$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa File: 9afff874-6a4f-331a-93da-b870000569c0.roa (raw, json) Hash identifier: OqHefuLCdjdK4ZIEnQV+sQ8ekp8/HRKBu08PX2g43eU= Subject key identifier: 3D:13:C8:39:5D:6A:0D:47:4C:DF:CC:D4:7D:94:02:D2:09:B4:AD:BE Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F4328584EC0A72D23B7A018782E917700 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 398191 IP address blocks: 216.225.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:2d:23:b7:a0:18:78:2e:91:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=46a1d7a1-2ac5-462a-b569-16c0602acfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6e:23:b8:9f:04:d9:bd:10:80:3d:8e:d5:c9: 4e:a0:c2:25:cf:76:7d:30:d9:e8:c8:78:5b:9c:95: 48:b4:84:6d:fc:e4:32:1d:ad:4b:f8:c8:1f:6d:d1: 73:00:3b:1d:cb:68:36:c3:3a:ee:46:ec:b6:0f:51: 0c:e2:cc:65:3e:8f:0c:9d:2c:74:fd:3a:45:01:c1: 9d:bf:86:6c:99:1f:14:a4:72:ec:00:da:0b:a1:a3: ff:82:d6:00:0a:5f:e8:55:d1:12:de:05:11:41:5c: c3:41:75:93:cd:1a:e9:b7:94:18:f0:d7:2c:17:02: 69:1f:63:15:93:68:17:26:50:0f:64:de:2a:26:1b: a5:5b:91:df:92:57:d0:d1:26:57:a1:f6:68:ac:7a: 18:a6:7d:d5:77:2b:7f:73:9b:58:2a:1f:a7:1e:ff: 8e:67:c5:27:5c:4a:8e:75:c9:0b:00:de:08:50:51: 0e:aa:1d:ba:6e:f4:e6:3b:66:32:40:ff:5a:9a:22: df:da:10:29:a1:fd:3f:a0:78:e6:de:a9:44:34:3e: d8:60:8f:05:dd:32:ee:9a:96:84:50:89:03:af:d0: 62:7c:86:6d:ef:3e:7b:ad:a8:2e:e7:da:df:b3:94: 27:59:b4:44:fd:fa:1a:1b:45:c6:88:9c:b1:19:46: 7e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:13:C8:39:5D:6A:0D:47:4C:DF:CC:D4:7D:94:02:D2:09:B4:AD:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv4: 216.225.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a0:70:4c:ec:e0:14:56:0b:c5:20:29:26:83:19:cd:64:ed: 72:42:55:23:1e:4b:1e:3a:6c:91:f3:6a:52:8b:cd:0b:50:35: 42:65:ad:87:05:fb:c9:86:f2:67:21:dd:8f:6b:bf:45:4f:ac: 7b:fb:83:82:b4:23:5c:c1:7a:c5:48:c6:8d:ba:34:78:5e:16: 8d:cd:2e:30:f6:d1:b0:f5:23:4e:4b:ed:99:72:d5:93:53:71: fa:4f:d2:05:1b:50:f7:f2:06:d1:b7:d9:95:7a:d8:5e:4c:7e: d1:c9:a8:b8:50:d7:ee:9c:1a:4a:22:ef:6c:e5:ce:74:a7:a1: db:5a:7c:ec:a9:ff:4a:2e:d8:72:29:49:c7:2c:54:0a:32:5e: 3c:fe:be:5e:33:da:78:b0:c7:26:57:4b:5f:46:1a:df:a1:1f: b7:87:11:a3:55:d2:27:10:19:3d:e7:fc:9a:35:55:ed:43:37: 3d:80:4a:5e:6d:fb:42:b7:13:bf:34:b1:18:47:7d:9b:ca:4e: 6b:67:83:66:0e:61:60:1e:58:53:a0:a8:b1:d7:8f:7a:be:32: 9c:7a:e1:c3:15:34:66:d7:56:38:78:9d:b7:eb:f4:04:d1:ad: 72:92:32:92:60:c1:1f:db:d4:66:dc:6d:18:69:a0:39:86:89: dd:ab:fd:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apy0jt6AYeC6RdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk NDZhMWQ3YTEtMmFjNS00NjJhLWI1NjktMTZjMDYwMmFjZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm4juJ8E2b0QgD2O1clOoMIlz3Z9MNnoyHhb nJVItIRt/OQyHa1L+MgfbdFzADsdy2g2wzruRuy2D1EM4sxlPo8MnSx0/TpFAcGd v4ZsmR8UpHLsANoLoaP/gtYACl/oVdES3gURQVzDQXWTzRrpt5QY8NcsFwJpH2MV k2gXJlAPZN4qJhulW5HfklfQ0SZXofZorHoYpn3Vdyt/c5tYKh+nHv+OZ8UnXEqO dckLAN4IUFEOqh26bvTmO2YyQP9amiLf2hApof0/oHjm3qlEND7YYI8F3TLumpaE UIkDr9BifIZt7z57ragu59rfs5QnWbRE/foaG0XGiJyxGUZ+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0TyDldag1HTN/M1H2UAtIJtK2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvOWFmZmY4NzQtNmE0Zi0z MzFhLTkzZGEtYjg3MDAwMDU2OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSgcEzs4BRWC8UgKSaDGc1k7XJCVSMeSx46bJHzalKLzQtQNUJlrYcF +8mG8mch3Y9rv0VPrHv7g4K0I1zBesVIxo26NHheFo3NLjD20bD1I05L7Zly1ZNT cfpP0gUbUPfyBtG32ZV62F5MftHJqLhQ1+6cGkoi72zlznSnodtafOyp/0ou2HIp SccsVAoyXjz+vl4z2niwxyZXS19GGt+hH7eHEaNV0icQGT3n/Jo1Ve1DNz2ASl5t +0K3E780sRhHfZvKTmtng2YOYWAeWFOgqLHXj3q+Mpx64cMVNGbXVjh4nbfr9ATR rXKSMpJgwR/b1GbcbRhpoDmGid2r/VI= -----END CERTIFICATE-----Generated at Wed Aug 26 16:12:26 2026 by rpki-client