$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa File: 32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa (raw, json) Hash identifier: /DHbmrY8yI4Al9Q2JMXdeXwJRSdqNn4WYxPDY8yr73M= Subject key identifier: BD:01:CC:15:33:DF:F6:1E:CE:DC:7F:B8:70:1C:CF:AA:F1:1A:1A:A6 Certificate issuer: /CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Certificate serial: 010D0C9F4328584FA59334CBC4A3174EE1005C60 Authority key identifier: 98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 2386 IP address blocks: 170.190.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:34:cb:c4:a3:17:4e:e1:00:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=2b321f3d-c185-468c-ae91-766899dffce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:de:ef:7d:01:93:0d:e7:34:51:9f:c7:75:16: 87:09:a3:2e:17:70:6b:7a:67:e3:d1:f2:93:98:4a: 1a:99:81:d3:b2:2f:02:9f:00:d1:25:3a:6a:9b:e3: 54:49:c4:58:c4:08:24:c4:9e:95:d8:3f:b1:3e:df: 09:57:c0:b7:c0:db:54:c0:a7:d4:a6:15:b6:24:69: 5a:66:23:e6:7b:70:c3:9d:8a:a5:73:92:25:a0:8c: e8:c4:2d:60:82:63:42:91:fa:4a:67:fa:b8:52:5c: e6:a1:84:52:f1:06:cc:a6:f5:e7:fc:78:62:58:b2: d0:07:bb:c9:2e:a4:38:1a:ec:ed:a2:85:ef:6a:3a: 09:d3:68:5c:82:65:15:ee:0e:94:c0:09:8c:93:df: de:a2:21:18:cd:b2:9b:fd:00:6e:6c:0c:a8:90:44: 8b:da:ee:1d:c3:28:7e:7f:7b:dd:98:7c:64:9a:bd: c4:cf:df:ed:c2:4c:af:d7:24:b6:be:9a:4e:5c:79: e3:5c:81:fc:1d:2a:52:10:c6:fb:1a:78:7c:bf:19: 43:84:f3:7d:94:45:58:05:ac:49:f2:19:89:24:44: d5:93:01:7d:bb:2e:15:11:fc:db:f7:00:7d:48:a3: 23:19:15:ec:16:5c:6f:3a:7a:52:3d:ae:70:79:11: ea:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:01:CC:15:33:DF:F6:1E:CE:DC:7F:B8:70:1C:CF:AA:F1:1A:1A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl X509v3 Authority Key Identifier: keyid:98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer sbgp-ipAddrBlock: critical IPv4: 170.190.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1d:6e:ef:eb:65:d0:bc:1b:a9:6d:96:61:d8:25:72:60:7b: f3:1e:bb:90:1c:3a:a2:68:d9:13:64:72:37:2c:5d:8e:e3:7d: 63:fe:80:3b:43:94:c8:40:70:bb:77:8c:e4:67:db:b2:d8:36: 21:8d:a1:ec:6b:7f:cc:54:47:88:c3:16:f4:e2:66:9b:36:3f: 67:ab:be:48:6e:1b:81:64:02:bb:c7:3f:b1:4c:6f:f5:ac:16: 89:d6:52:d5:e8:28:e4:7d:80:51:2d:29:a0:9a:8d:ef:cb:fd: 51:09:29:5c:30:d0:ea:35:95:85:77:ab:6e:4d:c6:03:ef:f0: fd:42:9e:87:dc:ae:b0:85:63:2f:d4:1a:e5:34:c7:82:33:f1: 5c:73:2e:8a:a1:56:ea:38:3f:53:48:fa:ba:2f:e6:59:45:7c: a9:fe:f8:f8:88:81:1b:12:db:50:db:da:37:5e:b4:16:fe:07: dd:1c:2f:c0:48:98:33:04:7b:34:1c:b9:d5:25:d1:6f:42:7f: 6a:16:e6:7b:4e:8d:63:c3:49:cb:c4:4b:ed:e1:24:0d:63:ad: 39:47:99:26:69:06:f8:15:4a:19:34:88:4c:d5:5f:a0:46:bc: f9:8d:e0:8a:dc:e9:7b:fd:5f:98:44:dd:1f:9b:ff:01:7d:0b: 10:ed:5a:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lkzTLxKMXTuEAXGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhYjQ3NGYtZTg2ZS00NTdjLThlNGYtNTI1ZTQ3M2Y5 ZTAxMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk MmIzMjFmM2QtYzE4NS00NjhjLWFlOTEtNzY2ODk5ZGZmY2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd7vfQGTDec0UZ/HdRaHCaMuF3Bremfj0fKT mEoamYHTsi8CnwDRJTpqm+NUScRYxAgkxJ6V2D+xPt8JV8C3wNtUwKfUphW2JGla ZiPme3DDnYqlc5IloIzoxC1ggmNCkfpKZ/q4UlzmoYRS8QbMpvXn/HhiWLLQB7vJ LqQ4GuztooXvajoJ02hcgmUV7g6UwAmMk9/eoiEYzbKb/QBubAyokESL2u4dwyh+ f3vdmHxkmr3Ez9/twkyv1yS2vppOXHnjXIH8HSpSEMb7Gnh8vxlDhPN9lEVYBaxJ 8hmJJETVkwF9uy4VEfzb9wB9SKMjGRXsFlxvOnpSPa5weRHqTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0BzBUz3/Yeztx/uHAcz6rxGhqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80N2Fi NDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVlNDczZjllMDEvMzJmYmFjNGUtZTFhZS0z NmQwLTk0NjAtYzU2MzNjM2E5YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDdhYjQ3NGYtZTg2ZS00NTdjLThl NGYtNTI1ZTQ3M2Y5ZTAxLzQ3YWI0NzRmLWU4NmUtNDU3Yy04ZTRmLTUyNWU0NzNm OWUwMS5jcmwwHwYDVR0jBBgwFoAUmLjiKxPCPsM43Lo6U1UYTTFS8DEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80N2FiNDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVl NDczZjllMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqr4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYdbu/rZdC8G6ltlmHYJXJge/Meu5AcOqJo2RNkcjcsXY7jfWP+gDtD lMhAcLt3jORn27LYNiGNoexrf8xUR4jDFvTiZps2P2ervkhuG4FkArvHP7FMb/Ws FonWUtXoKOR9gFEtKaCaje/L/VEJKVww0Oo1lYV3q25NxgPv8P1CnofcrrCFYy/U GuU0x4Iz8VxzLoqhVuo4P1NI+rov5llFfKn++PiIgRsS21Db2jdetBb+B90cL8BI mDMEezQcudUl0W9Cf2oW5ntOjWPDScvES+3hJA1jrTlHmSZpBvgVShk0iEzVX6BG vPmN4Irc6Xv9X5hE3R+b/wF9CxDtWoU= -----END CERTIFICATE-----Generated at Sun Nov 15 14:23:01 2026 by rpki-client