$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa File: 9afff874-6a4f-331a-93da-b870000569c0.roa (raw, json) Hash identifier: oKJljmLwLnZD8/QKr0+qsKXkONAg4H0RvRL3UuJHxxo= Subject key identifier: F6:B7:F7:10:0C:5D:C9:C7:1C:2B:56:FF:B4:90:04:A8:D2:A7:9C:6D Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F4328584F6292E0B4D59141F902A57C00 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 398191 IP address blocks: 216.225.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:e0:b4:d5:91:41:f9:02:a5:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=adb61b87-c617-454e-9475-a21f72016fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:a9:16:d3:6f:1e:67:44:32:ea:ba:8d:db: 8c:80:fa:47:51:67:80:92:88:0e:31:2e:7d:19:e2: 05:fb:97:91:e6:22:ca:4b:be:1d:e2:d8:ba:ee:c5: c3:80:87:8c:5c:28:78:06:5d:65:96:d7:14:34:fc: 31:7e:c0:9a:8d:40:2b:be:4a:72:fa:30:97:c3:5d: c8:37:2d:a9:fd:39:5c:5e:e4:40:56:43:a5:f6:1b: fe:ca:6b:ec:59:7b:4e:13:c8:29:90:17:0b:e6:de: fd:20:8c:f5:12:ca:72:dc:c3:38:f2:37:f3:61:93: 31:9a:71:37:d7:d7:a4:ea:12:f1:a1:2b:44:12:ff: 78:8b:3c:85:f9:b1:85:1b:69:a5:2d:b2:05:c2:a7: 87:8f:35:58:53:80:d5:df:87:ee:9c:3f:eb:10:bb: 53:14:5d:38:44:1b:3e:cc:f4:e5:72:3f:c8:31:0a: e0:7e:c4:24:3c:e4:ff:08:be:26:84:c1:8a:57:b5: d9:f1:f2:df:be:75:a3:17:1d:fc:c4:8f:24:35:c0: 2b:63:71:51:1c:a3:ed:ca:c5:6a:e8:76:bf:36:33: 47:4e:f7:46:1e:e5:02:fc:a0:a5:65:53:24:d5:a0: 5a:a0:e6:c6:ef:88:c2:7f:ef:a5:2f:a8:67:93:15: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B7:F7:10:0C:5D:C9:C7:1C:2B:56:FF:B4:90:04:A8:D2:A7:9C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv4: 216.225.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e4:7e:8f:c8:f8:29:3e:75:00:fc:9e:88:88:61:c6:0f:86: d6:64:96:86:0d:dd:3a:6f:69:22:28:11:de:a4:98:b3:c4:9b: 1e:f4:16:be:60:17:dc:45:2c:75:c8:3d:08:1c:19:d9:01:7e: c2:6c:16:1d:66:be:d7:0f:e7:56:78:14:a5:c5:15:88:3f:57: 05:69:87:85:26:d7:48:d1:ee:55:35:85:93:b1:4b:3b:74:c9: c5:5f:cf:99:03:84:ba:a1:98:d7:ba:07:eb:b0:7f:ed:1b:f0: 0e:65:a3:2a:33:a7:87:15:31:99:95:1d:31:4d:3f:7f:02:f1: 3e:30:ec:c7:db:90:6d:e8:0e:99:04:c2:f8:7c:7a:36:ac:53: a1:53:aa:2c:58:47:d1:fe:54:95:ab:dd:e7:25:21:35:50:86: 08:47:9d:a5:7c:3a:aa:4f:22:84:b2:63:b5:a3:45:c9:8c:63: c8:b4:df:ce:2f:8a:3d:52:65:7d:09:f3:71:94:e9:f3:8c:42: ed:f9:1c:1e:53:7b:c4:b1:61:29:cc:87:b4:6d:23:3b:59:84: 59:41:9f:e9:29:9b:d6:bf:a9:27:08:63:10:78:c3:ce:11:6e: 58:00:da:c2:a0:f8:8c:fb:0e:10:34:5d:91:28:e9:eb:b2:71: f2:ba:a0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuC01ZFB+QKlfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YWRiNjFiODctYzYxNy00NTRlLTk0NzUtYTIxZjcyMDE2ZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzepFtNvHmdEMuq6jduMgPpHUWeAkogOMS59 GeIF+5eR5iLKS74d4ti67sXDgIeMXCh4Bl1lltcUNPwxfsCajUArvkpy+jCXw13I Ny2p/TlcXuRAVkOl9hv+ymvsWXtOE8gpkBcL5t79IIz1Espy3MM48jfzYZMxmnE3 19ek6hLxoStEEv94izyF+bGFG2mlLbIFwqeHjzVYU4DV34funD/rELtTFF04RBs+ zPTlcj/IMQrgfsQkPOT/CL4mhMGKV7XZ8fLfvnWjFx38xI8kNcArY3FRHKPtysVq 6Ha/NjNHTvdGHuUC/KClZVMk1aBaoObG74jCf++lL6hnkxWXxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa39xAMXcnHHCtW/7SQBKjSp5xtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvOWFmZmY4NzQtNmE0Zi0z MzFhLTkzZGEtYjg3MDAwMDU2OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzkfo/I+Ck+dQD8noiIYcYPhtZkloYN3TpvaSIoEd6kmLPEmx70Fr5g F9xFLHXIPQgcGdkBfsJsFh1mvtcP51Z4FKXFFYg/VwVph4Um10jR7lU1hZOxSzt0 ycVfz5kDhLqhmNe6B+uwf+0b8A5loyozp4cVMZmVHTFNP38C8T4w7MfbkG3oDpkE wvh8ejasU6FTqixYR9H+VJWr3eclITVQhghHnaV8OqpPIoSyY7WjRcmMY8i0384v ij1SZX0J83GU6fOMQu35HB5Te8SxYSnMh7RtIztZhFlBn+kpm9a/qScIYxB4w84R blgA2sKg+Iz7DhA0XZEo6euycfK6oP0= -----END CERTIFICATE-----Generated at Sun Oct 11 06:52:53 2026 by rpki-client