$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa File: 4687eb35-ec35-3007-bacb-6e57bd51c87b.roa (raw, json) Hash identifier: 0CIrzjRfMAqVZ7WkP0sfZfPO0Oa8663gNPAmHOBXRbw= Subject key identifier: 62:3B:ED:47:8E:38:51:06:4A:30:68:90:69:A3:85:AE:9A:2B:F3:54 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584E6C6F66A023FC9FF3DA386760 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 399629 IP address blocks: 64.7.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:66:a0:23:fc:9f:f3:da:38:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=2bc69139-7270-4fbe-9baf-3ecab4b1681e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:63:45:ab:d4:9b:5f:ce:f9:7c:05:18:41: b1:b9:b5:84:24:3a:06:34:b3:d8:72:0b:ed:1e:47: b1:26:54:7d:bd:0f:60:df:12:dc:4e:d6:5d:f5:c6: 03:71:b7:ac:8e:b2:98:5e:78:67:60:88:1f:41:87: 4f:6d:52:b2:5d:08:78:f3:d6:61:22:42:55:eb:66: 1b:02:62:3e:23:79:13:4f:21:fe:c8:ce:4b:5e:fc: 60:a3:90:3b:5a:fa:98:14:6f:6a:29:34:24:91:9b: 64:30:99:f0:10:c5:8f:cc:11:fa:4f:55:9a:83:e1: 0d:e3:a0:3d:2f:a5:87:17:1e:2b:dd:7d:4a:d3:0d: 6f:57:f5:67:b8:fc:e0:af:83:6e:6c:67:3c:58:f0: 9f:c3:5f:31:77:a5:20:8f:ed:65:5b:87:fc:aa:38: 0d:59:45:5d:ff:e5:fa:d5:ba:35:64:db:7a:0e:3f: 53:b9:f5:cd:7f:13:77:2e:c8:9e:24:eb:0a:8a:f9: 3e:1c:83:14:c0:ee:22:a8:f1:20:be:aa:b3:30:22: 1e:10:e3:8f:3c:0e:d9:e1:ef:93:41:b3:50:21:c1: 8c:24:8e:7b:ba:a0:78:e4:e0:c6:13:c3:93:31:35: 42:eb:8d:8c:29:2a:07:38:da:80:30:f0:9a:99:08: 86:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3B:ED:47:8E:38:51:06:4A:30:68:90:69:A3:85:AE:9A:2B:F3:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.7.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:24:48:11:23:54:7d:62:5c:b8:84:34:77:f8:81:cd:98:71: 0c:7b:15:8c:b0:c1:43:b4:5c:2f:f9:12:b7:99:82:08:75:40: 1b:1d:62:a4:5f:e2:1d:4e:49:60:11:01:e9:15:dd:75:59:9e: 93:50:18:c2:f6:68:1b:ea:3e:0d:00:f6:e1:6e:c1:78:ba:b0: cf:c7:14:15:3e:c2:82:87:16:dd:f4:c4:36:c1:8c:10:99:b2: b4:16:6f:e7:76:cf:22:94:b1:ad:7d:2c:9a:4b:b8:f8:7c:85: 18:6b:a2:0f:2d:87:ad:3f:7c:0d:4f:75:b9:96:ac:ed:d5:14: 82:19:30:28:ba:ad:73:0f:42:a2:3e:50:6e:69:57:a2:d3:34: 91:28:94:01:1a:a6:f3:07:94:f3:1a:07:64:d6:6b:5d:3b:a4: 39:be:1a:1a:3e:90:df:fd:8a:84:48:00:fb:0d:e5:83:44:45: 70:94:b2:90:45:e7:64:d3:07:c1:fc:c6:79:f0:51:4c:0d:96: a2:32:f2:e6:dc:d3:62:fa:58:97:32:80:69:3b:02:89:b6:12: e0:ee:d1:cd:ec:2f:89:01:a6:b1:61:d2:c1:23:13:ae:43:99: b4:20:d0:0c:d9:a7:79:8d:d9:54:1f:2f:92:ca:ff:90:f5:0f: 2b:49:cc:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2agI/yf89o4Z2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk MmJjNjkxMzktNzI3MC00ZmJlLTliYWYtM2VjYWI0YjE2ODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweJjRavUm1/O+XwFGEGxubWEJDoGNLPYcgvt HkexJlR9vQ9g3xLcTtZd9cYDcbesjrKYXnhnYIgfQYdPbVKyXQh489ZhIkJV62Yb AmI+I3kTTyH+yM5LXvxgo5A7WvqYFG9qKTQkkZtkMJnwEMWPzBH6T1Wag+EN46A9 L6WHFx4r3X1K0w1vV/VnuPzgr4NubGc8WPCfw18xd6Ugj+1lW4f8qjgNWUVd/+X6 1bo1ZNt6Dj9TufXNfxN3LsieJOsKivk+HIMUwO4iqPEgvqqzMCIeEOOPPA7Z4e+T QbNQIcGMJI57uqB45ODGE8OTMTVC642MKSoHONqAMPCamQiGjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI77UeOOFEGSjBokGmjha6aK/NUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDY4N2ViMzUtZWMzNS0z MDA3LWJhY2ItNmU1N2JkNTFjODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYkSBEjVH1iXLiENHf4gc2YcQx7FYywwUO0XC/5EreZggh1QBsdYqRf 4h1OSWARAekV3XVZnpNQGML2aBvqPg0A9uFuwXi6sM/HFBU+woKHFt30xDbBjBCZ srQWb+d2zyKUsa19LJpLuPh8hRhrog8th60/fA1PdbmWrO3VFIIZMCi6rXMPQqI+ UG5pV6LTNJEolAEapvMHlPMaB2TWa107pDm+Gho+kN/9ioRIAPsN5YNERXCUspBF 52TTB8H8xnnwUUwNlqIy8ubc02L6WJcygGk7Aom2EuDu0c3sL4kBprFh0sEjE65D mbQg0AzZp3mN2VQfL5LK/5D1DytJzGM= -----END CERTIFICATE-----Generated at Fri Jul 24 10:21:51 2026 by rpki-client