:99:43:03:00:ae: fc:26:ca:4c:01:be:03:cb:dd:03:69:51:03:7b:a0:2c:a0:7e: be:00:8f:e1:44:66:b1:65:5d:64:45:a0:e2:b5:1e:ed:f0:91: 29:cf:c4:00:4a:a4:09:d5:df:28:c7:0c:73:34:82:39:71:f9: 11:a5:0b:a3:9c:03:5c:80:81:f5:2c:55:0b:7f:35:ad:be:83: 6f:40:63:58:78:37:c5:db:56:d7:92:2b:f2:eb:39:2b:a1:f7: e5:4f:91:0f:8f:db:12:77:cb:f4:97:fa:ec:ef:2c:bc:b7:5e: 0c:26:95:bd:d9:54:47:24:f2:45:e3:e7:78:25:14:2d:70:3b: bd:f8:dd:14:8b:36:15:a1:51:78:e2:64:76:8e:d8:ea:fe:68: cb:f9:cb:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp4RRAWWYV/KLMKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhYjQ3NGYtZTg2ZS00NTdjLThlNGYtNTI1ZTQ3M2Y5 ZTAxMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MThlZDgwY2YtY2NiZS00MTg3LTg1ZWEtNWQxZjUzN2IyY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlUCyIefVWANVdugyb1Hwdm8wQr3tylwzhzi W07msJMjYG0Dsx/6YI5qy68J0pDotoSESyvXsMVQkMQj8vpa84A3RQydY/WrnJvX M2TtWw3l+phMnNVnuy/u4JwSsV4/YLfQjH7G0cgN0MKk8fyiC+exoBJYwVitBk1e 2iRksZ/GXYiDy4MshEa+UpSid9WO6dsTS2nG8oSWXo1lkzqLNXtSBL1lE01ZU5vH Q59jcJE3OoQPvd3S5PHh3b6XzHgLtN7SGpUCmnircqDtAydpHXIwlzF03ykJ9bvm 0v7CSX+3e9rVz9hvAWVDtPtLqwpXMfbgOnaQiFGh6om3czuuRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2cEWJfCo8H8+NelbJ8RN2OxwAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80N2Fi NDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVlNDczZjllMDEvMzJmYmFjNGUtZTFhZS0z NmQwLTk0NjAtYzU2MzNjM2E5YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDdhYjQ3NGYtZTg2ZS00NTdjLThl NGYtNTI1ZTQ3M2Y5ZTAxLzQ3YWI0NzRmLWU4NmUtNDU3Yy04ZTRmLTUyNWU0NzNm OWUwMS5jcmwwHwYDVR0jBBgwFoAUmLjiKxPCPsM43Lo6U1UYTTFS8DEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80N2FiNDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVl NDczZjllMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqr4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJZnLKzQkY/sJV5rDiGfxgVdzvxUCBr6MyB1nfFqMf0rzhvlKG8af4o HJTwhHbCQkPhOn8Eg7XlQL9LUKKbSybVQqNIqqcCBQFmrX0pqTMWmxvKdRBeVuop M71qF8xA/IY8iLpd/HmZQwMArvwmykwBvgPL3QNpUQN7oCygfr4Aj+FEZrFlXWRF oOK1Hu3wkSnPxABKpAnV3yjHDHM0gjlx+RGlC6OcA1yAgfUsVQt/Na2+g29AY1h4 N8XbVteSK/LrOSuh9+VPkQ+P2xJ3y/SX+uzvLLy3Xgwmlb3ZVEck8kXj53glFC1w O7343RSLNhWhUXjiZHaO2Or+aMv5y9E= -----END CERTIFICATE-----Generated at Mon Sep 21 11:42:34 2026 by rpki-client