$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/32ab1c66-00d6-3a24-a3c7-5e277670d6b4.roa File: 32ab1c66-00d6-3a24-a3c7-5e277670d6b4.roa (raw, json) Hash identifier: tTQGAmfOScGrU9yfB43S9YYppao2WS1B1XoGcyT1NYw= Subject key identifier: AC:93:88:F6:F5:F2:02:A5:42:AE:AF:14:3E:4F:3A:67:BA:EC:6B:AF Certificate issuer: /CN=22d4b872-8325-44d1-958d-897bd254f68b Certificate serial: 010D0C9F4328584D9325684B6E220F9675A001C0 Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/32ab1c66-00d6-3a24-a3c7-5e277670d6b4.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 11404 IP address blocks: 206.251.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:68:4b:6e:22:0f:96:75:a0:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=8a206136-5821-4488-baa3-e5930fa8e98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:97:f7:a4:43:6c:06:7b:4e:6c:da:96:91:09: dd:b5:33:33:d1:49:39:c6:ce:35:fb:ca:32:45:27: ab:2e:80:61:cf:48:1b:4c:4a:97:c7:51:bb:44:04: c9:a0:ff:15:50:21:a2:fd:27:58:34:e4:70:b5:80: 44:f8:d4:33:d9:f8:97:43:1d:a9:0d:b4:ec:db:15: 8a:4e:64:17:6e:2a:25:e6:44:9f:3e:8d:08:a2:b0: 6b:f8:78:06:fc:9c:82:1d:1a:b1:d6:97:c0:69:1a: e4:fb:84:75:00:af:f8:a7:98:3b:1a:50:e7:b0:2b: 64:10:35:28:91:7b:e6:70:79:09:b2:25:6b:04:45: cd:78:a7:e7:c7:bb:15:e7:0c:e3:47:67:40:77:ed: e6:28:39:4b:27:70:3f:6e:ad:5c:c5:18:e7:ac:9e: 05:f5:14:9f:d6:af:47:ad:3a:ea:6e:6a:c7:e9:04: e1:e3:78:6c:7e:f3:2c:cd:61:2d:4f:22:d9:2f:ac: 7b:07:3f:79:b6:ec:bb:b9:83:0d:24:8d:eb:5a:1c: b8:ac:08:95:bc:dc:fa:aa:e0:30:f0:04:aa:81:c9: b6:32:9b:7c:14:87:c6:e8:f0:ce:33:6a:29:6f:22: 31:d4:f3:0d:6d:4e:a1:68:86:c2:8b:d8:56:22:5c: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:93:88:F6:F5:F2:02:A5:42:AE:AF:14:3E:4F:3A:67:BA:EC:6B:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/32ab1c66-00d6-3a24-a3c7-5e277670d6b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl X509v3 Authority Key Identifier: keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer sbgp-ipAddrBlock: critical IPv4: 206.251.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f1:d7:89:ac:0e:99:fe:2b:d6:d5:63:6a:ef:6d:88:02:12: e6:8d:c1:de:eb:16:bd:6a:43:8a:3d:8c:30:09:06:84:f2:5d: 46:c7:be:3d:72:a1:7b:38:11:60:c7:3f:ae:90:ec:23:48:43: 99:22:32:66:99:ab:f7:6f:d8:b9:79:72:2e:10:6b:1b:ee:57: 24:26:aa:41:fb:17:cc:bc:89:85:ec:5a:f5:4c:80:54:4f:c2: 77:17:0f:ab:5a:52:2f:6e:46:2b:b7:5c:5f:9b:11:9e:31:e3: ab:d0:3c:0f:b1:d3:40:9c:e1:80:1a:3d:6b:92:38:48:ee:38: 7f:0c:df:50:c1:5e:f5:97:45:1e:d4:91:22:c4:c0:6c:3e:9b: 0b:b2:2e:47:ea:18:c4:a9:ae:ff:61:60:37:25:c9:4e:1d:1f: 7d:84:55:d6:81:46:78:d2:4a:0e:22:4d:72:78:a2:ed:b9:69: ac:63:e6:7f:d9:aa:13:7a:41:22:e4:9c:a1:9a:f4:6f:e8:98: ba:cb:b3:51:80:5c:5e:58:f2:de:c4:de:59:d2:ef:22:d4:47: ab:4c:25:e3:ba:d2:c4:11:43:66:d7:49:20:64:6d:67:57:0d: 35:4e:fc:9f:b7:0a:5e:ac:ce:19:18:76:e8:48:0e:fd:cc:11: 04:3e:b5:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWhLbiIPlnWgAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm NjhiMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk OGEyMDYxMzYtNTgyMS00NDg4LWJhYTMtZTU5MzBmYThlOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5f3pENsBntObNqWkQndtTMz0Uk5xs41+8oy RSerLoBhz0gbTEqXx1G7RATJoP8VUCGi/SdYNORwtYBE+NQz2fiXQx2pDbTs2xWK TmQXbiol5kSfPo0IorBr+HgG/JyCHRqx1pfAaRrk+4R1AK/4p5g7GlDnsCtkEDUo kXvmcHkJsiVrBEXNeKfnx7sV5wzjR2dAd+3mKDlLJ3A/bq1cxRjnrJ4F9RSf1q9H rTrqbmrH6QTh43hsfvMszWEtTyLZL6x7Bz95tuy7uYMNJI3rWhy4rAiVvNz6quAw 8ASqgcm2Mpt8FIfG6PDOM2opbyIx1PMNbU6haIbCi9hWIlynwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyTiPb18gKlQq6vFD5POme67GuvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0 Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvMzJhYjFjNjYtMDBkNi0z YTI0LWEzYzctNWUyNzc2NzBkNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1 OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0 ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi ZDI1NGY2OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzvvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrx14msDpn+K9bVY2rvbYgCEuaNwd7rFr1qQ4o9jDAJBoTyXUbHvj1y oXs4EWDHP66Q7CNIQ5kiMmaZq/dv2Ll5ci4QaxvuVyQmqkH7F8y8iYXsWvVMgFRP wncXD6taUi9uRiu3XF+bEZ4x46vQPA+x00Cc4YAaPWuSOEjuOH8M31DBXvWXRR7U kSLEwGw+mwuyLkfqGMSprv9hYDclyU4dH32EVdaBRnjSSg4iTXJ4ou25aaxj5n/Z qhN6QSLknKGa9G/omLrLs1GAXF5Y8t7E3lnS7yLUR6tMJeO60sQRQ2bXSSBkbWdX DTVO/J+3Cl6szhkYduhIDv3MEQQ+tdo= -----END CERTIFICATE-----Generated at Wed May 13 14:26:20 2026 by rpki-client