$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/41be1aec-1415-3921-bfea-522b7006aa5c.roa File: 41be1aec-1415-3921-bfea-522b7006aa5c.roa (raw, json) Hash identifier: xkdFjp6mfpPc3zyjakF5KAM8VWavdtz0MRKcJ+FSUII= Subject key identifier: 22:8F:9B:AC:82:D9:59:97:7D:5F:F4:85:24:08:CE:74:D3:72:12:CF Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584D93253FC65B794884D6941F00 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/41be1aec-1415-3921-bfea-522b7006aa5c.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 32806 IP address blocks: 192.187.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:3f:c6:5b:79:48:84:d6:94:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=df3cd4cd-ea01-4914-8fc2-5df2d186417b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:80:8d:1d:14:e7:1f:1c:67:bc:16:17:62: 7d:ce:0a:25:bc:81:69:ab:56:ab:e2:27:ec:4b:17: a1:52:82:c4:4b:06:9a:76:10:29:7f:d9:3f:c5:37: 00:f4:3c:d5:3f:60:56:89:8a:b0:cf:88:5d:af:ad: 0d:61:ed:83:f4:63:44:c6:67:38:cc:d9:f9:1a:a4: 7b:27:ca:f1:d4:16:c1:f9:12:6f:ff:ba:5c:e0:77: d1:e4:e4:14:c2:65:93:65:a5:7d:33:1f:db:19:1a: 34:e4:9c:2c:11:8e:2e:6c:fa:61:f8:ff:c0:b3:a1: ae:06:32:2a:e9:19:cc:cf:ef:a2:ba:9e:9c:f7:7d: a2:24:9f:52:e8:b5:b0:bc:cc:79:d7:b9:a5:50:e3: 45:b1:11:73:c9:b1:67:9d:d4:61:f5:96:6e:20:17: ad:5f:01:c0:d5:5e:7f:51:1a:fa:ba:6a:b8:0b:25: 78:a9:51:5e:52:0c:5e:68:48:96:44:46:0f:75:07: 9c:a5:b1:b5:ca:e7:7c:c6:85:de:87:ac:76:96:eb: 5e:dc:59:54:84:e1:41:eb:8f:07:84:c9:c9:57:ce: a1:7d:cd:55:08:ad:83:52:c0:32:2c:86:f1:82:9a: 1c:f7:9a:20:95:7b:e5:57:1f:4e:9d:7d:6c:bf:cb: 0f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:9B:AC:82:D9:59:97:7D:5F:F4:85:24:08:CE:74:D3:72:12:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/41be1aec-1415-3921-bfea-522b7006aa5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 192.187.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b9:2d:db:6b:6e:c0:e9:77:0e:4f:5e:d6:fa:7d:fb:ae:b7: 98:19:03:44:55:00:4a:6c:d0:a2:97:b1:83:e4:05:7c:c1:8f: c7:d4:aa:ed:e3:64:0a:78:4c:8a:a6:49:ff:ac:55:f9:18:80: 3b:36:38:e6:c2:20:bb:c6:6f:8a:3c:db:d5:be:f7:a3:d4:5d: 91:26:f5:af:ee:5d:27:ae:19:86:ac:8b:69:3b:37:9c:e5:7f: 04:93:45:13:16:03:40:80:74:b9:17:ab:8d:94:bc:9e:9d:95: 5f:bc:ba:f6:c2:34:1a:36:4a:a5:bb:01:6f:f8:5e:0b:fc:ef: 2a:25:6c:53:f8:60:e6:5a:9a:50:fa:50:cc:c2:e2:ae:b8:76: 8f:32:3b:33:b1:ce:a7:90:a0:1a:8a:4c:da:42:2a:36:b6:f3: 4b:cd:2b:59:67:07:0f:9e:3b:58:9b:75:73:5b:e6:30:22:76: 2f:e2:8a:83:0f:e6:f0:ef:d1:22:0f:5b:a0:89:d5:21:7d:83: cc:33:07:f1:91:4c:db:72:d7:94:af:7d:d9:4d:8a:b0:04:98: c5:65:b8:fd:71:c4:49:be:00:d9:a0:4d:fc:1d:6d:20:c9:a3: 14:7d:7f:fd:c9:70:94:ca:23:ec:fa:75:e4:56:ea:e8:3b:8f: 1c:83:e0:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJT/GW3lIhNaUHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZGYzY2Q0Y2QtZWEwMS00OTE0LThmYzItNWRmMmQxODY0MTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjWAjR0U5x8cZ7wWF2J9zgolvIFpq1ar4ifs SxehUoLESwaadhApf9k/xTcA9DzVP2BWiYqwz4hdr60NYe2D9GNExmc4zNn5GqR7 J8rx1BbB+RJv/7pc4HfR5OQUwmWTZaV9Mx/bGRo05JwsEY4ubPph+P/As6GuBjIq 6RnMz++iup6c932iJJ9S6LWwvMx517mlUONFsRFzybFnndRh9ZZuIBetXwHA1V5/ URr6umq4CyV4qVFeUgxeaEiWREYPdQecpbG1yud8xoXeh6x2lute3FlUhOFB648H hMnJV86hfc1VCK2DUsAyLIbxgpoc95oglXvlVx9OnX1sv8sPLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKPm6yC2VmXfV/0hSQIznTTchLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNDFiZTFhZWMtMTQxNS0z OTIxLWJmZWEtNTIyYjcwMDZhYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu5LdtrbsDpdw5PXtb6ffuut5gZA0RVAEps0KKXsYPkBXzBj8fUqu3j ZAp4TIqmSf+sVfkYgDs2OObCILvGb4o829W+96PUXZEm9a/uXSeuGYasi2k7N5zl fwSTRRMWA0CAdLkXq42UvJ6dlV+8uvbCNBo2SqW7AW/4Xgv87yolbFP4YOZamlD6 UMzC4q64do8yOzOxzqeQoBqKTNpCKja280vNK1lnBw+eO1ibdXNb5jAidi/iioMP 5vDv0SIPW6CJ1SF9g8wzB/GRTNty15SvfdlNirAEmMVluP1xxEm+ANmgTfwdbSDJ oxR9f/3JcJTKI+z6deRW6ug7jxyD4Bw= -----END CERTIFICATE-----Generated at Wed May 13 12:10:50 2026 by rpki-client