$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa File: dd8ac448-7845-3707-82ae-e039ea217c8d.roa (raw, json) Hash identifier: s2AVMAU7QeIpUjTmJvMcCgiEwz4CELXZKN/B/6WCdXg= Subject key identifier: AA:CA:73:1E:47:E5:BF:3E:D4:BF:A6:FC:72:1F:95:13:83:9C:2D:73 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584EEA875D406B26960535CE47A0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 399629 IP address blocks: 65.38.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:5d:40:6b:26:96:05:35:ce:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=6a83f4a2-50d4-4e21-87c4-eb17d4f78b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:05:b6:9b:c9:15:69:9d:d3:9c:0f:67:51: 67:a5:13:95:f6:88:e6:57:5f:0a:e8:1d:16:ba:53: fe:09:50:8e:e2:a1:89:5b:1e:a4:52:ce:3c:f2:14: 2e:37:89:fb:ca:f4:54:bc:98:74:b4:a6:e1:db:85: a1:ce:38:eb:4e:74:cf:18:8c:19:55:be:6c:97:27: 64:97:6a:0d:da:db:46:4a:92:40:f1:bc:64:d9:8d: dc:22:cf:ed:0b:47:28:9e:dc:d3:f7:94:10:aa:89: b4:2c:26:c3:8f:8d:c1:51:f0:c8:97:18:3a:a7:71: bf:d9:5a:f9:de:f3:17:12:10:2e:81:23:7c:de:cd: 7a:05:ff:06:04:e7:1d:98:ec:0e:eb:a5:08:53:09: f5:e6:92:8d:51:78:ea:f3:92:3f:7d:9e:74:95:96: 20:10:46:19:2a:e3:a5:9d:28:b1:79:eb:4b:87:e4: fb:31:9c:c7:2e:c6:80:8e:87:ef:8c:6d:63:f5:e4: c7:d5:03:96:35:80:17:a0:7e:d3:29:27:90:ff:d4: 4a:25:ef:c4:19:4d:4a:5a:44:cf:31:7f:d6:c7:9a: c5:31:61:56:98:a9:9c:f5:31:0c:71:7a:20:c4:49: 1f:8f:bd:a9:6b:b9:46:6a:bf:67:4d:c2:d1:2a:0e: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CA:73:1E:47:E5:BF:3E:D4:BF:A6:FC:72:1F:95:13:83:9C:2D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 65.38.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:20:1e:d2:99:64:b4:b0:40:0f:90:10:8e:d0:12:44:3f:cf: e0:da:73:c7:6d:fc:23:ee:6f:32:dd:ba:12:fa:33:ee:92:39: c3:da:b9:e2:a3:97:87:40:c9:25:e2:f9:10:3c:14:61:c6:ea: 83:25:c0:58:dc:b4:2f:ee:09:42:0f:32:5b:01:3b:a4:22:2f: 46:cc:d8:43:f0:98:79:c2:5f:ac:9d:fc:65:c7:ce:88:f1:0e: 54:bc:53:f1:4d:60:50:47:72:49:ff:74:7c:6c:9b:f9:4e:ae: 17:d3:7f:81:40:fb:46:59:1c:bf:e3:de:b9:ad:e1:3d:69:e4: 90:03:91:d9:b8:e5:dc:93:4f:e0:ae:64:5b:84:1d:25:0f:7b: 0a:33:57:53:24:15:dd:36:a8:e7:4d:bf:4e:c9:10:d9:06:aa: be:70:c3:66:32:a3:1a:5c:97:1f:fe:03:a1:f4:02:39:1a:87: 20:8b:a1:ff:4f:23:28:0d:44:2f:56:9c:78:4b:2f:41:0a:c7: fb:b5:9e:0a:06:3a:d0:3b:04:33:f3:7e:42:d0:86:7c:e0:5b: 29:90:65:cd:35:39:38:1c:ec:b1:64:10:9c:50:28:8b:fb:85: de:18:8d:7f:d6:b2:10:53:da:39:e0:e6:3f:ee:0a:7d:f5:ed: b4:94:63:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh11AayaWBTXOR6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NmE4M2Y0YTItNTBkNC00ZTIxLTg3YzQtZWIxN2Q0Zjc4YjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/gFtpvJFWmd05wPZ1FnpROV9ojmV18K6B0W ulP+CVCO4qGJWx6kUs488hQuN4n7yvRUvJh0tKbh24WhzjjrTnTPGIwZVb5slydk l2oN2ttGSpJA8bxk2Y3cIs/tC0contzT95QQqom0LCbDj43BUfDIlxg6p3G/2Vr5 3vMXEhAugSN83s16Bf8GBOcdmOwO66UIUwn15pKNUXjq85I/fZ50lZYgEEYZKuOl nSixeetLh+T7MZzHLsaAjofvjG1j9eTH1QOWNYAXoH7TKSeQ/9RKJe/EGU1KWkTP MX/Wx5rFMWFWmKmc9TEMcXogxEkfj72pa7lGar9nTcLRKg5qGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrKcx5H5b8+1L+m/HIflRODnC1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZGQ4YWM0NDgtNzg0NS0z NzA3LTgyYWUtZTAzOWVhMjE3YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQSZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYgHtKZZLSwQA+QEI7QEkQ/z+Dac8dt/CPubzLduhL6M+6SOcPaueKj l4dAySXi+RA8FGHG6oMlwFjctC/uCUIPMlsBO6QiL0bM2EPwmHnCX6yd/GXHzojx DlS8U/FNYFBHckn/dHxsm/lOrhfTf4FA+0ZZHL/j3rmt4T1p5JADkdm45dyTT+Cu ZFuEHSUPewozV1MkFd02qOdNv07JENkGqr5ww2Yyoxpclx/+A6H0AjkahyCLof9P IygNRC9WnHhLL0EKx/u1ngoGOtA7BDPzfkLQhnzgWymQZc01OTgc7LFkEJxQKIv7 hd4YjX/WshBT2jng5j/uCn317bSUY3w= -----END CERTIFICATE-----Generated at Thu Sep 10 18:41:25 2026 by rpki-client