$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cf6971-546a-33c1-aa83-1fd96ef5a137.roa File: 32cf6971-546a-33c1-aa83-1fd96ef5a137.roa (raw, json) Hash identifier: COFgMVu/j24BnZSAccPwqd4ajFk7lOnbGHbaXfbYOH4= Subject key identifier: 27:6B:3D:70:FA:7A:93:50:F9:1A:C3:3B:DC:4D:A5:62:98:A6:19:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F0D6CF4D29BF2038D06ABC400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cf6971-546a-33c1-aa83-1fd96ef5a137.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31984 IP address blocks: 173.222.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f4:d2:9b:f2:03:8d:06:ab:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=8be221b2-1755-415f-83e1-02d4c18a9a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:d4:ef:4e:69:4a:50:af:2a:fb:ae:e6:c7: 4b:50:07:2b:39:34:f8:85:46:35:bd:6f:cf:0d:da: ed:41:f4:c0:c3:d4:47:83:94:a7:43:71:52:6b:47: 54:ed:16:37:e7:9f:99:be:db:a9:3f:af:58:dd:3b: db:2b:8a:b4:2b:c2:9d:ea:09:75:fa:7f:56:7c:4c: ee:42:55:81:bb:79:a1:07:d3:ea:07:d7:f6:f5:90: 4c:e0:99:aa:e4:68:bc:6d:5c:f7:8d:89:1f:97:7a: 9a:5b:65:08:c0:71:c0:53:ab:1a:98:1a:28:99:a0: 3d:58:80:cf:77:d0:35:32:5c:cc:f1:d7:d5:0e:02: 40:89:8a:cf:f5:8b:f7:5a:d3:a1:96:3d:2d:d3:05: c3:67:57:5b:dd:fe:19:19:51:3a:14:9b:1e:af:42: ad:56:25:66:70:6e:24:68:f5:d3:fa:2b:d9:b7:c0: fd:3b:df:fb:8f:e3:a6:11:45:d6:39:ff:19:d8:e5: 05:ac:e3:fa:39:a9:dc:e2:20:b6:9e:20:f4:1c:f4: 0e:34:60:61:f8:19:76:0a:37:77:f8:f0:8d:7d:80: f6:2e:ee:d6:1a:98:f7:58:a9:93:d0:0f:35:54:a0: 7c:87:d6:9e:09:c1:fe:67:49:b9:5a:a5:b6:bc:62: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6B:3D:70:FA:7A:93:50:F9:1A:C3:3B:DC:4D:A5:62:98:A6:19:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cf6971-546a-33c1-aa83-1fd96ef5a137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d7:13:2b:52:de:45:d3:cc:1e:bc:60:5b:af:ae:b5:4b:ef: cf:51:ac:e4:f2:d6:71:e3:e1:cb:33:9b:da:37:c8:50:aa:c1: 48:5c:44:ad:c7:4c:28:8b:da:98:99:a1:09:10:da:d3:ff:6c: 71:78:18:cc:55:f5:a8:f3:7b:cc:8a:49:68:4d:bc:7c:12:22: 1b:92:b9:cf:1c:4a:c7:9d:83:9d:63:ff:5c:c2:9a:ee:68:6d: 8e:c4:7d:8d:69:16:18:dc:b0:f1:0e:2d:cf:58:fa:06:71:02: af:62:11:92:7a:4c:b5:df:49:46:c3:7e:29:32:ed:8d:0f:f5: 38:ba:a2:3a:95:bc:04:5f:51:69:46:e3:04:1a:0e:48:9c:af: b6:44:91:bd:64:17:aa:76:4a:76:91:51:24:78:34:47:72:ef: dc:a9:a0:cf:71:bb:13:e4:6f:d9:9d:c9:50:c0:d1:4e:9c:5a: 9f:fa:a2:d3:17:e2:0f:59:b3:93:ea:ca:13:9c:c7:33:22:51: cd:be:3d:8f:04:10:92:28:5c:dd:03:1b:f6:6d:93:d7:2c:8c: e2:0b:41:b8:12:09:6f:75:5d:1d:ad:92:cc:3c:f9:6c:e7:b2: 08:d5:e8:c4:ca:af:70:5c:17:79:fe:7d:19:c3:27:8d:dd:bc: 89:c7:10:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPTSm/IDjQarxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OGJlMjIxYjItMTc1NS00MTVmLTgzZTEtMDJkNGMxOGE5YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJXU705pSlCvKvuu5sdLUAcrOTT4hUY1vW/P DdrtQfTAw9RHg5SnQ3FSa0dU7RY355+ZvtupP69Y3TvbK4q0K8Kd6gl1+n9WfEzu QlWBu3mhB9PqB9f29ZBM4Jmq5Gi8bVz3jYkfl3qaW2UIwHHAU6samBoomaA9WIDP d9A1MlzM8dfVDgJAiYrP9Yv3WtOhlj0t0wXDZ1db3f4ZGVE6FJser0KtViVmcG4k aPXT+ivZt8D9O9/7j+OmEUXWOf8Z2OUFrOP6Oanc4iC2niD0HPQONGBh+Bl2Cjd3 +PCNfYD2Lu7WGpj3WKmT0A81VKB8h9aeCcH+Z0m5WqW2vGKY3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdrPXD6epNQ+RrDO9xNpWKYphmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJjZjY5NzEtNTQ2YS0z M2MxLWFhODMtMWZkOTZlZjVhMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbXEytS3kXTzB68YFuvrrVL789RrOTy1nHj4cszm9o3yFCqwUhcRK3H TCiL2piZoQkQ2tP/bHF4GMxV9ajze8yKSWhNvHwSIhuSuc8cSsedg51j/1zCmu5o bY7EfY1pFhjcsPEOLc9Y+gZxAq9iEZJ6TLXfSUbDfiky7Y0P9Ti6ojqVvARfUWlG 4wQaDkicr7ZEkb1kF6p2SnaRUSR4NEdy79ypoM9xuxPkb9mdyVDA0U6cWp/6otMX 4g9Zs5PqyhOcxzMiUc2+PY8EEJIoXN0DG/Ztk9csjOILQbgSCW91XR2tksw8+Wzn sgjV6MTKr3BcF3n+fRnDJ43dvInHEIk= -----END CERTIFICATE-----Generated at Sat Sep 5 03:28:42 2026 by rpki-client