$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa File: ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa (raw, json) Hash identifier: ItiAm0HJHK2iccLVt7JbdmQVVKaL/R5cBfoJ1dK90qE= Subject key identifier: 0D:28:18:F9:90:B2:48:B7:18:AE:BF:7B:28:B8:C2:BF:E9:5A:9A:C9 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584F7BB2EAAAC7586F206D329200 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 32204 IP address blocks: 64.44.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:ea:aa:c7:58:6f:20:6d:32:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=9743cd29-aee0-4559-9fc1-24d411bdabda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:d9:50:7f:23:c1:eb:71:d8:02:30:de:1b: 59:d6:fe:00:80:1e:96:f6:98:c7:ce:98:b0:62:31: a4:62:9e:c4:73:c5:ee:ba:88:ea:0b:63:0f:b7:7f: 5f:b7:c8:e0:07:b4:04:bd:0f:dd:76:5f:99:5c:8c: a8:83:60:48:e5:d6:e9:a2:fe:0e:ca:fd:af:6d:02: 76:12:c2:ff:8c:f0:6e:22:a4:d6:a0:f9:57:9a:27: 91:2d:0c:bc:4e:1a:f5:f6:2d:62:1c:d1:d6:0b:2a: cd:0a:d5:f5:9f:d0:ac:06:64:76:e8:4f:8a:d0:c9: f4:4b:60:69:8c:4e:da:86:8e:d9:c5:e6:59:6b:b3: 15:52:36:9e:c3:04:f7:4c:b8:4c:39:98:dc:3a:47: 16:3b:38:22:c4:a0:21:18:f4:ac:2b:e6:e4:cc:4d: 71:e6:95:94:08:d9:15:3e:58:c6:db:8d:0e:28:f7: 99:06:c1:ea:4a:7e:c9:45:93:31:ae:6f:bd:aa:52: b5:b2:b4:ac:b0:dd:c0:d5:1f:d9:9d:3f:76:b4:3f: 5f:79:69:98:d3:56:3f:0c:37:31:d8:73:34:98:20: f8:55:f4:f6:88:32:01:17:86:3c:48:7b:d5:12:ba: 54:b2:71:5c:9d:7d:aa:c3:fe:90:10:25:80:fc:8b: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:28:18:F9:90:B2:48:B7:18:AE:BF:7B:28:B8:C2:BF:E9:5A:9A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 64.44.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5f:be:33:c1:5a:70:1d:f2:0a:02:f3:b1:c1:7b:56:c5:00: 4d:05:23:58:a3:f1:f9:1c:b6:f8:76:ba:42:99:fa:62:70:5b: 33:8a:76:12:45:3a:9c:9e:4f:03:27:d4:e8:1e:38:e1:bd:f6: 61:79:d9:e0:70:83:2b:c8:46:d8:25:92:a6:68:f3:93:0e:f6: e2:09:dd:fc:92:11:5b:72:25:5c:b2:f0:7b:50:29:ff:a2:b8: 1e:e0:c1:13:f6:7f:c4:81:1c:71:75:e4:69:8e:ef:58:27:98: d2:d5:2c:55:b6:ba:b6:e2:17:8e:a0:49:4f:7a:ef:d5:56:e0: 51:79:e1:10:75:41:06:06:90:cf:2d:e9:5a:f8:2b:3e:e0:83: c7:a9:92:d5:26:1e:26:bf:17:bd:4c:7c:78:c3:97:96:19:91: c7:99:33:62:4c:41:f1:a2:f6:15:12:ae:6b:9f:29:b4:a1:8f: 69:f1:10:e5:84:b4:d8:3d:ba:3e:0d:c1:92:f5:e9:c5:37:32: 80:48:13:58:6f:55:48:db:6b:cf:c1:f0:e3:ad:fe:eb:b2:16: 72:0d:f8:59:25:7b:9c:90:b3:dd:f6:8e:9e:77:e5:aa:ef:84: 6a:66:ac:ee:31:38:21:28:63:82:30:a4:c9:2c:45:39:f7:e8: af:e0:bd:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97suqqx1hvIG0ykgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk OTc0M2NkMjktYWVlMC00NTU5LTlmYzEtMjRkNDExYmRhYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnHZUH8jwetx2AIw3htZ1v4AgB6W9pjHzpiw YjGkYp7Ec8XuuojqC2MPt39ft8jgB7QEvQ/ddl+ZXIyog2BI5dbpov4Oyv2vbQJ2 EsL/jPBuIqTWoPlXmieRLQy8Thr19i1iHNHWCyrNCtX1n9CsBmR26E+K0Mn0S2Bp jE7aho7ZxeZZa7MVUjaewwT3TLhMOZjcOkcWOzgixKAhGPSsK+bkzE1x5pWUCNkV PljG240OKPeZBsHqSn7JRZMxrm+9qlK1srSssN3A1R/ZnT92tD9feWmY01Y/DDcx 2HM0mCD4VfT2iDIBF4Y8SHvVErpUsnFcnX2qw/6QECWA/IuEnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0oGPmQski3GK6/eyi4wr/pWprJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvZGRjZDE2ZTYtM2I1Yi0z NjQ1LWI4YTAtMzQ5MGEyYWVmMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdfvjPBWnAd8goC87HBe1bFAE0FI1ij8fkctvh2ukKZ+mJwWzOKdhJF OpyeTwMn1OgeOOG99mF52eBwgyvIRtglkqZo85MO9uIJ3fySEVtyJVyy8HtQKf+i uB7gwRP2f8SBHHF15GmO71gnmNLVLFW2urbiF46gSU9679VW4FF54RB1QQYGkM8t 6Vr4Kz7gg8epktUmHia/F71MfHjDl5YZkceZM2JMQfGi9hUSrmufKbShj2nxEOWE tNg9uj4NwZL16cU3MoBIE1hvVUjba8/B8OOt/uuyFnIN+Fkle5yQs932jp535arv hGpmrO4xOCEoY4IwpMksRTn36K/gvbY= -----END CERTIFICATE-----Generated at Wed Oct 14 17:12:16 2026 by rpki-client