$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa File: d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa (raw, json) Hash identifier: dznNAfn1i645wY5x7sawDYibr1t8V0FhtR6Rjyx4xpo= Subject key identifier: 67:87:4A:0F:39:96:6C:88:CE:4A:76:6A:22:A5:D2:9F:68:15:8D:AD Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F4328584E360186E7FD0C68AFDA9E9480 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 40232 IP address blocks: 192.82.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:01:86:e7:fd:0c:68:af:da:9e:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=0dabf808-7285-46d9-bec3-18efdca80a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:a4:30:3b:08:c3:b7:ca:48:c3:62:49:d9: c1:31:c9:c8:49:f9:d8:ae:7a:c7:89:8f:23:ea:7e: b6:2e:ff:b7:10:22:54:bc:27:67:b4:1c:10:47:70: 0e:95:2a:25:e6:9a:69:74:98:b6:9b:cb:e8:1f:41: 4a:07:c5:c9:97:b7:cd:0f:72:7a:44:f8:78:1a:8c: d6:af:e6:a4:cc:d4:44:44:89:b0:ad:4e:80:01:b3: 7c:32:fb:5e:a3:f9:c7:b8:fe:31:d2:c5:81:80:9c: d0:a0:2a:5a:48:90:17:3c:76:a4:5a:be:d4:c0:d3: 19:c8:e4:47:f5:77:34:d0:ce:37:71:aa:8c:ff:56: 5e:20:c3:f3:bc:26:f9:3c:e8:df:45:24:e8:e6:d2: 72:a2:99:67:66:d0:0d:2e:6c:9b:92:3e:a8:bf:22: 6e:e7:7e:ef:a8:80:0c:81:17:ac:da:d3:3a:7e:77: 65:68:36:56:d4:35:c4:93:42:b3:d9:52:3d:61:6b: 81:c7:23:c8:f3:b2:2d:87:41:ac:4b:b3:ff:86:06: 96:29:61:44:b4:80:74:4e:7a:b8:25:58:6c:90:88: 6d:77:f0:47:bf:bf:1c:c8:e3:8c:a0:57:f8:99:60: d3:8c:32:e2:78:9d:fb:a9:f3:30:87:7e:b8:9c:fc: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:87:4A:0F:39:96:6C:88:CE:4A:76:6A:22:A5:D2:9F:68:15:8D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv4: 192.82.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:50:0f:b2:e8:68:2f:dd:ca:50:a2:fb:12:41:5b:5d:87:8d: b9:67:31:56:2c:a9:ea:fa:18:19:99:04:ae:41:86:3d:e3:c1: b9:13:60:71:b6:e4:0a:ab:3c:ee:a0:d4:cc:ce:82:ab:09:02: de:2f:3c:b5:ed:e9:8f:25:dc:88:c3:3c:63:23:9f:24:3b:8e: 2f:8f:85:3d:da:c3:66:34:84:17:19:2b:d7:64:93:29:24:2c: c2:97:fc:48:b4:f2:c7:f5:e0:fd:18:0c:d4:83:0c:8c:43:b1: 40:32:32:fa:bf:bb:44:59:a9:6a:ae:f4:46:6b:9f:b8:49:80: 20:cd:55:d2:4b:31:11:1d:fe:3c:12:03:05:9a:40:8b:f2:6d: 39:6f:fa:aa:4d:5a:0f:3b:ee:35:bb:b3:c2:5d:51:7f:33:d6: 90:8a:2d:8f:9c:1e:83:9b:c1:68:21:08:f9:bf:12:d8:66:aa: f1:7b:b8:f3:c0:e8:b4:b2:a6:3b:34:86:24:f3:6f:cb:22:ad: 20:1b:72:5a:71:bd:24:32:f4:5a:09:51:b0:0c:b1:f6:b1:6b: a6:65:61:ba:60:cd:0a:4d:48:27:b0:84:cc:c7:df:1f:1f:d2: 11:f7:fa:ea:3e:37:ba:e6:3d:97:e4:e0:79:40:89:2c:d9:a0: d5:3b:70:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AYbn/Qxor9qelIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk MGRhYmY4MDgtNzI4NS00NmQ5LWJlYzMtMThlZmRjYTgwYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqakMDsIw7fKSMNiSdnBMcnISfnYrnrHiY8j 6n62Lv+3ECJUvCdntBwQR3AOlSol5pppdJi2m8voH0FKB8XJl7fND3J6RPh4GozW r+akzNRERImwrU6AAbN8Mvteo/nHuP4x0sWBgJzQoCpaSJAXPHakWr7UwNMZyORH 9Xc00M43caqM/1ZeIMPzvCb5POjfRSTo5tJyoplnZtANLmybkj6ovyJu537vqIAM gRes2tM6fndlaDZW1DXEk0Kz2VI9YWuBxyPI87Ith0GsS7P/hgaWKWFEtIB0Tnq4 JVhskIhtd/BHv78cyOOMoFf4mWDTjDLieJ37qfMwh364nPy8MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeHSg85lmyIzkp2aiKl0p9oFY2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvZDhmYzQ5YzktMTQzMi0z YWQ1LTlhMTctYzNkZjI4MGNjNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwFIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARQD7LoaC/dylCi+xJBW12HjblnMVYsqer6GBmZBK5Bhj3jwbkTYHG2 5AqrPO6g1MzOgqsJAt4vPLXt6Y8l3IjDPGMjnyQ7ji+PhT3aw2Y0hBcZK9dkkykk LMKX/Ei08sf14P0YDNSDDIxDsUAyMvq/u0RZqWqu9EZrn7hJgCDNVdJLMREd/jwS AwWaQIvybTlv+qpNWg877jW7s8JdUX8z1pCKLY+cHoObwWghCPm/EthmqvF7uPPA 6LSypjs0hiTzb8sirSAbclpxvSQy9FoJUbAMsfaxa6ZlYbpgzQpNSCewhMzH3x8f 0hH3+uo+N7rmPZfk4HlAiSzZoNU7cCE= -----END CERTIFICATE-----Generated at Thu Jul 9 21:05:28 2026 by rpki-client