$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/9702ba99-8248-3a51-ac10-288776699454.roa File: 9702ba99-8248-3a51-ac10-288776699454.roa (raw, json) Hash identifier: 2p//NvpXNnbTVmxyDG8Ql91L7EF0z+DHjLtdYJg731A= Subject key identifier: E7:51:A5:81:BC:2A:EC:CB:34:71:BB:A2:E7:01:E8:D2:02:62:DF:A2 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584F682815EDA824CBED35DEDC20 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/9702ba99-8248-3a51-ac10-288776699454.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 198949 IP address blocks: 74.119.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:15:ed:a8:24:cb:ed:35:de:dc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=3f2190f9-7790-4d0f-81af-b60801c36dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f1:60:af:23:06:e0:f2:74:61:23:21:83:58: 90:16:c9:3e:73:6d:68:c2:de:01:de:a0:d6:de:92: df:9a:5e:96:71:8f:a2:cb:17:37:ab:b9:a4:74:07: c5:24:21:06:0d:17:67:08:10:08:4f:1a:a5:10:d8: 8e:86:2a:99:9d:24:86:41:a5:96:08:c7:29:5e:3a: 9d:81:5b:b3:a4:ff:75:51:80:b0:00:4d:ae:0d:87: ae:68:b0:77:ee:4d:37:09:f1:18:f8:90:fc:a7:76: cb:4e:43:80:7d:d6:7a:63:47:64:e1:3e:e7:e6:76: f3:c6:b0:35:45:da:7a:54:d5:4e:1e:71:cc:c6:9a: d6:77:b4:1d:14:42:6f:98:37:a7:bf:37:91:6a:44: d4:60:ff:1c:fe:76:d6:f6:8d:eb:2e:ac:d0:06:69: de:17:91:04:34:c4:0f:6e:5b:35:58:05:f8:13:34: 0b:cf:a5:2d:0d:2d:4d:bb:7b:a0:91:a8:2f:05:99: bf:b1:ab:c6:d6:8d:2d:9c:13:ac:b1:99:08:63:ed: 11:79:d6:c7:5c:31:8e:0a:73:35:b0:47:5e:16:c7: 6f:02:9e:90:06:9d:c5:25:cc:c5:e2:fc:5e:88:0b: 26:2d:6c:a8:6c:b6:b9:48:f0:75:7a:e0:03:59:62: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:51:A5:81:BC:2A:EC:CB:34:71:BB:A2:E7:01:E8:D2:02:62:DF:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/9702ba99-8248-3a51-ac10-288776699454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 74.119.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:f5:b6:9b:18:88:23:b9:67:8f:26:ef:53:95:5a:09:dc:49: 49:51:4f:b9:74:9a:e3:59:c8:39:98:01:a3:12:17:0b:5a:6c: b4:ca:4d:c5:46:7c:77:00:2f:5d:1f:79:26:01:c4:01:90:3c: ae:fd:43:0b:8b:5f:23:dc:b1:1b:9e:a7:d7:c2:de:ec:8c:45: d7:78:f5:c8:32:58:e4:0d:ac:57:1a:1e:39:50:4f:98:af:9c: 08:80:18:bf:d9:79:d1:6c:15:3b:34:30:e5:20:70:32:78:af: 7f:9f:fa:64:32:4c:21:f7:69:0a:75:de:0e:9f:07:c5:fd:f2: 3b:da:26:0d:64:dc:2a:b0:c2:7b:d7:85:e9:6e:e5:0e:9c:81: 52:99:55:60:ce:ad:b5:c0:18:6c:55:b6:3c:cf:83:15:c3:77: ff:84:17:25:72:77:03:eb:13:24:26:2f:49:b7:bd:f5:3d:24: fa:34:ca:e8:31:1f:97:bb:3c:e6:36:58:63:51:cf:3d:41:d2: 5a:91:20:2f:a0:42:31:64:f6:31:0c:ac:ca:16:8e:32:50:4d: fa:e7:9d:99:a1:0d:8c:b0:00:4e:de:1e:c3:7e:9b:6e:1d:37: 4b:59:56:b4:bf:b7:14:e8:06:b9:ac:01:e2:e5:76:8f:5a:26: 21:d5:67:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKBXtqCTL7TXe3CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk M2YyMTkwZjktNzc5MC00ZDBmLTgxYWYtYjYwODAxYzM2ZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/FgryMG4PJ0YSMhg1iQFsk+c21owt4B3qDW 3pLfml6WcY+iyxc3q7mkdAfFJCEGDRdnCBAITxqlENiOhiqZnSSGQaWWCMcpXjqd gVuzpP91UYCwAE2uDYeuaLB37k03CfEY+JD8p3bLTkOAfdZ6Y0dk4T7n5nbzxrA1 Rdp6VNVOHnHMxprWd7QdFEJvmDenvzeRakTUYP8c/nbW9o3rLqzQBmneF5EENMQP bls1WAX4EzQLz6UtDS1Nu3ugkagvBZm/savG1o0tnBOssZkIY+0RedbHXDGOCnM1 sEdeFsdvAp6QBp3FJczF4vxeiAsmLWyobLa5SPB1euADWWIE1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdRpYG8KuzLNHG7oucB6NICYt+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvOTcwMmJhOTktODI0OC0z YTUxLWFjMTAtMjg4Nzc2Njk5NDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMH1tpsYiCO5Z48m71OVWgncSUlRT7l0muNZyDmYAaMSFwtabLTKTcVG fHcAL10feSYBxAGQPK79QwuLXyPcsRuep9fC3uyMRdd49cgyWOQNrFcaHjlQT5iv nAiAGL/ZedFsFTs0MOUgcDJ4r3+f+mQyTCH3aQp13g6fB8X98jvaJg1k3CqwwnvX helu5Q6cgVKZVWDOrbXAGGxVtjzPgxXDd/+EFyVydwPrEyQmL0m3vfU9JPo0yugx H5e7POY2WGNRzz1B0lqRIC+gQjFk9jEMrMoWjjJQTfrnnZmhDYywAE7eHsN+m24d N0tZVrS/txToBrmsAeLldo9aJiHVZ/c= -----END CERTIFICATE-----Generated at Sun Oct 11 06:05:27 2026 by rpki-client