$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa File: 2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa (raw, json) Hash identifier: 1F72+6j8vQJiVwKDn2nDv9fNAX8wMklueT34qm5cok0= Subject key identifier: 57:62:D1:E9:33:76:CE:51:A4:84:EC:29:C5:EC:83:B2:AA:B9:E3:88 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D8C2A9BA70358FDAC04F10B00 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 399629 IP address blocks: 64.95.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:9b:a7:03:58:fd:ac:04:f1:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=c674e048-3336-4783-b21b-cc646cd1f467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3f:27:19:a6:61:c8:69:9e:47:1c:d7:2c:7a: 15:54:73:43:c8:c2:20:c0:26:e5:a8:dc:23:24:8c: 06:d8:74:55:5f:e6:aa:3b:a6:d3:70:c5:0e:c8:56: 91:d4:4a:c0:86:f7:4c:99:53:4c:d8:79:6b:6c:e2: 31:c4:e8:87:04:5e:cc:ea:e1:02:ad:4a:04:1d:92: 05:6a:ba:5a:5f:ab:91:bb:48:b0:a4:56:87:40:81: 86:76:99:9e:50:9d:90:d8:ac:6a:7a:d2:8f:0b:ae: 05:38:2b:e5:80:12:60:a8:f1:5d:c1:76:f8:13:fb: 87:c3:4d:d9:59:2d:2f:b3:d3:3e:be:18:93:ae:5e: 59:de:45:f7:ad:a7:6a:5d:e9:6a:bc:d4:fe:b6:c1: ef:12:2a:e8:91:3d:52:86:86:3e:6c:9e:c0:8f:12: e3:b0:85:a0:0f:62:f5:b8:89:b6:7c:42:b9:dc:46: 8e:07:72:a6:97:12:37:48:c3:a0:8f:f1:e5:d9:4b: 2d:a6:84:c9:5a:b3:10:9f:27:11:bb:15:56:28:7e: 12:2a:2d:48:ec:03:4a:42:8f:15:ac:d7:58:31:dc: 5c:46:18:5a:d3:98:c2:95:b6:41:b4:51:18:56:e4: f7:5e:35:d4:6c:44:f2:50:fc:6e:ee:cf:97:fb:27: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:62:D1:E9:33:76:CE:51:A4:84:EC:29:C5:EC:83:B2:AA:B9:E3:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.95.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:48:71:f2:00:f6:aa:de:b3:6e:ef:99:c4:74:e4:91:00:1f: af:79:17:76:fa:a2:c4:b9:b9:62:75:04:67:84:71:79:01:f9: 23:5e:9f:75:93:01:96:1b:5c:3a:85:ca:3b:be:e3:9d:4f:c7: 6d:14:88:14:55:3d:d1:38:13:d5:86:d3:1c:6a:52:60:61:9b: 8a:eb:16:16:8a:16:a0:a9:de:f5:55:78:9a:eb:5d:e8:03:15: 43:dd:ae:ea:e7:10:61:0d:46:6d:01:43:57:ff:8f:d8:42:56: 5c:63:83:44:8b:0a:a9:a7:cc:e3:da:e0:22:2d:21:7c:61:9c: 73:4e:8a:8c:84:c3:d2:c8:31:55:8e:63:51:17:27:a5:17:f2: 0b:76:f5:9e:bf:1e:fe:f8:cc:58:9a:f3:96:1a:93:a6:b6:94: 0b:9c:4b:60:3d:66:44:61:82:e8:93:9e:ed:0e:a1:c7:bd:e2: 18:00:26:6c:a8:cd:0a:1b:62:89:6e:c9:b4:de:7e:72:bd:39: b3:fa:88:7d:7e:e0:99:6e:d4:07:5d:b6:a6:ac:e0:fc:1a:ca: 9b:01:fb:f1:6f:e0:f8:37:48:c1:89:4a:89:6f:ab:ca:4b:71: a6:00:3d:30:bf:5a:27:e3:2e:76:f4:0d:f3:2f:5a:01:ef:ef: b4:a2:b1:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKpunA1j9rATxCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk YzY3NGUwNDgtMzMzNi00NzgzLWIyMWItY2M2NDZjZDFmNDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD8nGaZhyGmeRxzXLHoVVHNDyMIgwCblqNwj JIwG2HRVX+aqO6bTcMUOyFaR1ErAhvdMmVNM2HlrbOIxxOiHBF7M6uECrUoEHZIF arpaX6uRu0iwpFaHQIGGdpmeUJ2Q2KxqetKPC64FOCvlgBJgqPFdwXb4E/uHw03Z WS0vs9M+vhiTrl5Z3kX3radqXelqvNT+tsHvEirokT1ShoY+bJ7AjxLjsIWgD2L1 uIm2fEK53EaOB3KmlxI3SMOgj/Hl2UstpoTJWrMQnycRuxVWKH4SKi1I7ANKQo8V rNdYMdxcRhha05jClbZBtFEYVuT3XjXUbETyUPxu7s+X+ye/LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdi0ekzds5RpITsKcXsg7KqueOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMmY5NjdhOWMtY2ZlMi0z NGIzLThmNWQtMTM2M2IxMDI3NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpIcfIA9qres27vmcR05JEAH695F3b6osS5uWJ1BGeEcXkB+SNen3WT AZYbXDqFyju+451Px20UiBRVPdE4E9WG0xxqUmBhm4rrFhaKFqCp3vVVeJrrXegD FUPdrurnEGENRm0BQ1f/j9hCVlxjg0SLCqmnzOPa4CItIXxhnHNOioyEw9LIMVWO Y1EXJ6UX8gt29Z6/Hv74zFia85Yak6a2lAucS2A9ZkRhguiTnu0Ooce94hgAJmyo zQobYoluybTefnK9ObP6iH1+4Jlu1Addtqas4PwaypsB+/Fv4Pg3SMGJSolvq8pL caYAPTC/WifjLnb0DfMvWgHv77SisXg= -----END CERTIFICATE-----Generated at Fri May 1 04:01:25 2026 by rpki-client