$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa File: e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa (raw, json) Hash identifier: yi8x9wpQ+XvJPnK6BJo0G9uLz/DNvrWtkbwu5pKV1wg= Subject key identifier: FB:1D:DA:45:38:40:8B:5D:59:36:5E:93:75:D8:34:38:80:2E:DA:2E Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F4328584E640F644BB27D95A5EF8BD780 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 199.19.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:64:4b:b2:7d:95:a5:ef:8b:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=38d4c16e-f57b-4af5-85b7-d308219444ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:5d:0f:e2:64:88:54:a4:77:0f:ea:a8:c5: 24:9f:a4:40:e5:84:51:12:60:47:9f:cf:2e:d0:21: 1d:36:a0:fd:95:ef:d7:7c:dc:01:a8:aa:c1:08:bb: fb:3f:2e:02:a1:39:29:be:5e:0f:6b:f8:20:35:f3: 81:03:e0:9b:26:59:2f:fa:f9:1d:65:5d:0f:72:64: 1c:3c:6a:c5:af:dc:4c:d0:30:a9:95:7c:86:9d:78: 2f:d3:dc:24:a9:0f:3c:40:05:51:5b:86:43:b9:f8: 9b:19:ff:db:69:6c:c6:ba:9f:ef:fa:cf:0c:e7:d3: 82:c2:b0:e2:7d:3e:f4:3a:09:b3:24:29:4a:84:1e: 0e:41:a8:ec:66:09:8f:cb:b7:84:89:64:48:1c:e2: ff:36:93:c3:cf:e4:6f:87:4b:47:90:90:d3:38:be: b2:28:af:12:95:57:ef:24:26:f0:b2:de:03:f0:a5: f0:04:40:5d:40:4c:f3:93:fb:af:c2:9f:f7:09:0a: 9f:07:bd:5f:8b:00:36:a5:18:f9:1f:1e:53:9d:fd: 58:d7:f6:97:05:e1:78:86:96:9a:b7:0b:59:11:63: f0:18:4d:a9:97:ed:45:a4:6a:91:93:a5:be:c2:75: c2:4b:75:c2:92:a7:68:a7:1f:23:f2:5b:ab:3f:28: 86:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1D:DA:45:38:40:8B:5D:59:36:5E:93:75:D8:34:38:80:2E:DA:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 199.19.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:9f:7f:49:9e:0b:1f:07:30:1b:72:e6:24:5f:11:83:35:47: e0:53:85:30:70:92:8d:c7:28:87:88:6a:a4:06:1c:18:31:66: da:22:0a:ac:e3:c2:db:90:b4:41:9e:f4:93:9d:0d:81:4c:dc: ee:84:5d:06:44:ee:38:37:5e:cf:0c:68:ed:4b:78:f3:4a:96: 6a:57:f0:27:ac:18:b1:32:d4:47:f0:f0:96:bf:52:22:56:34: 58:46:48:44:34:cb:ef:8e:4e:61:6c:00:e0:f7:b2:55:6d:40: 4d:30:64:50:ce:b1:d6:85:de:67:c5:f4:44:b1:ae:46:5d:ff: 8d:e3:27:d1:3f:09:57:51:78:8a:44:97:3a:84:ca:07:2c:4f: 84:e2:8f:94:cd:c4:65:54:61:c7:7b:f1:d1:ee:47:a4:c3:bc: e5:4e:f5:1a:3c:ac:c6:3b:87:64:07:5b:9d:a0:a0:e3:f8:0a: c7:39:ba:35:23:00:31:98:ab:52:c2:d6:e0:3d:4b:75:ce:8e: ef:99:79:30:8d:04:21:f3:81:b7:d6:d4:d9:ac:0f:f7:e2:71: 43:f4:a3:cf:05:e6:b7:d8:07:0d:dd:f7:05:37:65:5c:a8:e8: 5e:fd:fe:51:e6:24:01:cb:e2:f5:ec:9f:0a:d7:af:3b:e4:07: 70:26:8e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD2RLsn2Vpe+L14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk MzhkNGMxNmUtZjU3Yi00YWY1LTg1YjctZDMwODIxOTQ0NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS1dD+JkiFSkdw/qqMUkn6RA5YRREmBHn88u 0CEdNqD9le/XfNwBqKrBCLv7Py4CoTkpvl4Pa/ggNfOBA+CbJlkv+vkdZV0PcmQc PGrFr9xM0DCplXyGnXgv09wkqQ88QAVRW4ZDufibGf/baWzGup/v+s8M59OCwrDi fT70OgmzJClKhB4OQajsZgmPy7eEiWRIHOL/NpPDz+Rvh0tHkJDTOL6yKK8SlVfv JCbwst4D8KXwBEBdQEzzk/uvwp/3CQqfB71fiwA2pRj5Hx5Tnf1Y1/aXBeF4hpaa twtZEWPwGE2pl+1FpGqRk6W+wnXCS3XCkqdopx8j8lurPyiGYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsd2kU4QItdWTZek3XYNDiALtouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvZTMyZGNhNmYtZTBkNy0z YTFmLWI1MWUtYTJkZGE0YThiMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaff0meCx8HMBty5iRfEYM1R+BThTBwko3HKIeIaqQGHBgxZtoiCqzj wtuQtEGe9JOdDYFM3O6EXQZE7jg3Xs8MaO1LePNKlmpX8CesGLEy1Efw8Ja/UiJW NFhGSEQ0y++OTmFsAOD3slVtQE0wZFDOsdaF3mfF9ESxrkZd/43jJ9E/CVdReIpE lzqEygcsT4Tij5TNxGVUYcd78dHuR6TDvOVO9Ro8rMY7h2QHW52goOP4Csc5ujUj ADGYq1LC1uA9S3XOju+ZeTCNBCHzgbfW1NmsD/ficUP0o88F5rfYBw3d9wU3ZVyo 6F79/lHmJAHL4vXsnwrXrzvkB3AmjkE= -----END CERTIFICATE-----Generated at Fri Jul 24 18:32:05 2026 by rpki-client