$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa File: 820be15f-1ab0-3e6c-8554-951d99d18e99.roa (raw, json) Hash identifier: zXCAnUmdBVyHtoijNDspejsYJbRLb4A+M5nR8o7Sv5Q= Subject key identifier: 59:10:87:25:6E:62:62:D3:71:A3:E0:B7:8E:5A:13:85:51:1C:CA:B1 Certificate issuer: /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Certificate serial: 010D0C9F4328584F03A79217EF6ABEC1FDD3CA00 Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 3555 IP address blocks: 192.31.9.0/24 maxlen: 24 198.17.99.0/24 maxlen: 24 198.22.152.0/24 maxlen: 24 198.137.234.0/23 maxlen: 23 199.74.244.0/24 maxlen: 24 199.79.216.0/24 maxlen: 24 199.89.132.0/23 maxlen: 23 199.89.158.0/23 maxlen: 23 199.89.160.0/24 maxlen: 24 204.89.153.0/24 maxlen: 24 204.89.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:92:17:ef:6a:be:c1:fd:d3:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=5ee4a94e-5800-415c-8307-5f1519414284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:2b:83:20:81:a3:db:83:17:93:a7:c3:4a: f9:46:3e:56:d1:2a:fc:f6:35:20:71:c1:98:99:83: 69:37:a7:88:47:77:63:b3:3d:3b:c6:95:ce:32:92: b9:88:e6:f8:d7:a0:72:37:6c:b5:39:30:24:a3:b3: 1b:64:0e:14:14:5d:0d:21:6c:d1:d9:c5:93:42:9c: 03:04:3e:47:d7:4b:b9:b9:fe:22:9d:82:84:d1:0d: aa:16:48:b7:a8:64:8a:4b:4b:83:8f:8e:e7:a5:03: 03:1b:7a:74:ef:67:b9:15:60:aa:d2:b1:61:14:1a: 95:54:f1:6b:16:88:80:a5:a4:72:8f:32:aa:d4:66: 67:c0:21:a1:d7:0f:05:dd:f8:d9:6c:7f:40:90:04: 80:4e:ad:ac:20:b1:af:d9:46:e6:c7:a0:68:e1:a5: c5:86:84:9e:84:96:6c:20:9b:62:22:f4:22:65:66: b9:6e:3c:4f:74:a3:25:0c:85:7d:32:e9:59:43:69: 4d:8b:ef:fa:89:23:84:8c:58:70:96:79:f7:cb:9d: af:8d:47:73:a9:8c:fe:14:c9:31:85:9c:a1:aa:88: 1a:d5:5b:a3:41:9c:36:0f:c6:fc:8e:b8:5d:2d:03: b6:c8:a8:49:49:65:1d:88:ec:a3:1a:af:c2:b7:de: 96:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:10:87:25:6E:62:62:D3:71:A3:E0:B7:8E:5A:13:85:51:1C:CA:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/820be15f-1ab0-3e6c-8554-951d99d18e99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl X509v3 Authority Key Identifier: keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer sbgp-ipAddrBlock: critical IPv4: 192.31.9.0/24 198.17.99.0/24 198.22.152.0/24 198.137.234.0/23 199.74.244.0/24 199.79.216.0/24 199.89.132.0/23 199.89.158.0-199.89.160.255 204.89.153.0-204.89.154.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e1:a7:c3:c1:7a:cf:e2:af:5f:5c:38:e9:db:66:49:5c:ff: d5:99:df:c2:80:9f:ad:cc:bf:f4:90:b1:b7:16:e2:24:63:f5: e8:94:ea:5d:71:9d:1b:60:67:67:98:fe:57:4a:3c:ed:3d:c7: f5:cf:68:10:a9:7c:bc:b2:72:81:37:79:b7:c8:ec:7e:07:59: d6:80:33:e1:9e:47:54:ee:ec:5f:df:21:b7:44:04:30:77:65: 5c:5d:8f:d8:91:e1:a4:73:cc:e3:2f:ef:0e:ab:16:85:6b:6e: 07:dc:66:3f:5d:52:06:f3:c5:3b:51:91:77:e3:d2:49:1c:cb: 42:aa:29:6a:fe:a0:55:ee:60:9e:6a:19:60:b6:74:4c:10:1c: 14:34:06:69:39:e6:15:de:7d:d6:25:9f:16:53:f6:97:d6:b8: 09:99:36:4a:94:2d:be:2c:bb:ee:ba:f5:c3:c3:b7:d1:b4:a2: 91:59:b9:3c:a0:76:c1:79:70:30:14:a5:4a:70:7c:40:f7:34: 59:f4:3b:54:b1:48:49:a6:93:f4:ae:a8:d7:ee:80:3f:fd:d9: 3a:9a:25:0c:9b:83:b6:d3:a0:bc:45:f4:f7:32:9c:b1:aa:60: 77:14:35:f8:3c:84:94:c7:e4:4a:e8:09:5c:56:de:05:b0:62: a2:80:af:1e -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWE8Dp5IX72q+wf3TygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiY2YzOGItYzQ2ZC00YmYxLTg3MDUtODhhZWVjMTlh YmYxMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NWVlNGE5NGUtNTgwMC00MTVjLTgzMDctNWYxNTE5NDE0Mjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sIrgyCBo9uDF5Onw0r5Rj5W0Sr89jUgccGY mYNpN6eIR3djsz07xpXOMpK5iOb416ByN2y1OTAko7MbZA4UFF0NIWzR2cWTQpwD BD5H10u5uf4inYKE0Q2qFki3qGSKS0uDj47npQMDG3p072e5FWCq0rFhFBqVVPFr FoiApaRyjzKq1GZnwCGh1w8F3fjZbH9AkASATq2sILGv2Ubmx6Bo4aXFhoSehJZs IJtiIvQiZWa5bjxPdKMlDIV9MulZQ2lNi+/6iSOEjFhwlnn3y52vjUdzqYz+FMkx hZyhqoga1VujQZw2D8b8jrhdLQO2yKhJSWUdiOyjGq/Ct96WPQIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFFkQhyVuYmLTcaPgt45aE4VRHMqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJj ZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFlZWMxOWFiZjEvODIwYmUxNWYtMWFiMC0z ZTZjLTg1NTQtOTUxZDk5ZDE4ZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzJiY2YzOGItYzQ2ZC00YmYxLTg3 MDUtODhhZWVjMTlhYmYxLzMyYmNmMzhiLWM0NmQtNGJmMS04NzA1LTg4YWVlYzE5 YWJmMS5jcmwwHwYDVR0jBBgwFoAUZ4kEXXo/RjGOHDz4F8NW8uOG+JswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJjZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFl ZWMxOWFiZjEuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAwB8JAwQA xhFjAwQAxhaYAwQBxonqAwQAx0r0AwQAx0/YAwQBx1mEMAwDBAHHWZ4DBADHWaAw DAMEAMxZmQMEAMxZmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAq4afDwXrP4q9fXDjp22ZJXP/Vmd/CgJ+t zL/0kLG3FuIkY/XolOpdcZ0bYGdnmP5XSjztPcf1z2gQqXy8snKBN3m3yOx+B1nW gDPhnkdU7uxf3yG3RAQwd2VcXY/YkeGkc8zjL+8OqxaFa24H3GY/XVIG88U7UZF3 49JJHMtCqilq/qBV7mCeahlgtnRMEBwUNAZpOeYV3n3WJZ8WU/aX1rgJmTZKlC2+ LLvuuvXDw7fRtKKRWbk8oHbBeXAwFKVKcHxA9zRZ9DtUsUhJppP0rqjX7oA//dk6 miUMm4O206C8RfT3MpyxqmB3FDX4PISUx+RK6AlcVt4FsGKigK8e -----END CERTIFICATE-----Generated at Tue Sep 1 05:05:13 2026 by rpki-client