$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/75647b02-42e9-3af5-bbe9-0ba54a6df231.roa File: 75647b02-42e9-3af5-bbe9-0ba54a6df231.roa (raw, json) Hash identifier: iYUKaf+MwY/qR7R2UBzTxdgoFVQ80aXKyn7sfHSCWxs= Subject key identifier: 9C:5B:B2:61:43:31:4B:9D:0E:9F:BA:0B:0B:CC:95:D6:F8:9A:2D:77 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D227B47FF46F6D9A1FE7D0340 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/75647b02-42e9-3af5-bbe9-0ba54a6df231.roa Signing time: Wed 11 Mar 2026 16:27:27 +0000 ROA not before: Wed 11 Mar 2026 16:27:27 +0000 ROA not after: Tue 09 Jun 2026 16:27:27 +0000 asID: 399629 IP address blocks: 216.203.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:7b:47:ff:46:f6:d9:a1:fe:7d:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Mar 11 16:27:27 2026 GMT Not After : Jun 9 16:27:27 2026 GMT Subject: CN=b94d8b9a-1962-40df-8bc8-9546709a9271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ee:8c:df:11:08:01:21:54:bd:1c:91:87:6e: b8:b9:f7:06:a7:4b:43:5e:19:54:5f:e1:97:09:df: 47:c5:e6:a1:c2:a3:62:56:6b:2d:26:f4:57:44:1e: 08:1b:c7:ae:80:73:4d:58:aa:a7:5f:18:aa:2a:b0: 03:39:13:1e:ec:64:63:5d:c9:63:49:de:d7:cf:c9: c3:9f:5d:75:25:fe:88:fc:29:68:d1:a9:a2:da:95: 59:24:62:af:5b:b7:fd:e6:22:1f:e1:b6:6f:2b:2c: 7c:26:50:60:b6:a7:1d:a0:b4:32:7e:81:12:5d:8f: f4:d2:0a:30:26:92:60:a7:cb:27:d4:26:1d:10:fb: e0:8b:31:b3:00:2f:e3:56:d0:71:4d:cd:e0:89:f9: 69:6c:25:11:93:3f:4c:a9:c7:08:fa:e3:61:ab:f2: 73:72:a3:f2:85:40:eb:95:e8:81:8f:c7:54:c3:5d: c6:34:46:f1:d8:4f:68:33:85:1e:3c:37:f3:c5:6d: 64:68:d2:4d:77:3d:72:0a:e9:0d:60:d3:11:10:1b: 36:99:4a:13:70:26:4b:f1:db:20:b6:56:12:44:0e: 48:ae:cc:66:c4:e6:b7:23:e8:f6:b2:5a:20:c9:3e: e4:2e:4c:a8:73:70:16:d7:f8:8d:4c:b5:5b:1d:af: 59:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5B:B2:61:43:31:4B:9D:0E:9F:BA:0B:0B:CC:95:D6:F8:9A:2D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/75647b02-42e9-3af5-bbe9-0ba54a6df231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 216.203.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9c:32:d6:74:f7:19:2c:9a:5d:f3:48:84:ec:0f:c0:2f:43: 47:3c:d2:9d:7d:98:6c:64:85:89:41:4c:18:28:e5:a6:26:6b: 8f:33:8f:a6:f4:83:31:e4:7c:bc:75:69:c7:b7:94:ea:f7:81: fd:7e:c0:34:93:6a:34:64:06:f3:75:09:e3:ba:7b:7e:c4:08: ce:05:e4:e9:59:b0:8b:83:dd:16:6b:10:2d:4e:6c:57:53:05: 9b:2b:ea:1a:7b:1c:81:7c:6a:b4:b1:2a:c1:39:ae:fe:a1:fb: e7:83:b1:30:19:14:42:af:50:1a:39:71:5a:86:cf:c3:f0:82: cd:7d:cd:b0:b8:7b:60:2a:43:64:14:ae:d9:4e:c0:3f:d4:36: ff:1d:2e:0a:58:75:de:3d:59:63:28:f3:6e:2c:ea:33:8c:2e: f6:0d:34:0e:9f:0a:af:4f:71:8a:af:5a:e9:f8:e6:8e:25:a0: e5:40:f5:f3:3f:d4:8d:cf:8c:20:05:d2:00:c8:88:6d:cb:f0: 58:58:ca:21:ad:9d:96:28:8f:e5:e6:75:c6:00:c0:95:a4:37: d7:b0:e0:2d:68:e1:68:2c:8d:2d:7b:98:f2:58:e7:fb:58:9e: 7b:43:7f:28:45:71:11:51:c1:7d:19:84:66:a2:8b:d8:66:10: d6:ff:f0:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ie0f/RvbZof59A0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDMxMTE2MjcyN1oXDTI2MDYwOTE2MjcyN1owLzEtMCsGA1UEAxMk Yjk0ZDhiOWEtMTk2Mi00MGRmLThiYzgtOTU0NjcwOWE5MjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge6M3xEIASFUvRyRh264ufcGp0tDXhlUX+GX Cd9HxeahwqNiVmstJvRXRB4IG8eugHNNWKqnXxiqKrADORMe7GRjXcljSd7Xz8nD n111Jf6I/Clo0ami2pVZJGKvW7f95iIf4bZvKyx8JlBgtqcdoLQyfoESXY/00gow JpJgp8sn1CYdEPvgizGzAC/jVtBxTc3giflpbCURkz9MqccI+uNhq/JzcqPyhUDr leiBj8dUw13GNEbx2E9oM4UePDfzxW1kaNJNdz1yCukNYNMREBs2mUoTcCZL8dsg tlYSRA5IrsxmxOa3I+j2slogyT7kLkyoc3AW1/iNTLVbHa9ZwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxbsmFDMUudDp+6CwvMldb4mi13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNzU2NDdiMDItNDJlOS0z YWY1LWJiZTktMGJhNTRhNmRmMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICcMtZ09xksml3zSITsD8AvQ0c80p19mGxkhYlBTBgo5aYma48zj6b0 gzHkfLx1ace3lOr3gf1+wDSTajRkBvN1CeO6e37ECM4F5OlZsIuD3RZrEC1ObFdT BZsr6hp7HIF8arSxKsE5rv6h++eDsTAZFEKvUBo5cVqGz8Pwgs19zbC4e2AqQ2QU rtlOwD/UNv8dLgpYdd49WWMo824s6jOMLvYNNA6fCq9PcYqvWun45o4loOVA9fM/ 1I3PjCAF0gDIiG3L8FhYyiGtnZYoj+XmdcYAwJWkN9ew4C1o4WgsjS17mPJY5/tY nntDfyhFcRFRwX0ZhGaii9hmENb/8Iw= -----END CERTIFICATE-----Generated at Tue Mar 24 07:44:08 2026 by rpki-client