$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa File: 8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa (raw, json) Hash identifier: Om9a2m5KN3r8bH6pZ2yPRvRahXm8hmHOdF2I/8kHzMs= Subject key identifier: 36:ED:10:94:92:1F:41:3E:72:7E:89:D1:AE:16:57:7E:E3:3D:AF:D8 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584E5A49F9462E1C396B4D55D580 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 399629 IP address blocks: 64.190.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f9:46:2e:1c:39:6b:4d:55:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=40c1080f-efdc-4ede-a09e-e5717a058cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:6d:41:19:04:54:81:da:50:03:d2:6b:5b: 72:af:42:b6:aa:87:48:47:dd:d9:8b:4e:2d:a4:94: 51:1e:55:d6:93:3c:da:fa:53:bf:cb:69:a4:27:25: c1:3b:86:b8:59:4a:81:b0:6c:01:25:49:7a:c0:10: 8a:ce:63:25:1b:74:a7:f5:3a:bb:c9:39:e3:33:0b: 70:7f:22:1a:9f:92:9d:7e:95:11:59:0d:16:01:d1: 6c:5c:ac:d2:0f:14:ff:11:5c:d0:29:7a:d9:96:ac: e3:ff:cc:8d:e5:f4:d4:f1:d2:a7:f2:6b:18:d5:97: 29:70:53:87:92:6a:d7:33:ac:d2:61:94:59:e7:3b: c5:81:61:eb:4c:7d:0a:65:40:b8:e8:c0:a1:9e:0e: 32:58:29:bf:7e:1f:87:40:9c:c4:ea:4b:e7:a4:82: 43:89:30:8b:e7:96:d4:87:a0:61:ba:b3:f3:e4:99: f0:7d:a2:f4:bc:ab:54:e4:d4:d7:f4:9d:2c:26:aa: c4:3e:b0:a1:97:b7:b3:ea:a3:27:9f:2f:87:ff:4c: 95:62:e6:4e:e0:75:fc:49:66:43:cb:8e:47:b0:64: fb:49:d9:28:78:ed:e3:50:c8:f7:60:78:f8:bc:bd: 50:db:80:65:90:65:23:1d:75:de:70:87:56:b1:db: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:ED:10:94:92:1F:41:3E:72:7E:89:D1:AE:16:57:7E:E3:3D:AF:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.190.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d5:2b:90:86:c2:e4:b7:a5:af:b3:b6:e2:0b:9f:ae:03:50: c4:7b:26:04:29:58:2c:11:31:e2:f8:ad:1d:54:e8:47:5b:9c: 20:c2:f5:64:14:11:ff:49:f4:f7:4d:55:77:d0:0f:52:db:01: 12:81:2a:c3:e0:e8:22:38:16:63:82:3d:39:6c:f1:b2:f9:4e: b2:4a:f6:a3:4b:2e:f6:25:06:d5:e9:78:c2:3c:6d:37:bd:cf: 3c:be:0b:1f:d0:c4:2b:29:95:6a:2a:44:60:ac:fa:f0:a4:93: 5c:7f:72:21:f7:74:6e:ef:9e:52:9b:22:39:f9:21:51:c2:08: 84:ec:a8:5c:f4:ec:68:35:32:1c:14:df:ba:6f:4d:6f:73:f3: 5a:2a:50:88:3c:22:ac:54:4d:db:90:a0:3f:00:93:1a:a5:61: 7e:d6:96:f7:8f:bf:b2:46:f3:e1:d3:80:ee:a2:fe:e9:6f:eb: 96:a3:6c:d9:f9:ad:83:de:58:5d:e6:a6:40:cc:61:4c:24:92: 6e:42:06:84:18:7f:44:23:15:7e:de:bf:3d:68:88:b8:72:f4: fc:10:ac:1b:18:a4:cb:eb:2e:e8:5c:4b:b6:d9:3b:d6:92:02: 27:8a:a7:be:3d:e5:ee:7d:cb:f4:0b:12:43:3d:4c:bd:29:aa: 3e:3a:6f:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSflGLhw5a01V1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk NDBjMTA4MGYtZWZkYy00ZWRlLWEwOWUtZTU3MTdhMDU4Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtRtQRkEVIHaUAPSa1tyr0K2qodIR93Zi04t pJRRHlXWkzza+lO/y2mkJyXBO4a4WUqBsGwBJUl6wBCKzmMlG3Sn9Tq7yTnjMwtw fyIan5KdfpURWQ0WAdFsXKzSDxT/EVzQKXrZlqzj/8yN5fTU8dKn8msY1ZcpcFOH kmrXM6zSYZRZ5zvFgWHrTH0KZUC46MChng4yWCm/fh+HQJzE6kvnpIJDiTCL55bU h6BhurPz5JnwfaL0vKtU5NTX9J0sJqrEPrChl7ez6qMnny+H/0yVYuZO4HX8SWZD y45HsGT7SdkoeO3jUMj3YHj4vL1Q24BlkGUjHXXecIdWsdvqWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbtEJSSH0E+cn6J0a4WV37jPa/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvOGVmM2M4ZTItOTY3YS0z MWRlLTg4Y2QtNmNiZGY1YjVjNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL5xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzVK5CGwuS3pa+ztuILn64DUMR7JgQpWCwRMeL4rR1U6EdbnCDC9WQU Ef9J9PdNVXfQD1LbARKBKsPg6CI4FmOCPTls8bL5TrJK9qNLLvYlBtXpeMI8bTe9 zzy+Cx/QxCsplWoqRGCs+vCkk1x/ciH3dG7vnlKbIjn5IVHCCITsqFz07Gg1MhwU 37pvTW9z81oqUIg8IqxUTduQoD8AkxqlYX7WlvePv7JG8+HTgO6i/ulv65ajbNn5 rYPeWF3mpkDMYUwkkm5CBoQYf0QjFX7evz1oiLhy9PwQrBsYpMvrLuhcS7bZO9aS AieKp7495e59y/QLEkM9TL0pqj46b/4= -----END CERTIFICATE-----Generated at Fri Jul 24 04:21:10 2026 by rpki-client