$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa File: 647e7e1b-886d-378b-8f0d-f521fdee6616.roa (raw, json) Hash identifier: rHR8rRQcWGHpO0IwqWPthGrWJSmb4EzhPUGUiVAq6N0= Subject key identifier: CC:76:D3:AB:60:33:2A:83:5D:EB:00:3A:B1:4A:90:BF:47:2D:BD:95 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D343A13CF496209E629E0F700 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 399629 IP address blocks: 96.9.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:13:cf:49:62:09:e6:29:e0:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=e2208cd1-56b9-47cb-9978-284e3bc1fa88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:63:2a:c8:55:2a:c2:1c:72:9b:7c:7e:57:05: 4a:ee:18:3e:e1:86:9b:28:ce:df:af:b5:c6:cb:1a: e2:da:22:65:05:51:20:bf:a5:f4:f9:bf:a2:d0:95: 30:44:26:16:6d:79:77:7b:fb:6a:f2:f5:06:b7:3b: eb:fa:a5:df:b3:be:82:e5:fa:26:fc:c7:95:94:31: 43:89:86:09:e1:89:d9:d6:3f:89:16:e3:83:30:54: ab:0a:4d:9e:91:3d:d4:fe:b6:c2:c8:e5:af:0c:82: c8:23:3a:cb:ba:64:07:f8:e1:b0:f5:cb:94:f6:ea: 7b:47:17:44:ee:25:8f:64:eb:55:3b:bb:e6:d1:a4: 9c:c1:4a:c1:f1:11:0d:49:fa:19:ef:c2:d1:9a:37: 43:52:2f:86:60:95:de:d1:c2:ab:27:0e:15:96:f5: 3a:bb:07:e5:58:c4:c3:39:a6:47:0e:80:58:81:d9: b0:3e:f2:a6:0e:73:ff:f1:fa:88:b3:d9:06:29:63: 01:d7:a5:9d:b7:01:55:6d:95:3c:94:9a:bd:db:3c: 8a:2e:5b:ed:29:4f:ae:df:b3:56:45:e4:18:ab:d8: 80:9c:7a:3f:b9:7d:e7:38:69:87:e6:9a:fc:87:2e: 64:e6:3c:11:f2:51:7f:98:d9:46:45:d6:11:f3:7c: ba:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:76:D3:AB:60:33:2A:83:5D:EB:00:3A:B1:4A:90:BF:47:2D:BD:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 96.9.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:82:55:57:c5:12:e7:4a:a5:71:c5:e8:85:21:60:a0:c3:fd: 43:f3:20:53:38:ee:6d:49:5c:ee:45:92:5c:fd:d6:f7:11:57: 85:fd:54:b9:df:c1:92:10:44:fe:cf:57:66:95:77:e7:15:46: f5:2e:7b:34:4a:12:4c:be:dd:a2:83:4b:90:5a:6b:b6:b7:58: 0a:c3:44:51:d4:14:47:46:ba:e1:54:0c:3a:25:d1:9f:b4:ec: 93:e3:3f:99:c8:07:5e:c3:0c:36:a7:e5:d3:5e:9b:cb:50:03: 56:20:d8:2a:ed:62:e9:b1:15:4a:27:e5:29:f9:fa:99:e2:bf: de:8c:a5:8e:a3:fc:89:97:9e:48:5a:81:98:b1:31:cc:a9:e4: e6:fd:d9:32:e7:86:68:36:f6:70:32:8b:f5:fb:da:6e:2a:ad: ea:d5:9e:84:4d:16:78:9c:83:a7:cd:b3:bc:f0:0f:34:55:d2: dc:bc:0c:bd:73:49:fb:a4:ce:33:53:80:38:df:ce:99:57:2f: 6b:86:f0:25:ce:b2:92:44:7f:b7:c7:90:c9:0f:57:cb:2b:73: 78:c0:d7:1f:85:fe:26:c7:27:d9:9f:04:ec:52:33:1c:77:79: 02:49:77:79:1c:43:29:23:3a:b1:b5:f1:0f:af:3f:2a:17:ea: 80:cf:be:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OhPPSWIJ5ing9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk ZTIyMDhjZDEtNTZiOS00N2NiLTk5NzgtMjg0ZTNiYzFmYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmMqyFUqwhxym3x+VwVK7hg+4YabKM7fr7XG yxri2iJlBVEgv6X0+b+i0JUwRCYWbXl3e/tq8vUGtzvr+qXfs76C5fom/MeVlDFD iYYJ4YnZ1j+JFuODMFSrCk2ekT3U/rbCyOWvDILIIzrLumQH+OGw9cuU9up7RxdE 7iWPZOtVO7vm0aScwUrB8RENSfoZ78LRmjdDUi+GYJXe0cKrJw4VlvU6uwflWMTD OaZHDoBYgdmwPvKmDnP/8fqIs9kGKWMB16WdtwFVbZU8lJq92zyKLlvtKU+u37NW ReQYq9iAnHo/uX3nOGmH5pr8hy5k5jwR8lF/mNlGRdYR83y6VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMx206tgMyqDXesAOrFKkL9HLb2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNjQ3ZTdlMWItODg2ZC0z NzhiLThmMGQtZjUyMWZkZWU2NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaCVVfFEudKpXHF6IUhYKDD/UPzIFM47m1JXO5Fklz91vcRV4X9VLnf wZIQRP7PV2aVd+cVRvUuezRKEky+3aKDS5Baa7a3WArDRFHUFEdGuuFUDDol0Z+0 7JPjP5nIB17DDDan5dNem8tQA1Yg2CrtYumxFUon5Sn5+pniv96MpY6j/ImXnkha gZixMcyp5Ob92TLnhmg29nAyi/X72m4qrerVnoRNFnicg6fNs7zwDzRV0ty8DL1z SfukzjNTgDjfzplXL2uG8CXOspJEf7fHkMkPV8src3jA1x+F/ibHJ9mfBOxSMxx3 eQJJd3kcQykjOrG18Q+vPyoX6oDPvv0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:03:41 2026 by rpki-client