$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa File: ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa (raw, json) Hash identifier: 7tFNJfEes/wmC7altUSx96bWGLs5PCJxgpOzXrxSywg= Subject key identifier: 5E:44:1F:2B:7F:D2:34:40:2A:95:34:26:4F:41:FB:04:4E:DB:AF:F5 Certificate issuer: /CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Certificate serial: 010D0C9F4328584F4976F96CB0A8087AAEF1C0E0 Authority key identifier: 5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31829 IP address blocks: 199.127.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:f9:6c:b0:a8:08:7a:ae:f1:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0fb27c88-b103-4c56-9ad2-e3d2b7c60f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:13:85:b3:cb:44:09:7c:7b:f9:1c:57:1f:fc: 48:48:56:d4:94:15:01:5c:e6:72:49:fe:bc:17:80: fd:7b:d3:c1:ac:8c:bf:ea:f0:c6:41:cb:42:5e:6a: 0f:bd:e4:42:e3:bf:4e:7b:5c:77:f7:94:ec:97:26: 73:f0:34:70:17:7a:20:03:66:8d:7b:60:46:2a:b9: dd:5f:ff:a7:36:ff:ee:0c:8c:c9:26:29:97:4f:a2: e9:a1:fe:f7:c7:74:f1:20:56:7e:c3:63:16:c1:5d: 9a:ba:13:0c:e6:2d:e0:32:4e:21:c2:bf:2f:e5:ff: 09:ee:91:cc:5f:a9:9a:0b:c9:9c:34:11:3b:df:a5: ef:a4:3a:fd:ed:72:e2:de:95:ca:27:2e:e1:80:49: f4:7d:8b:b7:17:be:55:97:0d:a4:73:1f:a9:b5:cb: 9b:89:af:ec:29:ac:11:f8:51:ef:4b:50:e6:67:d1: 7c:c9:18:f9:0f:e9:63:f5:3a:e7:ff:60:06:10:3e: 6f:55:15:ea:98:93:ef:28:c0:c9:9d:14:54:e8:c2: 21:d3:4c:d1:1e:62:4c:09:fb:75:19:95:28:e8:ab: bd:03:71:ac:f7:6b:7d:5e:47:22:da:10:99:5c:45: 9c:b5:c4:7f:3b:37:5a:ae:e3:cd:12:5e:4b:75:b5: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:44:1F:2B:7F:D2:34:40:2A:95:34:26:4F:41:FB:04:4E:DB:AF:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl X509v3 Authority Key Identifier: keyid:5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer sbgp-ipAddrBlock: critical IPv4: 199.127.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b1:21:48:61:a0:ce:45:60:0b:69:1a:54:58:20:5d:d3:41: fb:0d:c7:95:9a:bb:e4:80:f4:5e:44:56:cd:3c:3e:c0:ed:e1: 40:37:0e:60:c4:58:2a:d3:d4:c5:97:19:12:12:c9:bc:5d:8e: 0d:ae:20:9d:e3:e5:05:0b:5a:ee:11:92:4d:d9:12:13:fc:db: cd:02:af:e1:dc:d6:9a:c2:cd:3e:b6:e2:75:01:a8:f6:df:a1: 30:b2:a5:91:71:f0:26:74:58:51:5f:7c:9e:0b:b1:ad:18:5b: 61:55:4f:3f:88:49:3c:a6:b2:90:3d:23:ef:25:d1:24:2d:aa: 91:9f:a9:45:69:9a:bc:d6:25:24:9d:be:4f:96:51:c8:30:e3: 2d:3c:08:bd:18:d6:e5:20:53:cd:d9:02:6e:61:3c:69:c8:88: b7:89:67:cc:ba:b4:fa:0e:cf:44:10:f9:e4:b4:10:fd:bd:17: 13:67:83:5b:94:bc:34:52:f9:86:f6:4c:1c:78:6d:4d:cd:6b: 7c:ad:60:5c:47:05:c6:d3:65:bb:64:b1:d6:e2:27:34:a2:88: 57:72:6a:17:28:eb:6f:a3:ae:92:23:ad:fa:43:6d:7d:03:1c: ce:67:90:bb:3e:43:22:24:b7:88:a4:53:9e:52:fd:db:54:e7: 14:8a:75:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdvlssKgIeq7xwOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmNGU4NGEtNGFiZi00NDIyLThkMjYtNTcwODNlM2Ux N2NkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGZiMjdjODgtYjEwMy00YzU2LTlhZDItZTNkMmI3YzYwZjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhROFs8tECXx7+RxXH/xISFbUlBUBXOZySf68 F4D9e9PBrIy/6vDGQctCXmoPveRC479Oe1x395TslyZz8DRwF3ogA2aNe2BGKrnd X/+nNv/uDIzJJimXT6Lpof73x3TxIFZ+w2MWwV2auhMM5i3gMk4hwr8v5f8J7pHM X6maC8mcNBE736XvpDr97XLi3pXKJy7hgEn0fYu3F75Vlw2kcx+ptcubia/sKawR +FHvS1DmZ9F8yRj5D+lj9Trn/2AGED5vVRXqmJPvKMDJnRRU6MIh00zRHmJMCft1 GZUo6Ku9A3Gs92t9Xkci2hCZXEWctcR/OzdaruPNEl5LdbVZJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5EHyt/0jRAKpU0Jk9B+wRO26/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0 ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4M2UzZTE3Y2QvYWI3ZTMyZDctNTFkOS0z MDQ1LTkyZDctZTc0NmJmNmJmYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJmNGU4NGEtNGFiZi00NDIyLThk MjYtNTcwODNlM2UxN2NkLzMyZjRlODRhLTRhYmYtNDQyMi04ZDI2LTU3MDgzZTNl MTdjZC5jcmwwHwYDVR0jBBgwFoAUW6uHkmFiU8gEFTo/2CsWSVihrqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4 M2UzZTE3Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyxIUhhoM5FYAtpGlRYIF3TQfsNx5Wau+SA9F5EVs08PsDt4UA3DmDE WCrT1MWXGRISybxdjg2uIJ3j5QULWu4Rkk3ZEhP8280Cr+Hc1prCzT624nUBqPbf oTCypZFx8CZ0WFFffJ4Lsa0YW2FVTz+ISTymspA9I+8l0SQtqpGfqUVpmrzWJSSd vk+WUcgw4y08CL0Y1uUgU83ZAm5hPGnIiLeJZ8y6tPoOz0QQ+eS0EP29FxNng1uU vDRS+Yb2TBx4bU3Na3ytYFxHBcbTZbtksdbiJzSiiFdyahco62+jrpIjrfpDbX0D HM5nkLs+QyIkt4ikU55S/dtU5xSKdeU= -----END CERTIFICATE-----Generated at Sat Sep 26 16:40:41 2026 by rpki-client