$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa File: a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa (raw, json) Hash identifier: lNpcnob9i6AjrH/2YZV8oUtTKA7CMeLhBbIuJEw+JVM= Subject key identifier: D9:2C:F2:A2:FE:C7:C5:55:95:DA:C2:23:1A:E1:08:37:7A:85:2B:F0 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584F89A860006FFB51A3CAAFF780 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 399629 IP address blocks: 168.100.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:60:00:6f:fb:51:a3:ca:af:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=b2c44abf-6404-40ab-bfc1-dda6b5c9cb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:2d:a7:f3:60:4a:be:1a:38:de:3a:5b:02: 2f:f9:78:33:d1:f1:35:f9:e3:f5:be:8c:b7:97:e8: 0b:93:eb:7c:9c:ed:45:85:33:e9:2b:eb:f0:a2:55: bc:b2:e8:69:9a:65:4d:76:55:fd:e6:ff:01:c8:06: f6:0e:57:ac:39:fa:60:15:26:62:72:18:c5:b6:35: 63:7f:c9:02:62:94:95:d3:39:a3:a5:ce:66:27:18: 3d:71:10:4d:ea:1e:f6:29:25:f6:cb:34:e7:e5:28: 6a:b7:80:21:f6:71:d7:05:07:7a:d4:88:9e:ab:6b: 5d:b3:15:11:af:01:15:3d:d9:f8:07:a7:76:70:72: 23:9f:cb:7a:c2:ba:45:c0:12:49:40:51:71:f2:5b: b0:3c:43:cf:8e:52:63:f6:ed:25:e6:d3:c1:26:74: 89:df:05:b4:2b:13:7e:56:7c:a1:da:b0:bc:42:82: 8a:d9:f5:9e:9c:27:14:47:dd:85:39:3d:9a:22:43: 22:9c:6c:2b:14:3e:ac:50:eb:9d:dd:83:d9:4d:88: de:75:f6:ee:07:9f:33:e7:8a:51:1b:20:57:29:a1: ff:a1:4c:36:83:88:ca:66:08:18:36:cb:16:4e:c3: 2c:11:ee:e7:f3:c6:30:0b:0c:cf:e1:5b:03:9f:85: 55:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2C:F2:A2:FE:C7:C5:55:95:DA:C2:23:1A:E1:08:37:7A:85:2B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 168.100.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:82:26:1f:e3:f5:29:e8:cc:87:ef:16:1f:69:62:f0:3c:6a: 32:30:5a:03:e5:a2:ae:6e:60:23:22:43:ad:f6:39:e9:08:98: 8b:e3:eb:32:b7:f2:dd:37:b5:76:a1:1a:f6:f0:c0:57:f5:cc: 56:27:dc:e0:74:e6:a7:97:18:a1:6b:8e:30:c2:8b:9c:8e:03: 6a:f6:0b:3e:2c:b9:f8:61:1f:1d:9e:d1:bd:f1:66:7a:d0:32: e1:ef:53:a1:e7:60:d2:75:74:9b:cf:c6:c3:0d:b9:05:91:61: d6:20:20:5e:8c:e8:d6:c8:d2:5a:42:c8:af:76:07:c4:b7:79: 84:35:88:d3:4d:3f:88:73:83:7a:9f:18:ae:7e:10:04:87:01: 46:af:98:00:9a:ec:89:a7:8a:91:38:e9:4e:57:04:68:19:73: b6:8b:f7:8f:05:30:4d:21:b0:93:d9:16:00:80:1c:83:80:98: 5c:d4:29:28:e4:19:99:60:80:a2:a7:a7:76:13:bd:fa:65:76: 3d:26:f5:98:a9:e4:b9:fe:80:7b:ab:35:a1:ba:38:c2:5d:46: e3:45:05:4e:67:04:cd:c9:fe:9e:4b:f5:45:45:d9:91:77:7e: e3:cc:bf:3e:5a:b4:05:d9:a6:c0:54:fa:55:cd:66:c4:4c:be: 61:11:60:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqGAAb/tRo8qv94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk YjJjNDRhYmYtNjQwNC00MGFiLWJmYzEtZGRhNmI1YzljYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Atp/NgSr4aON46WwIv+Xgz0fE1+eP1voy3 l+gLk+t8nO1FhTPpK+vwolW8suhpmmVNdlX95v8ByAb2DlesOfpgFSZichjFtjVj f8kCYpSV0zmjpc5mJxg9cRBN6h72KSX2yzTn5Shqt4Ah9nHXBQd61Iieq2tdsxUR rwEVPdn4B6d2cHIjn8t6wrpFwBJJQFFx8luwPEPPjlJj9u0l5tPBJnSJ3wW0KxN+ Vnyh2rC8QoKK2fWenCcUR92FOT2aIkMinGwrFD6sUOud3YPZTYjedfbuB58z54pR GyBXKaH/oUw2g4jKZggYNssWTsMsEe7n88YwCwzP4VsDn4VVvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNks8qL+x8VVldrCIxrhCDd6hSvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTNmODM3MzYtYTJmNC0z ZThiLWE2OTQtZTRlYjcyZDVjNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqCJh/j9SnozIfvFh9pYvA8ajIwWgPloq5uYCMiQ632OekImIvj6zK3 8t03tXahGvbwwFf1zFYn3OB05qeXGKFrjjDCi5yOA2r2Cz4sufhhHx2e0b3xZnrQ MuHvU6HnYNJ1dJvPxsMNuQWRYdYgIF6M6NbI0lpCyK92B8S3eYQ1iNNNP4hzg3qf GK5+EASHAUavmACa7ImnipE46U5XBGgZc7aL948FME0hsJPZFgCAHIOAmFzUKSjk GZlggKKnp3YTvfpldj0m9Zip5Ln+gHurNaG6OMJdRuNFBU5nBM3J/p5L9UVF2ZF3 fuPMvz5atAXZpsBU+lXNZsRMvmERYDI= -----END CERTIFICATE-----Generated at Sun Nov 15 22:34:21 2026 by rpki-client