$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa File: 9afff874-6a4f-331a-93da-b870000569c0.roa (raw, json) Hash identifier: wMJcaJOaosVMtgx3uJ4KRcFRffU/U22z/3598v2YLoM= Subject key identifier: D5:78:BD:A8:49:B5:4E:60:26:35:25:D5:4B:86:2B:0F:90:D0:41:D2 Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F4328584D3DFFB54C2C91EB4882BFBC40 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 398191 IP address blocks: 216.225.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b5:4c:2c:91:eb:48:82:bf:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=64c6af98-3bea-4df0-b67f-6607e10fe63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fd:aa:a3:9b:36:dc:69:34:ae:81:65:b6:ab: 8e:02:0a:83:14:00:6d:ed:14:e3:7d:7f:b1:7f:60: bb:07:f2:3f:12:c7:3a:7d:f0:08:d7:36:ec:5e:c1: 77:1d:65:0e:41:30:6f:a5:85:0e:54:9e:03:3f:47: 0a:b6:ab:ed:66:a6:8f:6c:a7:63:1f:84:d0:4b:ab: d3:85:4d:07:5e:c0:1e:7c:34:e0:cb:d5:28:81:4c: 5f:b8:19:9c:0a:c1:27:f3:0d:67:13:13:6a:a2:13: f6:cf:01:a9:36:dd:e1:2e:26:7f:d1:8c:cd:44:89: 40:ef:af:ab:fe:88:37:10:e4:e6:a3:68:e8:64:14: 92:52:02:7f:0c:53:7d:a9:d8:37:86:76:bf:62:ed: 5d:b4:48:af:66:bd:8a:b9:df:2c:4c:14:48:5f:db: 0c:5d:16:b0:0f:06:fb:57:71:1e:db:55:c0:0f:42: aa:18:c5:2f:37:78:e4:b3:2b:3f:a8:2d:ae:6f:88: 65:bf:73:fd:d8:71:b7:f9:c4:5f:d9:fe:a8:06:f5: b8:48:14:4a:ea:e9:8a:da:4f:d8:71:7b:9c:ab:17: 14:a9:be:95:2c:bb:00:ca:da:c4:da:c5:dc:e9:30: 31:9b:8b:ef:fa:24:4d:5b:d8:51:47:1a:1f:34:29: d1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:78:BD:A8:49:B5:4E:60:26:35:25:D5:4B:86:2B:0F:90:D0:41:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv4: 216.225.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:30:1c:91:5a:27:ba:2f:4d:4f:9a:9d:ea:7a:48:13:00:c4: 91:2c:39:6a:b6:60:e7:96:5c:11:32:66:70:55:b2:6e:b8:e6: 3e:83:7a:2d:3d:a6:56:56:40:27:6b:0a:ca:56:c8:0b:67:17: d5:6a:5a:6c:f5:c8:fa:dd:bf:e8:74:e0:d1:66:92:16:bc:90: b8:83:ab:d7:56:43:c4:ad:c2:7f:33:25:74:21:28:41:4e:98: 77:fc:f7:50:01:62:82:7f:2f:8e:1e:52:fc:45:d4:4f:c2:4b: 08:49:0a:64:9d:16:2d:89:47:df:d7:dd:b2:91:f0:44:a9:e6: 70:52:84:3d:78:d8:50:b9:c5:2c:3b:4e:40:b5:94:a6:bd:26: e1:93:8d:47:aa:80:d2:11:a7:34:80:06:b3:b5:db:ae:31:0b: 0b:1d:1b:30:e4:2b:e2:f4:f9:41:54:89:56:7d:a6:5d:15:e8: a8:2a:c3:4f:2a:7a:f8:4b:e0:1a:77:3f:b6:01:c3:7c:40:30: 6e:04:b4:dc:6d:63:a8:36:13:f0:92:a5:6e:c0:df:91:b7:2c: 2c:61:5c:15:b2:d9:71:60:c3:49:44:a5:cb:3c:7e:b7:a7:49: 65:9b:6f:03:fa:b6:19:38:99:db:d3:3b:61:ef:d6:e7:76:66: bd:32:83:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7VMLJHrSIK/vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjRjNmFmOTgtM2JlYS00ZGYwLWI2N2YtNjYwN2UxMGZlNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf2qo5s23Gk0roFltquOAgqDFABt7RTjfX+x f2C7B/I/Esc6ffAI1zbsXsF3HWUOQTBvpYUOVJ4DP0cKtqvtZqaPbKdjH4TQS6vT hU0HXsAefDTgy9UogUxfuBmcCsEn8w1nExNqohP2zwGpNt3hLiZ/0YzNRIlA76+r /og3EOTmo2joZBSSUgJ/DFN9qdg3hna/Yu1dtEivZr2Kud8sTBRIX9sMXRawDwb7 V3Ee21XAD0KqGMUvN3jksys/qC2ub4hlv3P92HG3+cRf2f6oBvW4SBRK6umK2k/Y cXucqxcUqb6VLLsAytrE2sXc6TAxm4vv+iRNW9hRRxofNCnRBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV4vahJtU5gJjUl1UuGKw+Q0EHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvOWFmZmY4NzQtNmE0Zi0z MzFhLTkzZGEtYjg3MDAwMDU2OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQwHJFaJ7ovTU+anep6SBMAxJEsOWq2YOeWXBEyZnBVsm645j6Dei09 plZWQCdrCspWyAtnF9VqWmz1yPrdv+h04NFmkha8kLiDq9dWQ8Stwn8zJXQhKEFO mHf891ABYoJ/L44eUvxF1E/CSwhJCmSdFi2JR9/X3bKR8ESp5nBShD142FC5xSw7 TkC1lKa9JuGTjUeqgNIRpzSABrO1264xCwsdGzDkK+L0+UFUiVZ9pl0V6Kgqw08q evhL4Bp3P7YBw3xAMG4EtNxtY6g2E/CSpW7A35G3LCxhXBWy2XFgw0lEpcs8fren SWWbbwP6thk4mdvTO2Hv1ud2Zr0ygwk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:22 2026 by rpki-client