$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa File: 32961140-fc1b-3f18-9ecc-e50da122d081.roa (raw, json) Hash identifier: kesVAwRQP6pUqcGty28ho+SEU03TkR6u0vZZm+FmNQY= Subject key identifier: 13:46:75:28:9E:27:28:7A:32:AD:34:AA:28:94:96:6A:43:96:08:47 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F093CF1A440B6900BE60970F0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 62651 IP address blocks: 216.131.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f1:a4:40:b6:90:0b:e6:09:70:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=8361032e-7f06-455a-a6e5-bf5eb73ceda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:47:92:1b:73:0c:77:59:d0:33:6e:48:10:09: e6:30:1f:a3:12:8a:78:6a:e9:a7:38:ee:6a:74:ed: c0:3f:e2:04:94:19:1e:41:7b:be:95:62:2b:48:a1: 72:1e:ee:70:83:a7:79:84:1f:53:62:8a:e2:d6:1b: e3:30:c4:76:4e:32:b9:8e:cf:f9:04:dd:50:7e:ed: 93:5a:05:bb:62:b5:f9:de:aa:43:51:a3:97:07:59: dc:2f:bd:32:35:e4:30:d7:7c:08:1d:f5:3f:d3:7d: 87:20:4d:cf:c0:82:8a:b7:ae:9d:9c:fa:0f:e4:0c: c1:87:d5:82:ce:73:fc:de:ec:7c:74:0d:d9:b5:f8: 7d:53:d5:5f:bc:9a:fe:5e:49:89:27:94:85:be:29: f6:2c:f6:2a:1f:5b:20:86:97:9d:13:d7:41:57:b8: 51:e7:7b:62:7c:49:11:ae:8d:85:3b:ae:37:63:e8: a9:12:52:4d:82:eb:46:54:e0:2c:5d:69:09:0e:e5: 76:9b:9a:1b:22:6a:2e:f2:08:e4:6f:1c:f8:23:c5: 0e:75:20:bc:0b:56:a5:99:c7:b6:67:67:8c:d0:dd: b7:f4:cb:5f:06:29:97:71:70:b2:78:29:dc:b9:1a: b3:b3:d4:16:df:87:4a:09:d6:ed:16:e2:cb:e7:f3: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:46:75:28:9E:27:28:7A:32:AD:34:AA:28:94:96:6A:43:96:08:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a5:ec:f9:5f:57:f0:43:55:1e:b4:95:1e:3b:0e:89:ff:62: 14:1c:be:8e:ea:f3:de:d9:03:90:06:cc:b7:76:5e:17:20:c8: f7:93:10:03:69:a2:6e:4f:29:07:90:7e:f1:d5:e9:43:f6:2b: e8:28:cf:7c:d1:82:72:98:fe:f3:d8:0d:c0:2b:32:e9:22:6b: cb:0c:b2:be:49:21:9c:d0:74:69:e6:24:77:fa:8c:e1:8a:68: 6e:4c:76:97:1d:c0:27:e4:53:a2:95:53:d7:51:5e:d6:81:1d: 65:e8:d8:0f:65:1e:a5:03:ef:6a:a6:8b:12:e6:07:1f:67:46: 8a:26:29:5a:85:7e:ff:74:ec:e7:02:c9:66:e0:84:c0:48:87: 12:d2:c5:d0:09:c7:3a:1e:86:3b:69:05:b0:7e:69:67:54:24: d2:ce:b8:aa:4c:3e:8a:62:ce:7c:39:6f:a9:5a:d9:30:9a:76: 24:59:56:91:25:a1:ed:ed:a7:b7:e9:f5:17:b5:3d:d5:96:05: 32:bd:5e:44:58:6b:7f:93:5a:3e:b5:f3:c9:41:1b:d0:19:b7: 2f:47:f1:aa:93:ed:02:b8:49:02:8c:5e:df:da:40:65:64:ee: c3:c8:ce:5a:db:e4:8f:a8:eb:86:16:62:2f:33:3d:c7:85:36: ea:8e:fa:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPGkQLaQC+YJcPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ODM2MTAzMmUtN2YwNi00NTVhLWE2ZTUtYmY1ZWI3M2NlZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEeSG3MMd1nQM25IEAnmMB+jEop4aumnOO5q dO3AP+IElBkeQXu+lWIrSKFyHu5wg6d5hB9TYori1hvjMMR2TjK5js/5BN1Qfu2T WgW7YrX53qpDUaOXB1ncL70yNeQw13wIHfU/032HIE3PwIKKt66dnPoP5AzBh9WC znP83ux8dA3Ztfh9U9VfvJr+XkmJJ5SFvin2LPYqH1sghpedE9dBV7hR53tifEkR ro2FO643Y+ipElJNgutGVOAsXWkJDuV2m5obImou8gjkbxz4I8UOdSC8C1almce2 Z2eM0N239MtfBimXcXCyeCncuRqzs9QW34dKCdbtFuLL5/MN5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNGdSieJyh6Mq00qiiUlmpDlghHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMzI5NjExNDAtZmMxYi0z ZjE4LTllY2MtZTUwZGExMjJkMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWl7PlfV/BDVR60lR47Don/YhQcvo7q897ZA5AGzLd2XhcgyPeTEANp om5PKQeQfvHV6UP2K+goz3zRgnKY/vPYDcArMukia8sMsr5JIZzQdGnmJHf6jOGK aG5MdpcdwCfkU6KVU9dRXtaBHWXo2A9lHqUD72qmixLmBx9nRoomKVqFfv907OcC yWbghMBIhxLSxdAJxzoehjtpBbB+aWdUJNLOuKpMPopiznw5b6la2TCadiRZVpEl oe3tp7fp9Re1PdWWBTK9XkRYa3+TWj6188lBG9AZty9H8aqT7QK4SQKMXt/aQGVk 7sPIzlrb5I+o64YWYi8zPceFNuqO+oE= -----END CERTIFICATE-----Generated at Sat Sep 19 01:41:29 2026 by rpki-client