$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/89e755dd-5037-3fa3-8d6f-7c673dec299d.roa File: 89e755dd-5037-3fa3-8d6f-7c673dec299d.roa (raw, json) Hash identifier: bd7teOgeWNboh5WQa3J16+MeCW9RhOEbIXyebQc5+gQ= Subject key identifier: 1C:A0:8A:76:7E:28:DE:FD:16:5E:05:60:6C:DB:57:9F:FA:C2:BC:53 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584EA79BB8580F6D942C27632A00 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/89e755dd-5037-3fa3-8d6f-7c673dec299d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399629 IP address blocks: 216.203.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:b8:58:0f:6d:94:2c:27:63:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=07095a27-5c9f-498c-b4d3-efd6d20c963c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:da:85:6e:75:b2:13:c7:4a:0f:bd:d6:d6: 95:d0:7d:ce:e8:ae:fd:02:c9:d6:0f:8e:2e:4a:b7: 2e:bb:5b:6b:a9:1e:96:3d:71:45:73:2a:0a:69:a5: 88:60:fc:5c:e0:56:14:1a:79:25:aa:b8:f8:9d:8c: c0:17:ca:e5:08:7a:ae:68:f9:43:14:04:e7:df:09: ef:f6:93:ab:98:dc:f3:95:ff:e8:47:bb:7c:c8:98: aa:44:43:39:55:5d:31:4b:b3:43:47:1b:7a:09:a4: 11:20:ec:ad:3d:39:9e:2d:0e:e6:43:f3:55:2a:28: 7a:62:d0:85:6a:27:2a:85:54:2d:4c:11:58:2d:cd: 21:f3:69:86:f1:f5:fa:77:46:ca:52:f0:49:aa:aa: 0d:a0:3e:3e:53:37:89:72:9c:50:c8:fb:06:41:ac: 40:77:34:b1:7e:17:71:5e:cc:61:53:ae:31:fe:08: c8:67:4b:0b:a3:1b:a3:fd:df:6f:b1:f5:7d:a3:2f: e5:6f:39:19:3e:4e:82:c3:df:ce:69:59:cc:f8:e0: 96:1b:5b:4e:29:04:1e:8f:66:5b:2e:ee:e8:bc:cd: b0:b1:2e:d1:ca:87:a9:ab:ba:08:9c:df:35:26:12: 63:da:bc:79:6e:97:ce:e4:60:e4:fb:9a:10:f6:d2: 8b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A0:8A:76:7E:28:DE:FD:16:5E:05:60:6C:DB:57:9F:FA:C2:BC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/89e755dd-5037-3fa3-8d6f-7c673dec299d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 216.203.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:78:e4:31:be:b7:63:43:71:4b:97:00:6c:ab:84:2f:f0:d4: df:79:9c:5b:63:02:95:09:9a:c7:a9:f0:03:29:38:e4:fd:d4: 06:69:33:10:ed:8f:df:03:c4:e6:89:7a:6e:a9:e6:04:a3:67: bc:50:f3:30:5b:3c:74:79:48:d1:1e:31:8e:38:39:9e:1a:ea: aa:0d:ee:9e:ec:d1:0c:60:37:c5:91:d4:2c:39:44:c3:f6:98: 5d:6f:f3:3a:96:59:81:5a:cd:f6:51:20:f3:9b:5e:2b:0c:88: f0:d9:f9:bc:77:bf:b6:25:48:d3:fa:85:56:b5:39:f9:9a:07: d8:2f:61:04:40:da:fa:3f:bb:66:26:d7:68:6a:f9:1e:50:df: 96:64:cd:a4:39:95:ff:d2:2d:20:7d:7d:f9:f4:40:72:25:8a: 59:7f:92:b4:4f:12:07:ba:1b:00:a9:3a:89:05:ec:23:aa:ab: 17:85:0c:13:19:26:2c:bd:57:94:39:a2:b4:8e:e1:fa:da:cb: fd:19:e5:f4:da:38:c2:9b:49:1f:5a:10:9c:d6:16:36:b6:88: 69:d3:d1:f6:03:98:84:a0:0b:e5:78:12:7d:c2:9b:a6:e5:6c: b3:d5:f6:24:1a:1c:02:63:c7:84:e3:64:a9:6d:b0:2e:ed:e0: b4:f5:a2:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm7hYD22ULCdjKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDcwOTVhMjctNWM5Zi00OThjLWI0ZDMtZWZkNmQyMGM5NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo3ahW51shPHSg+91taV0H3O6K79AsnWD44u Srcuu1trqR6WPXFFcyoKaaWIYPxc4FYUGnklqrj4nYzAF8rlCHquaPlDFATn3wnv 9pOrmNzzlf/oR7t8yJiqREM5VV0xS7NDRxt6CaQRIOytPTmeLQ7mQ/NVKih6YtCF aicqhVQtTBFYLc0h82mG8fX6d0bKUvBJqqoNoD4+UzeJcpxQyPsGQaxAdzSxfhdx XsxhU64x/gjIZ0sLoxuj/d9vsfV9oy/lbzkZPk6Cw9/OaVnM+OCWG1tOKQQej2Zb Lu7ovM2wsS7Ryoepq7oInN81JhJj2rx5bpfO5GDk+5oQ9tKL3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByginZ+KN79Fl4FYGzbV5/6wrxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvODllNzU1ZGQtNTAzNy0z ZmEzLThkNmYtN2M2NzNkZWMyOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ45DG+t2NDcUuXAGyrhC/w1N95nFtjApUJmsep8AMpOOT91AZpMxDt j98DxOaJem6p5gSjZ7xQ8zBbPHR5SNEeMY44OZ4a6qoN7p7s0QxgN8WR1Cw5RMP2 mF1v8zqWWYFazfZRIPObXisMiPDZ+bx3v7YlSNP6hVa1OfmaB9gvYQRA2vo/u2Ym 12hq+R5Q35ZkzaQ5lf/SLSB9ffn0QHIlill/krRPEge6GwCpOokF7COqqxeFDBMZ Jiy9V5Q5orSO4fray/0Z5fTaOMKbSR9aEJzWFja2iGnT0fYDmISgC+V4En3Cm6bl bLPV9iQaHAJjx4TjZKltsC7t4LT1ogo= -----END CERTIFICATE-----Generated at Thu Sep 10 17:02:32 2026 by rpki-client