$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa File: 5fc3e362-19d5-308a-8dcb-de8129446685.roa (raw, json) Hash identifier: DtSl4K8IP4p90P7ovc5zGfNXWWAPNxZgngnGDlX+cKI= Subject key identifier: F3:63:4A:B8:DF:0E:BC:04:34:CB:B0:3A:FD:43:C7:4E:84:BB:4B:B3 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584F7BB2EA762F4CB7E714FB74E0 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 20278 IP address blocks: 167.88.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:ea:76:2f:4c:b7:e7:14:fb:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=e14cb18c-8983-4358-9459-69ca5fa6324c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:04:00:a4:a9:bf:d3:cb:62:3e:29:87:23: 76:56:26:69:1d:97:3e:6f:17:57:61:ed:7a:da:53: 07:99:ef:fc:e1:40:06:07:ae:b7:4b:96:4f:06:f1: 25:73:8e:02:70:1a:f8:4f:99:c6:fe:00:38:99:18: f0:6a:ff:09:74:18:3b:e3:1c:bd:22:cc:6c:b8:e3: 75:71:e2:fc:df:1e:45:b4:18:48:5d:c3:2c:42:7a: 80:c9:b1:80:25:17:bd:a2:8a:96:14:18:83:23:f2: b1:58:59:0e:60:72:76:eb:26:92:11:48:d3:c4:89: c7:25:d7:0c:fb:1b:16:23:50:3e:70:f8:95:ca:23: a6:b9:1d:5c:c6:66:40:2e:50:63:1f:eb:b8:42:63: c3:52:79:f3:f7:82:9c:fa:60:a0:92:e0:7f:7d:47: 9b:b6:09:65:1f:52:9d:9c:8b:be:e9:3c:31:5e:97: 42:25:31:95:fa:85:27:f6:22:f0:ba:11:3e:af:17: ae:02:15:23:bc:fe:d4:cf:d3:52:2c:3e:2b:eb:4a: 0e:85:7a:ef:e4:ac:4c:29:52:af:7e:01:66:df:82: e7:a7:be:1a:92:d5:d2:82:be:01:7b:65:cc:b6:9d: 3b:f3:90:c8:f2:2a:7a:dd:bd:ff:8f:de:22:0d:f0: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:63:4A:B8:DF:0E:BC:04:34:CB:B0:3A:FD:43:C7:4E:84:BB:4B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 167.88.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c1:32:7f:ba:5c:0c:28:71:2e:65:24:90:58:29:90:c4:4b: 89:82:ab:18:20:b5:e5:0a:e1:6c:b5:ff:ad:57:49:9a:e0:f9: 50:20:63:b5:00:cd:bf:55:82:67:fe:81:d7:9c:00:15:95:d6: d3:da:7d:7f:a2:e7:3f:c6:bb:68:6e:44:8d:c2:31:84:d7:81: b2:b5:11:6e:b5:60:a6:45:38:28:55:dd:24:2d:fd:45:28:ea: 34:10:a1:9d:54:c0:ce:e3:35:61:99:7d:65:c4:16:1a:3a:51: 08:bb:61:0e:4e:1f:e4:50:33:7e:a2:d9:dd:ab:58:6a:44:7a: 5f:46:6f:44:f1:9b:af:18:de:5b:65:8c:b5:25:82:59:0b:18: 36:3b:1b:e0:23:2d:65:27:39:a4:c2:cf:0a:4f:4f:8f:16:01: 47:32:2e:6e:c1:c9:80:d1:ce:40:19:37:f8:e8:17:f8:27:53: af:bb:e4:c8:6c:2a:f1:73:f4:04:b9:9f:8c:3b:eb:c3:93:ce: 31:ff:36:82:ec:f1:6f:97:0d:9d:bb:f9:6a:72:a1:d7:e9:44: ea:a5:2e:e1:bf:fa:6b:ee:89:c7:60:10:c5:cf:2a:9a:b4:90: c7:d3:30:9c:4c:77:91:8b:85:06:8f:af:0f:0a:a9:83:a4:56: ce:9c:fd:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sup2L0y35xT7dOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk ZTE0Y2IxOGMtODk4My00MzU4LTk0NTktNjljYTVmYTYzMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWYEAKSpv9PLYj4phyN2ViZpHZc+bxdXYe16 2lMHme/84UAGB663S5ZPBvElc44CcBr4T5nG/gA4mRjwav8JdBg74xy9IsxsuON1 ceL83x5FtBhIXcMsQnqAybGAJRe9ooqWFBiDI/KxWFkOYHJ26yaSEUjTxInHJdcM +xsWI1A+cPiVyiOmuR1cxmZALlBjH+u4QmPDUnnz94Kc+mCgkuB/fUebtgllH1Kd nIu+6TwxXpdCJTGV+oUn9iLwuhE+rxeuAhUjvP7Uz9NSLD4r60oOhXrv5KxMKVKv fgFm34Lnp74aktXSgr4Be2XMtp0785DI8ip63b3/j94iDfA1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNjSrjfDrwENMuwOv1Dx06Eu0uzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNWZjM2UzNjItMTlkNS0z MDhhLThkY2ItZGU4MTI5NDQ2Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp1gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzBMn+6XAwocS5lJJBYKZDES4mCqxggteUK4Wy1/61XSZrg+VAgY7UA zb9Vgmf+gdecABWV1tPafX+i5z/Gu2huRI3CMYTXgbK1EW61YKZFOChV3SQt/UUo 6jQQoZ1UwM7jNWGZfWXEFho6UQi7YQ5OH+RQM36i2d2rWGpEel9Gb0Txm68Y3ltl jLUlglkLGDY7G+AjLWUnOaTCzwpPT48WAUcyLm7ByYDRzkAZN/joF/gnU6+75Mhs KvFz9AS5n4w768OTzjH/NoLs8W+XDZ27+WpyodfpROqlLuG/+mvuicdgEMXPKpq0 kMfTMJxMd5GLhQaPrw8KqYOkVs6c/aM= -----END CERTIFICATE-----Generated at Wed Oct 14 10:11:33 2026 by rpki-client