$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa File: 4687eb35-ec35-3007-bacb-6e57bd51c87b.roa (raw, json) Hash identifier: n1Y4d+MDVNBL+c6PFvVNpJ+2cZv7TOuONuBjPSc4Mt4= Subject key identifier: 3A:7A:3C:0E:F2:6C:2D:20:3B:DF:91:C0:83:CB:5B:D0:83:CF:BC:DA Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584F0ED23408FED21DD2EA548980 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 399629 IP address blocks: 64.7.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:34:08:fe:d2:1d:d2:ea:54:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=ded85091-b63d-4faf-a726-05243de9c7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:22:dd:2a:d6:18:9f:4b:0f:7b:98:98:a3: 30:05:aa:87:f5:f7:b9:ac:90:c0:42:55:08:66:62: 17:55:0a:f9:aa:ee:ce:e3:34:91:dc:94:27:e0:d2: 68:e2:8e:4d:03:ea:b3:2d:b6:c0:2a:81:a5:af:43: 7c:da:43:46:ab:9d:8b:82:60:fc:e2:e0:d9:05:47: 1b:05:d5:03:a0:08:c3:12:64:c0:5b:22:38:d5:0d: c5:de:12:1a:84:cb:7b:0f:32:0a:88:50:32:64:df: 66:8f:23:6d:40:21:50:0d:6d:b7:c8:28:47:cf:b1: 89:0b:82:37:c8:a3:4e:7b:c7:ed:fd:f1:74:de:13: dc:e0:a9:0f:74:72:9f:45:40:8c:75:e3:73:91:31: e4:c0:54:57:0d:1c:41:59:1a:86:f9:e3:1a:cc:17: 96:6b:05:79:d9:fd:c7:cb:83:72:12:30:fa:08:fc: b4:fb:86:9e:8b:95:6f:28:45:d3:e7:f6:31:03:c2: c8:0e:45:3f:42:30:3f:31:e7:f1:a5:b6:47:cb:36: fc:77:d5:11:d7:57:a5:1f:1d:d2:56:51:9b:6c:bf: 21:c9:75:61:4d:12:d5:b7:7d:c1:8c:eb:70:17:bf: d2:be:fd:4c:e9:26:b4:19:2c:f7:28:3f:3c:2b:3f: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7A:3C:0E:F2:6C:2D:20:3B:DF:91:C0:83:CB:5B:D0:83:CF:BC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.7.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ac:5c:75:30:55:a8:8d:1e:03:5f:00:9e:3e:d6:09:30:73: 9d:60:35:24:72:28:8f:f1:bf:20:0a:bf:50:bd:cf:1b:bf:3a: 79:b9:bf:c5:dd:70:14:7c:f7:e4:ee:f0:bf:35:b9:95:f1:33: c9:c7:35:a3:1c:30:f6:70:25:da:1d:ed:de:f9:f9:13:9c:3b: 4a:c6:08:95:c4:77:10:71:6a:1b:b3:23:0e:b4:65:a3:6c:9d: cc:59:3e:39:b6:63:07:5f:f3:1a:00:bc:9e:17:99:fa:fc:c0: 66:e2:07:81:a0:18:49:8d:90:49:f5:50:fe:48:ed:11:35:6c: da:72:23:de:d7:35:2c:44:d0:cd:1c:e8:09:bf:79:2f:14:0d: b9:19:0a:92:34:96:39:d1:1e:73:c9:47:ee:db:67:5f:e3:e3: 8f:b5:d9:1f:4e:47:2a:06:fc:28:20:19:f0:f6:b7:e1:27:c7: be:f2:69:9b:70:2d:2a:f0:8f:9c:13:75:91:0e:ea:f5:4c:f0: 1a:12:89:b8:70:6e:01:71:40:2b:89:58:1d:8b:51:8b:a3:0b: e4:9f:7c:49:3e:90:38:86:f7:84:16:be:2d:f9:ae:6a:8b:71: 72:14:04:6e:50:ae:e2:4a:35:29:dc:21:b7:d2:66:ff:49:14: 83:85:db:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jQI/tId0upUiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZGVkODUwOTEtYjYzZC00ZmFmLWE3MjYtMDUyNDNkZTljN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWsi3SrWGJ9LD3uYmKMwBaqH9fe5rJDAQlUI ZmIXVQr5qu7O4zSR3JQn4NJo4o5NA+qzLbbAKoGlr0N82kNGq52LgmD84uDZBUcb BdUDoAjDEmTAWyI41Q3F3hIahMt7DzIKiFAyZN9mjyNtQCFQDW23yChHz7GJC4I3 yKNOe8ft/fF03hPc4KkPdHKfRUCMdeNzkTHkwFRXDRxBWRqG+eMazBeWawV52f3H y4NyEjD6CPy0+4aei5VvKEXT5/YxA8LIDkU/QjA/MefxpbZHyzb8d9UR11elHx3S VlGbbL8hyXVhTRLVt33BjOtwF7/Svv1M6Sa0GSz3KD88Kz9TTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp6PA7ybC0gO9+RwIPLW9CDz7zaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDY4N2ViMzUtZWMzNS0z MDA3LWJhY2ItNmU1N2JkNTFjODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGsXHUwVaiNHgNfAJ4+1gkwc51gNSRyKI/xvyAKv1C9zxu/Onm5v8Xd cBR89+Tu8L81uZXxM8nHNaMcMPZwJdod7d75+ROcO0rGCJXEdxBxahuzIw60ZaNs ncxZPjm2Ywdf8xoAvJ4Xmfr8wGbiB4GgGEmNkEn1UP5I7RE1bNpyI97XNSxE0M0c 6Am/eS8UDbkZCpI0ljnRHnPJR+7bZ1/j44+12R9ORyoG/CggGfD2t+Enx77yaZtw LSrwj5wTdZEO6vVM8BoSibhwbgFxQCuJWB2LUYujC+SffEk+kDiG94QWvi35rmqL cXIUBG5QruJKNSncIbfSZv9JFIOF2z8= -----END CERTIFICATE-----Generated at Sat Sep 26 00:17:35 2026 by rpki-client