$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa File: 32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa (raw, json) Hash identifier: uGPGzkbk50tmvf8Tl04X5XdWlOnfBQKDlwbptrIpKiw= Subject key identifier: A5:43:DA:61:31:8B:6B:F5:59:AC:26:46:78:3C:FA:06:44:91:DD:BF Certificate issuer: /CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Certificate serial: 010D0C9F4328584D80FFEB174B2819E941078680 Authority key identifier: 98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 2386 IP address blocks: 170.190.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:eb:17:4b:28:19:e9:41:07:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=911af6ac-4906-4ec8-bb35-97d5611adec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fa:d9:d8:09:48:b3:da:86:f8:01:14:50:25: 43:6e:fb:ee:bb:b8:93:42:4b:4d:39:84:c4:26:39: 52:30:2e:f0:95:e2:be:0d:d7:be:82:d9:12:64:10: af:57:ff:a9:ef:58:36:08:61:d6:29:1b:40:90:16: fb:a5:16:14:c3:31:16:e5:32:da:59:37:54:a5:ae: 16:74:e7:5d:e6:7c:e0:c2:65:fa:e3:46:c2:45:6e: c0:a2:88:ae:e6:8d:26:6a:a9:35:f5:4d:19:01:cd: 65:d9:69:7a:29:7b:10:42:e8:bc:27:34:ca:bd:7f: be:76:7b:82:47:47:73:84:c0:ac:2d:88:e3:d8:34: 6a:d4:a6:04:b3:56:1a:09:fe:08:39:40:1b:60:d7: 92:24:e0:27:26:31:e3:48:3b:ea:c3:91:9e:9b:a6: 55:9f:5a:3b:c6:1b:64:7c:69:8f:3b:ed:c7:d1:53: 38:a1:e1:a2:44:58:a1:8b:5c:4a:b7:30:f9:1c:c4: a5:63:60:22:f0:ee:95:eb:43:15:96:28:54:78:b2: 54:ce:a7:70:04:36:23:f3:5c:95:a1:cc:22:1b:88: 67:23:d8:22:c5:69:2e:28:f4:15:0e:17:0b:b1:72: fc:77:c3:d4:ca:17:50:dd:e2:85:03:bb:0d:7c:78: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:43:DA:61:31:8B:6B:F5:59:AC:26:46:78:3C:FA:06:44:91:DD:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl X509v3 Authority Key Identifier: keyid:98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer sbgp-ipAddrBlock: critical IPv4: 170.190.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:ee:a4:9a:0f:b2:76:39:85:51:6b:b1:43:65:09:9d:30:7b: 36:8b:0e:b4:e8:4d:bf:cc:70:ee:7c:c1:43:ad:76:58:96:1d: e3:d7:65:25:d8:9a:06:c0:4d:2a:ce:87:96:6c:12:b3:0c:87: c8:68:48:69:42:4a:46:2a:11:1b:11:18:e9:75:dd:ec:55:9e: 91:ef:a7:e4:3e:2f:3f:6e:55:68:bc:45:17:20:06:fd:89:0e: 08:08:87:bf:8e:f1:52:c5:33:85:3b:da:ff:a5:39:ef:a8:38: b9:7c:21:2f:03:22:e6:19:0e:d4:cc:4e:a5:98:da:a1:41:dd: f3:dd:9d:14:b3:d4:44:38:98:6d:71:a7:0d:45:9a:37:e6:14: 05:b0:d8:0a:51:e0:a7:66:60:ab:e8:85:6b:c3:99:6b:f4:5f: 09:ee:09:9f:f6:81:ae:9c:63:61:94:97:32:0a:84:63:a5:db: 42:b9:6c:8c:00:63:2a:5f:66:07:40:79:08:41:08:0d:36:af: 41:5e:d9:d1:58:8d:02:75:d1:82:e4:4b:a4:56:fe:f9:ee:d1: 0b:51:23:7f:da:cd:5c:d1:ac:3b:5b:73:00:c0:94:76:47:53: 22:09:1a:12:da:7b:bb:d0:06:77:96:50:12:ca:3e:e7:49:2f: f7:85:31:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+sXSygZ6UEHhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhYjQ3NGYtZTg2ZS00NTdjLThlNGYtNTI1ZTQ3M2Y5 ZTAxMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk OTExYWY2YWMtNDkwNi00ZWM4LWJiMzUtOTdkNTYxMWFkZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/rZ2AlIs9qG+AEUUCVDbvvuu7iTQktNOYTE JjlSMC7wleK+Dde+gtkSZBCvV/+p71g2CGHWKRtAkBb7pRYUwzEW5TLaWTdUpa4W dOdd5nzgwmX640bCRW7Aooiu5o0maqk19U0ZAc1l2Wl6KXsQQui8JzTKvX++dnuC R0dzhMCsLYjj2DRq1KYEs1YaCf4IOUAbYNeSJOAnJjHjSDvqw5Gem6ZVn1o7xhtk fGmPO+3H0VM4oeGiRFihi1xKtzD5HMSlY2Ai8O6V60MVlihUeLJUzqdwBDYj81yV ocwiG4hnI9gixWkuKPQVDhcLsXL8d8PUyhdQ3eKFA7sNfHjVbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVD2mExi2v1WawmRng8+gZEkd2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80N2Fi NDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVlNDczZjllMDEvMzJmYmFjNGUtZTFhZS0z NmQwLTk0NjAtYzU2MzNjM2E5YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDdhYjQ3NGYtZTg2ZS00NTdjLThl NGYtNTI1ZTQ3M2Y5ZTAxLzQ3YWI0NzRmLWU4NmUtNDU3Yy04ZTRmLTUyNWU0NzNm OWUwMS5jcmwwHwYDVR0jBBgwFoAUmLjiKxPCPsM43Lo6U1UYTTFS8DEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80N2FiNDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVl NDczZjllMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqr4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMnupJoPsnY5hVFrsUNlCZ0wezaLDrToTb/McO58wUOtdliWHePXZSXY mgbATSrOh5ZsErMMh8hoSGlCSkYqERsRGOl13exVnpHvp+Q+Lz9uVWi8RRcgBv2J DggIh7+O8VLFM4U72v+lOe+oOLl8IS8DIuYZDtTMTqWY2qFB3fPdnRSz1EQ4mG1x pw1FmjfmFAWw2ApR4KdmYKvohWvDmWv0XwnuCZ/2ga6cY2GUlzIKhGOl20K5bIwA YypfZgdAeQhBCA02r0Fe2dFYjQJ10YLkS6RW/vnu0QtRI3/azVzRrDtbcwDAlHZH UyIJGhLae7vQBneWUBLKPudJL/eFMR0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:55:49 2026 by rpki-client