$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa File: ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa (raw, json) Hash identifier: yBp2UsPj43zzJL0QHumZvB5BHeiLY/hyCsFqyAPmRRI= Subject key identifier: 14:5A:ED:80:D9:F6:55:3B:34:7E:8B:A8:AA:D5:91:82:13:53:C1:DD Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584D571FA20E8D72F5A21D371400 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 32204 IP address blocks: 64.44.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a2:0e:8d:72:f5:a2:1d:37:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=006324df-a294-49f9-862c-846f9d41c09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:01:6e:b0:9a:82:aa:32:b4:21:ec:29:47:c2: 1d:ab:65:f2:74:46:eb:a3:1c:88:9f:8d:75:86:74: 52:58:d0:ae:86:3c:60:f3:7d:2d:d9:38:41:21:d0: 19:ec:0e:4e:9b:c0:a5:9a:d5:09:68:3e:cd:09:3c: dc:ed:8d:18:05:c1:db:fa:3c:06:66:5a:a7:e5:63: 41:03:17:dc:b9:bb:4c:8c:c4:77:52:28:a6:14:e3: c7:a0:20:45:8a:1e:04:f7:0f:45:f5:f9:de:08:5b: 4a:e4:1f:ab:b4:4d:0c:5e:d1:33:d9:d4:c1:52:b0: c3:1e:69:75:89:0b:3b:eb:65:1d:f1:28:35:95:35: 6e:43:0e:9a:09:02:22:a1:6a:c2:31:05:c4:0d:de: df:c5:ce:d8:25:cb:68:b5:34:22:32:fb:3e:75:95: ad:fe:37:87:24:67:42:d3:c1:32:5f:88:f7:d9:b6: d6:f6:a0:45:e3:06:b8:ba:22:66:c6:06:b5:2b:0b: 77:de:20:fc:e0:41:9c:c6:e2:0c:29:74:f1:e2:79: 17:f7:be:77:39:ee:c8:ca:d8:b4:f6:c9:28:6c:8c: 5e:da:67:03:ee:c3:85:fe:b2:7e:80:f5:8c:e5:58: 77:33:98:13:03:7d:ce:da:c7:37:a7:f1:d1:78:6a: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5A:ED:80:D9:F6:55:3B:34:7E:8B:A8:AA:D5:91:82:13:53:C1:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 64.44.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8e:3d:59:bc:91:9f:a6:5a:70:35:cb:fc:d6:d4:98:11:f0: 2b:cf:1f:ae:85:2a:b2:0f:c9:14:94:7b:28:9e:e5:e9:f8:c7: 78:ad:bc:3c:b6:fb:e3:39:fd:2c:aa:32:ed:b2:11:f6:5f:7f: 8a:e1:d8:a8:af:8e:6c:f4:36:2e:9f:70:73:76:34:d6:82:01: a4:04:da:b0:ea:0d:18:d0:02:82:ac:b2:7f:87:82:69:3d:56: b3:7a:f2:62:b9:42:7c:da:11:df:f1:d1:66:4c:23:14:1c:81: 04:c5:15:a3:44:20:0e:dd:c0:5d:a5:49:ef:ae:a8:67:bd:5f: 8b:c2:ab:dd:58:75:35:17:aa:e5:28:16:f2:f3:59:64:cf:3f: 00:0e:61:25:68:d7:99:a8:5f:44:20:9e:48:5d:23:6e:13:ac: d1:3e:b4:32:b2:c4:09:49:c0:f3:ac:ff:fe:df:2e:e2:07:fb: 20:d0:1f:94:58:b7:2b:69:bb:2a:9f:6f:98:1f:65:83:c3:5c: 45:1c:dd:a6:4d:05:c4:12:e2:1b:ee:85:c7:35:d3:a4:7d:33: 6e:1a:00:12:8a:97:43:a9:ba:c1:ce:90:ba:1b:79:f9:5b:8a: f5:cc:a3:39:bd:90:51:c1:04:4e:79:6d:ac:ff:14:4b:9c:c6: 1f:08:fa:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6IOjXL1oh03FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MDA2MzI0ZGYtYTI5NC00OWY5LTg2MmMtODQ2ZjlkNDFjMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQFusJqCqjK0IewpR8Idq2XydEbroxyIn411 hnRSWNCuhjxg830t2ThBIdAZ7A5Om8ClmtUJaD7NCTzc7Y0YBcHb+jwGZlqn5WNB AxfcubtMjMR3UiimFOPHoCBFih4E9w9F9fneCFtK5B+rtE0MXtEz2dTBUrDDHml1 iQs762Ud8Sg1lTVuQw6aCQIioWrCMQXEDd7fxc7YJctotTQiMvs+dZWt/jeHJGdC 08EyX4j32bbW9qBF4wa4uiJmxga1Kwt33iD84EGcxuIMKXTx4nkX9753Oe7Iyti0 9skobIxe2mcD7sOF/rJ+gPWM5Vh3M5gTA33O2sc3p/HReGr5NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRa7YDZ9lU7NH6LqKrVkYITU8HdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvZGRjZDE2ZTYtM2I1Yi0z NjQ1LWI4YTAtMzQ5MGEyYWVmMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSOPVm8kZ+mWnA1y/zW1JgR8CvPH66FKrIPyRSUeyie5en4x3itvDy2 ++M5/SyqMu2yEfZff4rh2Kivjmz0Ni6fcHN2NNaCAaQE2rDqDRjQAoKssn+Hgmk9 VrN68mK5QnzaEd/x0WZMIxQcgQTFFaNEIA7dwF2lSe+uqGe9X4vCq91YdTUXquUo FvLzWWTPPwAOYSVo15moX0QgnkhdI24TrNE+tDKyxAlJwPOs//7fLuIH+yDQH5RY tytpuyqfb5gfZYPDXEUc3aZNBcQS4hvuhcc106R9M24aABKKl0OpusHOkLobeflb ivXMozm9kFHBBE55baz/FEucxh8I+sU= -----END CERTIFICATE-----Generated at Mon Apr 13 09:31:46 2026 by rpki-client