$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa File: b31f8880-9daf-3934-8200-09c9b0c1e35f.roa (raw, json) Hash identifier: 1ZaAvBi6yvNnblP+Hp7gvZM7kiKLfQ+oBAQoQileNcc= Subject key identifier: DD:EE:6F:09:C3:EE:CA:17:90:21:70:25:8C:D6:4D:B2:7E:D7:B2:43 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584FA2C87812EC5D05043D2B8C80 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 8888 IP address blocks: 96.9.211.0/24 maxlen: 24 96.9.212.0/24 maxlen: 24 96.9.213.0/24 maxlen: 24 172.93.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:78:12:ec:5d:05:04:3d:2b:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=d6e880a9-ad0c-4653-aab2-006dbbd5012a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:cb:54:4c:b2:d4:4d:96:93:85:f3:09:8f: 7c:f7:0b:eb:98:a5:91:a0:76:7e:5b:e2:b2:10:c2: 27:e3:14:37:31:af:97:bb:07:7e:88:57:37:5b:12: 4e:8e:cc:9f:1d:4c:f5:3b:7a:af:82:45:b3:0d:d4: cf:3c:15:96:29:7c:86:14:30:56:4c:47:a4:bb:64: 6f:16:a5:e6:ee:2a:a3:2a:54:dc:6d:d5:4e:68:1c: da:95:dc:4f:c3:96:ff:b1:ad:a6:7a:24:45:a2:20: 69:e8:25:f0:e1:29:d4:f5:86:dc:a1:c1:9c:f9:78: 02:60:63:17:f0:45:de:e7:9e:88:c3:34:eb:b5:e4: fb:6e:2d:1e:7b:7a:62:ea:03:d3:38:22:5e:ff:f5: 5c:b9:b7:0a:e2:66:a8:b7:2f:69:c4:b1:3f:35:eb: a9:a3:fa:38:3b:75:54:5c:b7:1a:23:83:c0:48:03: d6:0c:60:99:dd:be:d6:51:c8:93:92:a7:39:f0:55: 75:81:9e:0f:84:67:ad:9d:52:da:44:2b:3e:cc:85: f5:a5:af:5f:78:f3:c4:b7:2a:bf:3f:1f:e3:94:38: fe:f6:a2:ef:e4:14:ad:4e:0a:b8:ac:ce:13:ef:22: a8:7d:f6:5c:8c:a9:63:f3:f1:6c:7e:2b:02:d2:53: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EE:6F:09:C3:EE:CA:17:90:21:70:25:8C:D6:4D:B2:7E:D7:B2:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 96.9.211.0-96.9.213.255 172.93.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:20:44:19:96:c7:3a:a6:fe:ab:d5:97:7e:69:3b:2e:af:0f: 01:9b:4e:98:4f:8c:2f:f6:9e:c9:86:76:fe:4c:7b:01:9c:89: d7:b7:69:7c:93:72:10:3d:f5:07:17:a9:64:55:a7:e4:00:08: c9:0f:24:36:08:d8:b1:99:ee:4b:a0:12:f3:7a:60:f4:f9:7e: e3:a5:b8:57:3b:34:57:de:dd:4e:35:13:d4:b4:dd:19:0b:fa: 07:07:d3:32:11:c9:dc:07:e5:8b:79:53:87:b5:71:2a:49:d8: d9:8c:51:e5:9a:13:ed:9e:36:0d:2f:bd:86:32:57:57:dd:06: 3e:99:dc:6d:b8:d1:78:6c:9a:03:51:44:9d:33:4d:5a:56:a5: 0f:0f:44:1c:8d:dd:f9:b4:dd:b4:70:7e:6a:ae:25:a9:39:cf: 36:97:06:27:3a:21:00:48:6b:c9:db:5c:a4:0d:b0:bf:65:b1: ca:6d:a2:69:43:95:7b:b7:cf:34:e1:6b:1b:ba:17:92:0d:b7: 6a:3e:4d:bb:05:59:45:20:3f:3f:0d:62:a3:f0:02:aa:e3:08: 7f:57:09:78:f9:fc:0a:43:d1:f1:60:82:6f:ea:8a:9f:87:40: 01:d4:b4:80:f8:69:f2:b8:d6:4f:ad:55:bb:a5:60:e4:ef:13: 75:b4:47:63 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE+iyHgS7F0FBD0rjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk ZDZlODgwYTktYWQwYy00NjUzLWFhYjItMDA2ZGJiZDUwMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8bLVEyy1E2Wk4XzCY989wvrmKWRoHZ+W+Ky EMIn4xQ3Ma+Xuwd+iFc3WxJOjsyfHUz1O3qvgkWzDdTPPBWWKXyGFDBWTEeku2Rv FqXm7iqjKlTcbdVOaBzaldxPw5b/sa2meiRFoiBp6CXw4SnU9YbcocGc+XgCYGMX 8EXe556IwzTrteT7bi0ee3pi6gPTOCJe//VcubcK4maoty9pxLE/Neupo/o4O3VU XLcaI4PASAPWDGCZ3b7WUciTkqc58FV1gZ4PhGetnVLaRCs+zIX1pa9fePPEtyq/ Px/jlDj+9qLv5BStTgq4rM4T7yKoffZcjKlj8/FsfisC0lNV7wIDAQABo4IDYzCC A18wHQYDVR0OBBYEFN3ubwnD7soXkCFwJYzWTbJ+17JDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYjMxZjg4ODAtOWRhZi0z OTM0LTgyMDAtMDljOWIwYzFlMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABgCdMD BAFgCdQDBACsXbowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAhCBEGZbHOqb+q9WXfmk7Lq8PAZtOmE+ML/ae yYZ2/kx7AZyJ17dpfJNyED31BxepZFWn5AAIyQ8kNgjYsZnuS6AS83pg9Pl+46W4 Vzs0V97dTjUT1LTdGQv6BwfTMhHJ3Afli3lTh7VxKknY2YxR5ZoT7Z42DS+9hjJX V90GPpncbbjReGyaA1FEnTNNWlalDw9EHI3d+bTdtHB+aq4lqTnPNpcGJzohAEhr ydtcpA2wv2Wxym2iaUOVe7fPNOFrG7oXkg23aj5NuwVZRSA/Pw1io/ACquMIf1cJ ePn8CkPR8WCCb+qKn4dAAdS0gPhp8rjWT61Vu6Vg5O8TdbRHYw== -----END CERTIFICATE-----Generated at Tue Oct 27 05:08:12 2026 by rpki-client