$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa File: 07a3338e-daba-38dd-af30-905208773fd9.roa (raw, json) Hash identifier: Z753Jb7HMtkJVPVxljbt4NpAqUTws6z1SUe2HH8gA4A= Subject key identifier: 50:80:D2:9C:60:B5:E5:89:B0:DA:FB:FE:82:E3:BD:97:6F:C1:53:8E Certificate issuer: /CN=32a9337d-d761-426f-939a-0a770ad5bcce Certificate serial: 010D0C9F4328584F3CE2A08B0F6B90DBE54AAE00 Authority key identifier: 40:43:B0:38:F3:FC:0B:65:CB:09:AE:82:F3:8D:D3:40:38:C2:B5:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 376 IP address blocks: 132.208.0.0/16 maxlen: 16 199.202.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a0:8b:0f:6b:90:db:e5:4a:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32a9337d-d761-426f-939a-0a770ad5bcce Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=cb7dd54e-c7c9-42ca-8775-c8cc2ce476ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bf:51:82:5d:7c:ca:cb:d1:a8:00:0e:03:f7: 10:a4:58:66:ae:fa:9e:ef:4e:a3:9b:cf:71:85:75: a4:c2:39:5d:c3:48:2c:19:a1:78:43:40:0d:90:73: 90:cf:ae:f3:e2:52:be:5e:c4:50:46:ac:d3:f7:2c: 7a:cf:1e:76:19:29:a1:d1:40:de:76:21:f9:db:9d: f3:05:fb:68:9d:9d:4a:40:31:9f:c8:c6:19:79:05: b1:fc:ed:e9:4b:ec:c2:f5:ed:1d:99:82:33:38:42: 37:95:98:22:22:16:c3:fc:5a:2a:22:b2:45:96:0a: ec:9e:4e:f6:6e:29:f4:33:d9:ef:01:32:ee:e8:20: 7d:39:89:70:82:ea:64:3d:ac:0c:57:62:f7:88:8f: ac:47:7d:6b:53:e8:39:17:67:dc:3b:49:7d:28:10: 4f:79:64:12:1a:15:9b:8e:a0:85:01:eb:33:4b:ce: 8d:01:db:91:c1:49:47:0a:2b:eb:d4:68:e7:2d:a2: 38:09:33:92:13:10:07:7c:98:1d:fe:d4:af:1e:25: 87:22:1c:8d:a8:13:ef:78:fa:53:d7:dc:00:1b:0e: 43:20:c0:6c:17:df:62:4d:7f:4f:fd:64:d5:64:d9: e0:7d:4f:dd:f6:52:65:66:a1:bb:32:83:c8:fc:2f: 4e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:80:D2:9C:60:B5:E5:89:B0:DA:FB:FE:82:E3:BD:97:6F:C1:53:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.crl X509v3 Authority Key Identifier: keyid:40:43:B0:38:F3:FC:0B:65:CB:09:AE:82:F3:8D:D3:40:38:C2:B5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer sbgp-ipAddrBlock: critical IPv4: 132.208.0.0/16 199.202.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c3:12:19:48:83:2b:fb:2c:af:bf:f9:ff:ab:7c:ff:39:eb: 0e:2e:53:a4:77:53:27:35:47:87:d1:29:6a:e4:84:5e:6a:1e: f7:92:fe:83:79:e5:8b:1d:f6:26:4b:75:5c:9a:31:1c:eb:08: e2:ba:1e:f4:fe:d6:1f:19:73:a5:b2:bf:f6:d3:30:e1:22:8a: 8c:88:71:3c:de:93:8b:25:3d:92:2a:f1:bc:a9:43:f1:8d:65: 7d:dc:d6:d5:6a:57:b8:cf:d4:dd:ab:ce:7d:0b:ca:d2:d7:4d: f2:cb:f1:d5:87:df:a1:4e:bc:ef:36:ec:c8:d6:7e:0c:7e:c5: 9f:85:be:df:5a:14:6b:fe:b8:31:e2:9e:5e:0b:b9:7d:0c:69: 5a:67:40:6a:65:d9:1c:e5:27:c9:17:0b:05:f8:e0:b0:39:6d: 8e:a5:f8:4e:98:8b:0a:66:c4:66:52:83:a7:0d:42:db:08:a4: 10:45:b0:6c:8f:7a:fb:e5:2c:a7:a3:2e:dc:f2:a1:d5:73:9b: 95:69:79:c3:c9:31:d9:67:e8:ea:2f:b0:05:15:00:a8:45:c2: dc:48:27:99:12:01:45:b8:f0:c7:34:e6:1f:c3:39:a3:21:d1: ff:34:24:04:6b:77:41:3c:25:84:1c:8f:1b:bc:c1:59:20:9b: c9:f7:62:db -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE884qCLD2uQ2+VKrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJhOTMzN2QtZDc2MS00MjZmLTkzOWEtMGE3NzBhZDVi Y2NlMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk Y2I3ZGQ1NGUtYzdjOS00MmNhLTg3NzUtYzhjYzJjZTQ3NmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb9Rgl18ysvRqAAOA/cQpFhmrvqe706jm89x hXWkwjldw0gsGaF4Q0ANkHOQz67z4lK+XsRQRqzT9yx6zx52GSmh0UDediH5253z BftonZ1KQDGfyMYZeQWx/O3pS+zC9e0dmYIzOEI3lZgiIhbD/FoqIrJFlgrsnk72 bin0M9nvATLu6CB9OYlwgupkPawMV2L3iI+sR31rU+g5F2fcO0l9KBBPeWQSGhWb jqCFAeszS86NAduRwUlHCivr1GjnLaI4CTOSExAHfJgd/tSvHiWHIhyNqBPvePpT 19wAGw5DIMBsF99iTX9P/WTVZNngfU/d9lJlZqG7MoPI/C9OZQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFFCA0pxgteWJsNr7/oLjvZdvwVOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMmE5 MzM3ZC1kNzYxLTQyNmYtOTM5YS0wYTc3MGFkNWJjY2UvMDdhMzMzOGUtZGFiYS0z OGRkLWFmMzAtOTA1MjA4NzczZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzJhOTMzN2QtZDc2MS00MjZmLTkz OWEtMGE3NzBhZDViY2NlLzMyYTkzMzdkLWQ3NjEtNDI2Zi05MzlhLTBhNzcwYWQ1 YmNjZS5jcmwwHwYDVR0jBBgwFoAUQEOwOPP8C2XLCa6C843TQDjCtf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMmE5MzM3ZC1kNzYxLTQyNmYtOTM5YS0wYTc3 MGFkNWJjY2UuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAhNADBADH ykgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEASMMSGUiDK/ssr7/5/6t8/znrDi5TpHdTJzVHh9EpauSEXmoe 95L+g3nlix32Jkt1XJoxHOsI4roe9P7WHxlzpbK/9tMw4SKKjIhxPN6TiyU9kirx vKlD8Y1lfdzW1WpXuM/U3avOfQvK0tdN8svx1YffoU687zbsyNZ+DH7Fn4W+31oU a/64MeKeXgu5fQxpWmdAamXZHOUnyRcLBfjgsDltjqX4TpiLCmbEZlKDpw1C2wik EEWwbI96++Usp6Mu3PKh1XOblWl5w8kx2Wfo6i+wBRUAqEXC3EgnmRIBRbjwxzTm H8M5oyHR/zQkBGt3QTwlhByPG7zBWSCbyfdi2w== -----END CERTIFICATE-----Generated at Sat Sep 26 18:43:40 2026 by rpki-client