$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa File: 820be15f-1ab0-3e6c-8554-951d99d18e99.roa (raw, json) Hash identifier: o8aTlhTVLFrG+eQ1UJakHvxxeGDgz1Hrtv6T9RemyZM= Subject key identifier: A0:FE:C8:19:E5:A9:93:D1:49:0A:D2:94:4B:69:E0:07:E3:EC:79:B7 Certificate issuer: /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Certificate serial: 010D0C9F4328584FA59343C1B3F427B7BB94FEBC Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 3555 IP address blocks: 192.31.9.0/24 maxlen: 24 198.17.99.0/24 maxlen: 24 198.22.152.0/24 maxlen: 24 198.137.234.0/23 maxlen: 23 199.74.244.0/24 maxlen: 24 199.79.216.0/24 maxlen: 24 199.89.132.0/23 maxlen: 23 199.89.158.0/23 maxlen: 23 199.89.160.0/24 maxlen: 24 204.89.153.0/24 maxlen: 24 204.89.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:43:c1:b3:f4:27:b7:bb:94:fe:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=0ed19a16-543a-4c78-b11d-4de4d601647f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:cd:2b:ed:8e:82:46:ef:f0:20:d8:dd:9b: 27:8f:18:b3:9c:5f:71:a6:61:ee:98:f4:f4:8a:ad: 90:89:65:81:93:13:b2:0a:21:3b:ca:17:3f:1f:ae: f6:d6:7b:c4:5e:e2:62:2a:05:95:5f:1c:d7:98:2a: 8a:7f:ec:5e:d2:e1:69:b2:01:ff:34:9d:fd:20:35: 54:be:81:2d:ff:52:32:81:4f:da:4a:0a:27:b5:c0: f2:c7:ef:3f:d8:66:77:1c:f2:1d:51:aa:70:2e:c9: e6:1d:8d:b7:55:69:4f:65:5f:14:69:96:bc:cd:60: 8e:10:4f:ef:20:a0:ae:9f:eb:b6:67:a8:34:b3:f1: 24:09:5e:db:fb:f0:ce:6a:30:70:ab:dc:24:fd:32: 42:a5:53:58:f2:45:d3:b0:1a:0e:70:52:c3:29:2f: d4:6d:a9:6d:55:13:e5:93:e0:33:5f:cd:07:23:d6: 20:58:15:ca:21:c7:d0:4a:29:3c:5e:c6:a6:d6:19: 6b:f3:1c:e4:b0:0f:70:4b:4f:c2:2d:11:fd:38:36: c4:79:db:40:e1:af:3a:fe:4e:fa:a8:bf:ab:2c:42: 29:b7:8f:69:9b:5a:1e:94:32:38:59:59:94:83:91: 6d:66:4a:64:c7:6f:ed:71:fc:59:4e:74:22:e5:7b: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FE:C8:19:E5:A9:93:D1:49:0A:D2:94:4B:69:E0:07:E3:EC:79:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl X509v3 Authority Key Identifier: keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer sbgp-ipAddrBlock: critical IPv4: 192.31.9.0/24 198.17.99.0/24 198.22.152.0/24 198.137.234.0/23 199.74.244.0/24 199.79.216.0/24 199.89.132.0/23 199.89.158.0-199.89.160.255 204.89.153.0-204.89.154.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f8:a0:c7:62:20:da:84:22:4e:2b:0d:bb:09:9f:55:72:96: 8d:b2:6c:04:e7:dd:19:22:a1:ee:c3:b0:b1:3d:13:ba:85:de: d1:a4:0a:5e:3d:3a:a2:e4:1b:2b:55:b9:14:d8:3e:9d:ab:ac: b5:64:b9:b3:0b:1d:d6:ae:fb:6a:df:cf:59:65:69:7d:18:8a: 13:2c:6b:20:a5:df:79:75:3a:eb:b9:8a:97:f3:b2:f1:97:eb: 02:16:2c:71:d6:8c:c7:ab:d1:12:47:b3:ae:db:bf:24:22:9e: a7:7d:37:9f:1a:d3:7c:25:6c:c9:ce:88:d7:2e:8e:a4:5d:33: 3f:7c:cc:2e:1d:f3:d2:a4:53:2e:9c:37:ed:91:c7:4f:18:84: b6:2e:0a:7d:8d:26:6d:f0:49:67:ab:c1:ba:97:bd:0e:e4:a5: 19:24:e8:b5:f0:4e:7d:ad:df:a7:c5:f5:7a:d9:b3:e4:40:17: 21:fa:8c:27:c3:5f:23:39:eb:f6:e4:68:72:2e:36:48:3f:90: 9d:d4:76:92:96:75:7b:27:20:c1:9b:f6:44:ea:72:18:72:03: 42:7e:ae:88:f1:7e:0a:3b:28:0d:f2:f7:84:02:72:e2:7f:16: 72:c3:d0:88:c4:4b:99:e0:44:86:46:21:d9:e7:3a:10:ec:55: d6:68:eb:3e -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWE+lk0PBs/Qnt7uU/rwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiY2YzOGItYzQ2ZC00YmYxLTg3MDUtODhhZWVjMTlh YmYxMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk MGVkMTlhMTYtNTQzYS00Yzc4LWIxMWQtNGRlNGQ2MDE2NDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLbNK+2Ogkbv8CDY3ZsnjxiznF9xpmHumPT0 iq2QiWWBkxOyCiE7yhc/H6721nvEXuJiKgWVXxzXmCqKf+xe0uFpsgH/NJ39IDVU voEt/1IygU/aSgontcDyx+8/2GZ3HPIdUapwLsnmHY23VWlPZV8UaZa8zWCOEE/v IKCun+u2Z6g0s/EkCV7b+/DOajBwq9wk/TJCpVNY8kXTsBoOcFLDKS/UbaltVRPl k+AzX80HI9YgWBXKIcfQSik8Xsam1hlr8xzksA9wS0/CLRH9ODbEedtA4a86/k76 qL+rLEIpt49pm1oelDI4WVmUg5FtZkpkx2/tcfxZTnQi5XsDgQIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFKD+yBnlqZPRSQrSlEtp4Afj7Hm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJj ZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFlZWMxOWFiZjEvODIwYmUxNWYtMWFiMC0z ZTZjLTg1NTQtOTUxZDk5ZDE4ZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzJiY2YzOGItYzQ2ZC00YmYxLTg3 MDUtODhhZWVjMTlhYmYxLzMyYmNmMzhiLWM0NmQtNGJmMS04NzA1LTg4YWVlYzE5 YWJmMS5jcmwwHwYDVR0jBBgwFoAUZ4kEXXo/RjGOHDz4F8NW8uOG+JswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJjZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFl ZWMxOWFiZjEuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAwB8JAwQA xhFjAwQAxhaYAwQBxonqAwQAx0r0AwQAx0/YAwQBx1mEMAwDBAHHWZ4DBADHWaAw DAMEAMxZmQMEAMxZmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBj+KDHYiDahCJOKw27CZ9VcpaNsmwE590Z IqHuw7CxPRO6hd7RpApePTqi5BsrVbkU2D6dq6y1ZLmzCx3Wrvtq389ZZWl9GIoT LGsgpd95dTrruYqX87Lxl+sCFixx1ozHq9ESR7Ou278kIp6nfTefGtN8JWzJzojX Lo6kXTM/fMwuHfPSpFMunDftkcdPGIS2Lgp9jSZt8Elnq8G6l70O5KUZJOi18E59 rd+nxfV62bPkQBch+ownw18jOev25GhyLjZIP5Cd1HaSlnV7JyDBm/ZE6nIYcgNC fq6I8X4KOygN8veEAnLifxZyw9CIxEuZ4ESGRiHZ5zoQ7FXWaOs+ -----END CERTIFICATE-----Generated at Thu Oct 29 01:39:00 2026 by rpki-client