$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a2fa63dd-f75c-3302-a433-1b4574a1a2e0.roa File: a2fa63dd-f75c-3302-a433-1b4574a1a2e0.roa (raw, json) Hash identifier: NruwepKmKIkp9aExtbCp1HqgStYqLUAG+Ttcm8ag8Lg= Subject key identifier: 07:DF:03:BE:DF:BA:F1:A9:FF:89:87:0F:2F:01:9A:D9:07:96:FE:AB Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584ED9C745D3EDC56281875C5448 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a2fa63dd-f75c-3302-a433-1b4574a1a2e0.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 20278 IP address blocks: 64.44.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:45:d3:ed:c5:62:81:87:5c:54:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=0e9c783f-9134-40ab-83b7-2664606fe4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:ec:a0:f0:92:c2:9a:c6:97:7a:74:d1:69: ec:1b:fe:cd:e0:60:85:18:ca:54:11:2f:6f:b8:c8: 11:77:14:3f:32:06:31:ed:16:17:8f:90:56:9d:cc: 72:21:a8:a0:9a:04:20:f0:d3:6f:fc:cf:1b:99:9d: 67:c3:92:c9:27:9d:7d:d4:a0:e5:c5:52:c9:89:38: 01:3b:64:57:d3:1d:a4:ba:6f:91:c8:2e:af:cf:0b: 31:b2:73:92:5c:63:6b:1c:7c:62:e3:79:4c:d9:98: e4:e3:f9:4c:68:94:69:89:8b:d1:3f:23:81:a3:7a: db:79:a6:04:45:14:ef:6d:04:54:26:f7:cd:b6:e9: 89:44:15:19:72:5a:89:d1:dc:ec:8e:9f:46:06:4b: 0d:d5:db:87:7c:4a:b4:b4:48:0d:52:0d:dc:82:fd: 0f:82:4d:32:75:66:1d:48:42:54:bd:fb:0e:92:8d: ef:0e:15:67:44:56:29:5d:76:61:2c:cd:73:ea:26: b8:81:f8:01:fb:6f:c5:d7:ea:7c:07:5f:4b:01:08: 8a:46:75:a2:83:19:b8:28:a8:b5:d0:08:51:af:5e: b5:54:38:6a:0e:dc:9d:68:f4:23:d9:07:4d:e8:23: c8:53:09:31:f2:50:6a:0d:0d:71:d0:51:fa:dc:fd: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DF:03:BE:DF:BA:F1:A9:FF:89:87:0F:2F:01:9A:D9:07:96:FE:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a2fa63dd-f75c-3302-a433-1b4574a1a2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 64.44.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7a:fd:36:96:b5:fa:3d:2e:87:6b:1e:43:06:7f:73:4e:ce: d6:3a:05:2f:e4:8b:e9:93:2e:ab:82:b0:3b:6f:8a:82:c0:f4: e6:eb:ef:42:e0:d6:0e:cf:da:dd:83:18:a1:c0:de:92:e0:2c: 5f:17:7a:94:58:58:20:e3:6e:52:3a:33:d7:30:a3:99:9b:62: 2f:fd:04:9a:a6:3f:bc:69:80:67:62:7b:49:f0:0c:eb:a0:3e: c5:96:47:2c:c2:be:37:c3:0c:79:5e:18:74:77:66:24:ca:97: 5b:3b:b1:b6:48:ab:cc:78:36:2e:97:c1:ae:6e:0f:95:a5:f3: a6:b5:f2:dd:eb:dc:4b:ea:2c:41:0e:ce:5b:ee:d5:79:8c:b2: 3a:cd:99:6c:ac:d5:e6:85:25:af:ef:63:85:59:24:47:34:0f: ad:04:97:71:63:2b:27:64:b2:03:6f:08:86:ca:cc:df:6d:06: 4d:0a:b6:84:1c:79:aa:af:d8:aa:cb:f7:e0:12:02:31:a1:fd: 01:b9:4a:cb:7e:8b:60:4f:34:0c:67:47:a7:ac:68:ee:0c:1f: 0a:36:a5:8f:fc:b4:b3:e9:f8:68:66:90:86:48:6b:85:3b:03: 91:74:3e:25:aa:8b:fd:98:c1:d3:19:48:c5:22:24:cd:5e:99: e0:4f:3b:08 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7Zx0XT7cVigYdcVEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MGU5Yzc4M2YtOTEzNC00MGFiLTgzYjctMjY2NDYwNmZlNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDnsoPCSwprGl3p00WnsG/7N4GCFGMpUES9v uMgRdxQ/MgYx7RYXj5BWncxyIaigmgQg8NNv/M8bmZ1nw5LJJ5191KDlxVLJiTgB O2RX0x2kum+RyC6vzwsxsnOSXGNrHHxi43lM2Zjk4/lMaJRpiYvRPyOBo3rbeaYE RRTvbQRUJvfNtumJRBUZclqJ0dzsjp9GBksN1duHfEq0tEgNUg3cgv0Pgk0ydWYd SEJUvfsOko3vDhVnRFYpXXZhLM1z6ia4gfgB+2/F1+p8B19LAQiKRnWigxm4KKi1 0AhRr161VDhqDtydaPQj2QdN6CPIUwkx8lBqDQ1x0FH63P3+3wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAffA77fuvGp/4mHDy8BmtkHlv6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYTJmYTYzZGQtZjc1Yy0z MzAyLWE0MzMtMWI0NTc0YTFhMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQCwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABnr9Npa1+j0uh2seQwZ/c07O1joFL+SL6ZMuq4KwO2+KgsD05uvvQuDW Ds/a3YMYocDekuAsXxd6lFhYIONuUjoz1zCjmZtiL/0EmqY/vGmAZ2J7SfAM66A+ xZZHLMK+N8MMeV4YdHdmJMqXWzuxtkirzHg2LpfBrm4PlaXzprXy3evcS+osQQ7O W+7VeYyyOs2ZbKzV5oUlr+9jhVkkRzQPrQSXcWMrJ2SyA28IhsrM320GTQq2hBx5 qq/Yqsv34BICMaH9AblKy36LYE80DGdHp6xo7gwfCjalj/y0s+n4aGaQhkhrhTsD kXQ+JaqL/ZjB0xlIxSIkzV6Z4E87CA== -----END CERTIFICATE-----Generated at Thu Aug 27 17:42:53 2026 by rpki-client