$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/32f86f92-7988-34a2-9103-d3c579d34252.roa File: 32f86f92-7988-34a2-9103-d3c579d34252.roa (raw, json) Hash identifier: 3ey3ylORN2XGkI8wCA376QLwbskqMw8w5h/acrXVB1I= Subject key identifier: F9:83:BE:02:BB:B3:75:F3:9C:35:AC:71:0B:26:20:D3:57:BB:D9:9F Certificate issuer: /CN=d82d4750-e662-4d1e-b294-2c61d570b23e Certificate serial: 010D0C9F4328584EA7975BF23780F72A36008140 Authority key identifier: 1E:04:A2:0C:F8:BE:12:0E:F0:68:DC:A0:99:5A:E8:C0:1A:75:DF:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/32f86f92-7988-34a2-9103-d3c579d34252.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 402159 IP address blocks: 170.101.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/d82d4750-e662-4d1e-b294-2c61d570b23e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/d82d4750-e662-4d1e-b294-2c61d570b23e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:5b:f2:37:80:f7:2a:36:00:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82d4750-e662-4d1e-b294-2c61d570b23e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=aa55d2de-efe3-4ab3-83ba-f1336bf2ca38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:d1:e6:9c:cb:de:64:1e:91:78:01:3f:ab: 59:94:f9:2a:16:75:ee:6b:81:8c:b3:22:83:dd:5d: 06:e9:a3:0b:c2:5d:4d:49:2a:18:7d:67:56:4e:3f: 61:09:0e:d5:cc:af:e2:33:41:04:87:74:8d:60:5b: ed:e8:9a:37:a9:e9:fc:1c:2c:28:61:13:9f:5e:37: 27:ba:c4:76:34:aa:89:0a:7c:3d:67:5c:79:fe:0c: 3b:c8:23:8f:47:1d:0d:dd:59:98:fd:c7:44:e3:fe: b7:5a:f8:f1:8c:2c:2f:36:1d:e7:19:4c:48:63:2b: 70:bd:49:31:2a:9a:4d:fd:6c:7d:c1:a5:33:0f:5d: 44:b1:9d:be:60:52:05:94:82:4c:09:98:4e:11:23: 8c:d5:21:2e:9e:7e:74:3f:86:b3:80:24:8a:0c:e2: 1f:d9:62:91:cd:09:5a:aa:60:49:cd:33:b2:13:1f: 83:67:8f:bb:78:58:43:cf:d0:6b:27:5e:38:39:17: d6:d0:09:b3:b0:00:6c:16:bc:ec:db:b7:e0:ff:18: 0c:ee:de:91:23:22:92:90:db:80:99:48:71:88:77: 3e:31:28:25:11:ba:d0:1a:d6:1b:3c:c5:ac:95:62: 46:3b:b4:62:5b:1e:ec:88:57:97:d8:39:77:7d:04: 2b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:83:BE:02:BB:B3:75:F3:9C:35:AC:71:0B:26:20:D3:57:BB:D9:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/32f86f92-7988-34a2-9103-d3c579d34252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/d82d4750-e662-4d1e-b294-2c61d570b23e.crl X509v3 Authority Key Identifier: keyid:1E:04:A2:0C:F8:BE:12:0E:F0:68:DC:A0:99:5A:E8:C0:1A:75:DF:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e.cer sbgp-ipAddrBlock: critical IPv4: 170.101.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b9:8f:b7:9d:d1:c1:ba:90:1f:71:1f:46:6b:b1:05:9d:0f: 4b:b9:a5:64:a1:c0:46:52:a1:eb:bc:81:81:e3:c8:d0:c0:a0: 65:94:dc:19:c7:cf:af:24:62:4e:de:bd:cc:3f:d9:a1:61:11: 9c:59:db:38:60:06:fb:f4:d4:aa:49:c1:86:1c:9e:54:e6:b8: d8:8f:20:9b:e3:c2:26:f1:23:91:26:c1:a1:28:61:05:44:38: 59:4e:12:26:a7:68:79:18:8b:06:c5:e0:6c:6c:ea:f7:76:46: 91:de:f3:b4:0e:29:fd:a8:7e:04:20:a0:7a:2d:4a:aa:5d:69: 4b:7f:06:09:d5:09:ad:cc:14:e9:ed:a4:9a:06:ed:70:60:7c: 5c:6d:fd:aa:12:94:ef:c2:68:0e:88:83:fc:2d:2d:6e:78:39: f7:6b:b4:bf:a9:4f:34:40:58:40:65:c4:35:1c:d8:c7:32:d7: 15:b6:b7:71:fc:84:ce:9e:a8:28:7e:ec:65:70:1f:fa:54:d2: 76:d2:a2:52:8a:b8:95:cc:cf:02:55:d2:8f:a3:b3:cd:0c:d1: a0:d5:04:46:e4:43:21:ff:48:36:6c:29:98:42:7c:dc:cf:0b: f7:68:e8:e4:78:7b:e6:d7:b0:f2:fd:cb:a7:f3:0e:d2:f9:18: 33:9c:58:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl1vyN4D3KjYAgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgyZDQ3NTAtZTY2Mi00ZDFlLWIyOTQtMmM2MWQ1NzBi MjNlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWE1NWQyZGUtZWZlMy00YWIzLTgzYmEtZjEzMzZiZjJjYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbjR5pzL3mQekXgBP6tZlPkqFnXua4GMsyKD 3V0G6aMLwl1NSSoYfWdWTj9hCQ7VzK/iM0EEh3SNYFvt6Jo3qen8HCwoYROfXjcn usR2NKqJCnw9Z1x5/gw7yCOPRx0N3VmY/cdE4/63WvjxjCwvNh3nGUxIYytwvUkx KppN/Wx9waUzD11EsZ2+YFIFlIJMCZhOESOM1SEunn50P4azgCSKDOIf2WKRzQla qmBJzTOyEx+DZ4+7eFhDz9BrJ144ORfW0AmzsABsFrzs27fg/xgM7t6RIyKSkNuA mUhxiHc+MSglEbrQGtYbPMWslWJGO7RiWx7siFeX2Dl3fQQrrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmDvgK7s3XznDWscQsmINNXu9mfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kODJk NDc1MC1lNjYyLTRkMWUtYjI5NC0yYzYxZDU3MGIyM2UvMzJmODZmOTItNzk4OC0z NGEyLTkxMDMtZDNjNTc5ZDM0MjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDgyZDQ3NTAtZTY2Mi00ZDFlLWIy OTQtMmM2MWQ1NzBiMjNlL2Q4MmQ0NzUwLWU2NjItNGQxZS1iMjk0LTJjNjFkNTcw YjIzZS5jcmwwHwYDVR0jBBgwFoAUHgSiDPi+Eg7waNygmVrowBp13ycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kODJkNDc1MC1lNjYyLTRkMWUtYjI5NC0yYzYx ZDU3MGIyM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqmUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJi5j7ed0cG6kB9xH0ZrsQWdD0u5pWShwEZSoeu8gYHjyNDAoGWU3BnH z68kYk7evcw/2aFhEZxZ2zhgBvv01KpJwYYcnlTmuNiPIJvjwibxI5EmwaEoYQVE OFlOEianaHkYiwbF4Gxs6vd2RpHe87QOKf2ofgQgoHotSqpdaUt/BgnVCa3MFOnt pJoG7XBgfFxt/aoSlO/CaA6Ig/wtLW54OfdrtL+pTzRAWEBlxDUc2Mcy1xW2t3H8 hM6eqCh+7GVwH/pU0nbSolKKuJXMzwJV0o+js80M0aDVBEbkQyH/SDZsKZhCfNzP C/do6OR4e+bXsPL9y6fzDtL5GDOcWHc= -----END CERTIFICATE-----Generated at Sat Sep 5 00:32:22 2026 by rpki-client