$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa File: 32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa (raw, json) Hash identifier: /iEjcJ2qxpKH/Tcyd44D+ayJRHJAYT5tRAspB4UZmvo= Subject key identifier: 0D:CC:15:56:8B:49:19:E6:B3:43:15:16:90:4C:4A:FC:0F:30:18:81 Certificate issuer: /CN=79af2149-f711-4230-b22d-36786f0219ac Certificate serial: 010D0C9F4328584F0D6CDE27F62B47D72A713B80 Authority key identifier: 57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 398182 IP address blocks: 64.186.10.0/24 maxlen: 24 198.135.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:de:27:f6:2b:47:d7:2a:71:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79af2149-f711-4230-b22d-36786f0219ac Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=dfc85a3f-e5b2-4f31-8cf8-0a17ef39ae15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:07:65:a9:30:19:a0:8e:2e:10:c4:58:db: 16:6d:77:5b:ed:b9:c9:15:f3:27:e0:17:fe:0f:c8: ad:38:ad:63:2e:4d:bd:7a:d1:ab:58:dd:6a:ce:fd: 52:02:15:f7:6e:d0:f0:93:f6:34:26:c5:4c:55:f6: eb:22:63:28:f5:8a:ab:0d:52:fa:66:e8:99:75:51: e1:74:93:ce:54:be:a2:72:e4:b8:07:3c:0e:e6:80: 29:ca:ba:ea:05:df:7f:2d:93:2e:c6:08:00:11:4a: ab:64:48:68:db:e9:6a:8f:2c:b1:7d:04:0e:b5:02: e9:08:f2:f4:5d:48:21:76:8a:c7:51:06:41:a7:fe: 28:1d:93:ca:58:36:e6:52:25:5d:31:65:a6:e6:e5: e2:13:d0:89:27:a5:55:78:0e:12:62:af:46:1a:c1: e5:7e:2a:34:f0:74:cc:cc:89:93:0e:d0:d4:11:3a: 47:1e:59:f3:ff:68:38:2c:55:99:9c:49:86:40:8e: 05:10:67:84:10:92:26:7e:a7:3e:7d:f4:30:44:14: d6:bb:cd:b7:71:e6:a9:28:47:7c:63:89:d8:f7:bc: 80:ec:9c:af:6d:54:b6:dd:74:ba:b9:75:69:b5:f8: ff:30:2d:7e:62:91:07:7b:7d:64:db:78:83:91:36: b7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CC:15:56:8B:49:19:E6:B3:43:15:16:90:4C:4A:FC:0F:30:18:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl X509v3 Authority Key Identifier: keyid:57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer sbgp-ipAddrBlock: critical IPv4: 64.186.10.0/24 198.135.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:2d:1b:65:09:4b:93:d7:d9:97:db:fc:63:da:f1:ce:47:69: d4:37:71:c3:f2:e7:e0:38:d3:2f:17:20:a5:c5:a4:b0:f8:36: 86:44:ea:bc:09:86:8a:c3:a7:41:eb:97:ef:6c:0c:8a:f1:f6: 94:cf:7d:69:4f:87:f8:44:8c:c5:cc:98:7b:41:13:68:63:a4: 09:a6:03:d8:46:a8:8d:c7:2f:52:5c:29:21:65:e4:8d:1a:e2: 74:3a:bc:82:4a:5a:7f:3e:d2:d5:87:4c:72:f8:a2:6d:4f:fd: a8:39:2e:d5:f9:9d:12:85:08:06:45:42:08:35:9e:f8:d4:68: 0d:50:0e:f3:71:e7:b7:1e:5b:73:c4:74:5f:8c:12:e4:2e:dc: 61:64:ce:f7:b5:c0:ae:0f:39:3b:9d:0a:ad:24:97:4a:3b:a8: ab:16:2f:a3:d6:99:91:9f:ff:54:e4:a6:08:ea:24:c8:f7:5d: a2:f5:5d:d6:cd:58:75:d6:ea:96:90:49:83:36:ea:44:95:2f: 48:7b:83:63:ae:21:80:0a:39:f0:ef:9e:14:45:30:a7:bd:24: b4:c4:39:09:6e:fd:0c:36:e7:a2:8e:6a:85:51:c0:98:51:9c: 34:a2:d3:b9:63:62:20:1e:6f:f2:8b:31:a0:90:22:7d:c8:fa: 7a:94:7f:52 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8NbN4n9itH1ypxO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzlhZjIxNDktZjcxMS00MjMwLWIyMmQtMzY3ODZmMDIx OWFjMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZGZjODVhM2YtZTViMi00ZjMxLThjZjgtMGExN2VmMzlhZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovgHZakwGaCOLhDEWNsWbXdb7bnJFfMn4Bf+ D8itOK1jLk29etGrWN1qzv1SAhX3btDwk/Y0JsVMVfbrImMo9YqrDVL6ZuiZdVHh dJPOVL6icuS4BzwO5oApyrrqBd9/LZMuxggAEUqrZEho2+lqjyyxfQQOtQLpCPL0 XUghdorHUQZBp/4oHZPKWDbmUiVdMWWm5uXiE9CJJ6VVeA4SYq9GGsHlfio08HTM zImTDtDUETpHHlnz/2g4LFWZnEmGQI4FEGeEEJImfqc+ffQwRBTWu823ceapKEd8 Y4nY97yA7JyvbVS23XS6uXVptfj/MC1+YpEHe31k23iDkTa3ewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA3MFVaLSRnms0MVFpBMSvwPMBiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OWFm MjE0OS1mNzExLTQyMzAtYjIyZC0zNjc4NmYwMjE5YWMvMzJlZWNlYjEtM2FjZC0z ZDdlLThlNjgtNWYwODYzZDczNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzlhZjIxNDktZjcxMS00MjMwLWIy MmQtMzY3ODZmMDIxOWFjLzc5YWYyMTQ5LWY3MTEtNDIzMC1iMjJkLTM2Nzg2ZjAy MTlhYy5jcmwwHwYDVR0jBBgwFoAUV4uAqhRzWbejGq79NBP1W9oqD0owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OWFmMjE0OS1mNzExLTQyMzAtYjIyZC0zNjc4 NmYwMjE5YWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQLoKAwQA xoeYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF8tG2UJS5PX2Zfb/GPa8c5HadQ3ccPy5+A40y8XIKXFpLD4 NoZE6rwJhorDp0Hrl+9sDIrx9pTPfWlPh/hEjMXMmHtBE2hjpAmmA9hGqI3HL1Jc KSFl5I0a4nQ6vIJKWn8+0tWHTHL4om1P/ag5LtX5nRKFCAZFQgg1nvjUaA1QDvNx 57ceW3PEdF+MEuQu3GFkzve1wK4POTudCq0kl0o7qKsWL6PWmZGf/1TkpgjqJMj3 XaL1XdbNWHXW6paQSYM26kSVL0h7g2OuIYAKOfDvnhRFMKe9JLTEOQlu/Qw256KO aoVRwJhRnDSi07ljYiAeb/KLMaCQIn3I+nqUf1I= -----END CERTIFICATE-----Generated at Tue Oct 13 09:17:46 2026 by rpki-client