$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/32c4d6f8-ebb7-3b44-8e70-77107e18f487.roa File: 32c4d6f8-ebb7-3b44-8e70-77107e18f487.roa (raw, json) Hash identifier: vMu1pqyJOAxMnu6YYpdQidn6ztEv3wf+Jp+O0RIpQkc= Subject key identifier: 1F:C9:7D:4D:2B:31:F6:7F:FB:A0:92:8D:E5:AA:26:FB:D6:45:A3:D7 Certificate issuer: /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Certificate serial: 010D0C9F4328584ED9C73C6F36D862DD10580B80 Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/32c4d6f8-ebb7-3b44-8e70-77107e18f487.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 6939 IP address blocks: 198.145.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:3c:6f:36:d8:62:dd:10:58:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=0ac8ce47-e528-4d31-82d6-bfdce89556c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:51:9d:41:29:76:9b:a5:86:6b:ac:fc:77:4f: 2d:56:a2:99:7f:ce:75:09:ca:97:50:5a:d7:8e:c8: 43:70:9e:df:64:ed:79:dc:4d:86:19:fe:01:71:d3: c8:75:4b:63:03:ae:2a:64:9b:d5:6e:fa:2d:3a:49: c1:47:1b:96:32:4e:da:94:aa:44:ea:ed:a7:90:2f: e2:2d:56:0e:95:30:15:b0:94:48:70:63:2b:97:ea: 58:5d:e3:c0:62:76:0f:e5:85:31:a3:dc:c8:30:bd: 54:e7:12:31:4e:4a:57:63:e8:02:76:ef:1e:4f:fd: dd:1b:e0:06:92:f1:f1:c8:f8:d8:f5:cf:63:30:71: 27:01:ec:a8:0f:9d:98:b4:8c:57:62:9b:40:1c:1d: d6:ee:69:c9:3b:c0:c4:6a:3c:6b:a8:6f:dd:e2:4d: 49:a7:65:8e:33:19:f2:9a:f2:c3:10:9f:66:b3:09: b5:3f:0a:03:8f:78:fb:2a:a6:d4:14:c7:50:2d:04: 08:03:80:30:91:b2:93:70:8f:3d:57:1e:79:60:d7: 73:01:ed:6c:e7:11:25:19:85:57:c8:09:90:7d:40: fa:ec:78:90:a6:e7:07:38:1f:3b:01:a0:01:cf:bf: 93:12:0d:f9:e2:da:ad:e7:79:bf:c5:d9:ec:18:2e: 95:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C9:7D:4D:2B:31:F6:7F:FB:A0:92:8D:E5:AA:26:FB:D6:45:A3:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/32c4d6f8-ebb7-3b44-8e70-77107e18f487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl X509v3 Authority Key Identifier: keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer sbgp-ipAddrBlock: critical IPv4: 198.145.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ca:41:1a:b0:50:93:14:43:05:02:92:90:81:1a:0d:a6:6c: 07:98:5e:4e:c3:2d:2e:29:48:12:22:73:64:03:5d:a3:c2:eb: ca:b5:93:83:c2:40:c6:a0:40:0b:85:0d:cb:08:80:16:ae:f1: e0:5e:f2:2c:1b:71:e4:47:4d:30:7b:55:e1:7d:9e:28:5a:85: 93:f4:9f:a9:d7:1e:f9:ce:f9:63:2a:c6:34:02:8f:e0:e0:a5: ee:48:93:59:01:16:76:e9:a2:6e:63:0c:0d:e9:fa:16:6c:1d: 28:90:b8:26:53:20:5c:94:96:9a:13:0e:2f:66:b5:28:8e:8a: b1:a8:82:48:ed:c7:2f:bc:4c:f6:e0:4a:28:5e:07:01:e1:ba: 63:7f:11:76:50:20:48:24:18:d5:58:5e:61:4c:ef:c8:9e:af: 13:c4:09:6c:ad:35:f5:d6:83:40:da:c1:88:3b:e4:e0:56:37: d7:ac:c6:be:7d:e9:08:1e:90:9c:25:05:e4:f8:15:33:7d:37: d7:58:a2:9c:03:ff:15:9e:82:9f:7d:67:7f:97:3d:2c:6b:da: 5d:7c:51:a8:3e:5c:cd:83:f9:52:6b:22:f3:2d:76:66:21:62: 0e:2c:db:e1:f6:84:4d:03:71:f5:14:be:41:1f:57:7c:16:a4: e6:3e:8f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ZxzxvNthi3RBYC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh NGZjMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MGFjOGNlNDctZTUyOC00ZDMxLTgyZDYtYmZkY2U4OTU1NmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1GdQSl2m6WGa6z8d08tVqKZf851CcqXUFrX jshDcJ7fZO153E2GGf4BcdPIdUtjA64qZJvVbvotOknBRxuWMk7alKpE6u2nkC/i LVYOlTAVsJRIcGMrl+pYXePAYnYP5YUxo9zIML1U5xIxTkpXY+gCdu8eT/3dG+AG kvHxyPjY9c9jMHEnAeyoD52YtIxXYptAHB3W7mnJO8DEajxrqG/d4k1Jp2WOMxny mvLDEJ9mswm1PwoDj3j7KqbUFMdQLQQIA4AwkbKTcI89Vx55YNdzAe1s5xElGYVX yAmQfUD67HiQpucHOB87AaABz7+TEg354tqt53m/xdnsGC6VGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/JfU0rMfZ/+6CSjeWqJvvWRaPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvMzJjNGQ2ZjgtZWJiNy0z YjQ0LThlNzAtNzcxMDdlMThmNDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2 YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzKQRqwUJMUQwUCkpCBGg2mbAeYXk7DLS4pSBIic2QDXaPC68q1k4PC QMagQAuFDcsIgBau8eBe8iwbceRHTTB7VeF9nihahZP0n6nXHvnO+WMqxjQCj+Dg pe5Ik1kBFnbpom5jDA3p+hZsHSiQuCZTIFyUlpoTDi9mtSiOirGogkjtxy+8TPbg SiheBwHhumN/EXZQIEgkGNVYXmFM78ierxPECWytNfXWg0DawYg75OBWN9esxr59 6QgekJwlBeT4FTN9N9dYopwD/xWegp99Z3+XPSxr2l18Uag+XM2D+VJrIvMtdmYh Yg4s2+H2hE0DcfUUvkEfV3wWpOY+j2c= -----END CERTIFICATE-----Generated at Mon Aug 31 11:23:35 2026 by rpki-client