$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa File: b7091e43-35d5-3171-a245-3dadb9d48c94.roa (raw, json) Hash identifier: z7+Z+yW5JhXEBKz7vhL/ejjHafDUg7WO6r64oWJrb+o= Subject key identifier: EF:B4:D2:6F:A2:D4:F2:B2:66:32:26:07:0F:4C:E9:E5:B6:AA:3D:07 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584F7BB2EA82A88EF2FEC041C160 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 20278 IP address blocks: 96.9.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:ea:82:a8:8e:f2:fe:c0:41:c1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=ac590e9e-617d-4733-8b28-5f6d79cf3e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:af:33:cb:dd:09:7b:32:b8:8b:1d:da:02: 15:22:71:da:71:ef:f5:fa:be:8e:a6:39:ad:5e:f3: fa:03:e0:f0:c1:23:cc:56:48:e6:4e:58:6f:78:d1: ca:0b:9b:89:8f:89:23:c9:b5:ad:47:b4:6a:4a:19: 74:a8:67:50:1e:28:a8:6b:1f:a5:93:b6:d1:db:29: 68:a8:81:a8:d7:7e:82:7d:06:19:6b:8d:96:f4:97: e2:cf:29:2b:78:14:db:45:61:ad:51:db:a8:81:30: 95:37:3f:d7:26:aa:2f:ca:eb:d8:28:5f:2c:2b:12: 76:c7:93:0a:5a:d3:1f:a2:2b:ab:6b:65:c5:a3:9c: 0c:73:c5:c6:ad:aa:fe:59:3e:1e:bc:a2:3e:70:7a: a6:fa:55:b4:77:2d:46:09:3d:5a:62:6f:69:45:b3: 25:e2:45:43:11:c7:95:81:d9:c8:a2:2d:d6:e3:f8: 6b:02:7f:4e:f2:fb:b6:09:10:b4:8e:e4:3d:66:14: ff:d1:ff:bb:d3:8c:ec:55:36:9e:ba:c7:01:d6:81: 75:bb:91:8d:d1:94:14:a5:d5:35:5f:c1:9c:89:b4: f0:3e:b0:db:b7:9e:48:da:32:6e:0f:e0:14:31:35: a4:9d:1a:fc:cb:6e:85:b7:20:88:6e:0e:42:0a:b1: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B4:D2:6F:A2:D4:F2:B2:66:32:26:07:0F:4C:E9:E5:B6:AA:3D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 96.9.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:c3:24:81:2f:74:ea:ed:e7:ee:9d:18:f3:6a:b2:d0:6e:77: 16:4b:da:09:70:70:aa:4c:b1:28:2a:0c:b2:ef:73:7a:4f:dc: 2d:02:d0:85:51:3f:09:f8:79:95:11:a5:24:61:57:71:49:be: 06:5b:76:82:95:92:db:75:fb:fd:52:59:a8:ee:04:5e:bf:b1: 13:51:5f:85:2d:f6:bb:ed:ce:c0:9b:a8:aa:11:4b:57:37:08: 24:e3:b7:ca:92:23:13:6e:49:c3:33:9c:02:97:e3:91:4e:3c: 0c:5f:ca:8b:7c:ca:e7:48:ec:17:04:12:7c:0e:84:c1:72:31: 1f:b3:aa:8e:15:3c:f3:6e:00:8e:82:b2:52:8f:84:bc:41:71: 3d:71:3c:04:f6:06:76:53:47:bb:a6:b6:c5:90:f6:c1:b0:7d: 56:0d:05:88:9d:2d:fd:e0:8e:2c:12:bb:c8:ee:70:7f:47:a2: 76:5d:3c:44:fd:ab:46:28:bf:aa:0f:b6:bf:5e:90:d2:dd:d3: a9:42:ec:d3:22:d4:9c:73:da:09:46:b1:88:8b:d8:6a:79:19: c0:6e:de:2d:a1:a2:ab:da:74:8a:72:85:95:74:a0:e2:b4:e9: 5e:ec:ac:2e:58:19:f0:39:f0:7f:39:48:20:d8:c9:a3:ef:d6: 87:d0:37:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97suqCqI7y/sBBwWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YWM1OTBlOWUtNjE3ZC00NzMzLThiMjgtNWY2ZDc5Y2YzZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8GvM8vdCXsyuIsd2gIVInHace/1+r6Opjmt XvP6A+DwwSPMVkjmTlhveNHKC5uJj4kjybWtR7RqShl0qGdQHiioax+lk7bR2ylo qIGo136CfQYZa42W9JfizykreBTbRWGtUduogTCVNz/XJqovyuvYKF8sKxJ2x5MK WtMfoiura2XFo5wMc8XGrar+WT4evKI+cHqm+lW0dy1GCT1aYm9pRbMl4kVDEceV gdnIoi3W4/hrAn9O8vu2CRC0juQ9ZhT/0f+704zsVTaeuscB1oF1u5GN0ZQUpdU1 X8GcibTwPrDbt55I2jJuD+AUMTWknRr8y26FtyCIbg5CCrHAlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+00m+i1PKyZjImBw9M6eW2qj0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYjcwOTFlNDMtMzVkNS0z MTcxLWEyNDUtM2RhZGI5ZDQ4Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfDJIEvdOrt5+6dGPNqstBudxZL2glwcKpMsSgqDLLvc3pP3C0C0IVR Pwn4eZURpSRhV3FJvgZbdoKVktt1+/1SWajuBF6/sRNRX4Ut9rvtzsCbqKoRS1c3 CCTjt8qSIxNuScMznAKX45FOPAxfyot8yudI7BcEEnwOhMFyMR+zqo4VPPNuAI6C slKPhLxBcT1xPAT2BnZTR7umtsWQ9sGwfVYNBYidLf3gjiwSu8jucH9HonZdPET9 q0Yov6oPtr9ekNLd06lC7NMi1Jxz2glGsYiL2Gp5GcBu3i2hoqvadIpyhZV0oOK0 6V7srC5YGfA58H85SCDYyaPv1ofQN/A= -----END CERTIFICATE-----Generated at Wed Oct 14 17:14:35 2026 by rpki-client