$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa File: 471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa (raw, json) Hash identifier: 9Ya+CXVPimCMJrdT7Si54QxSY+dTdDiyM7N/AupGYrA= Subject key identifier: 2C:6A:0B:DF:66:5E:EF:42:DA:17:A0:4F:E0:45:E2:BA:87:B7:E9:89 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584A8782B2AB17A21D3BD6F0B680 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa Signing time: Tue 15 Jul 2025 18:38:14 +0000 ROA not before: Tue 15 Jul 2025 18:38:14 +0000 ROA not after: Mon 13 Oct 2025 18:38:14 +0000 asID: 32806 IP address blocks: 208.114.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:82:b2:ab:17:a2:1d:3b:d6:f0:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Jul 15 18:38:14 2025 GMT Not After : Oct 13 18:38:14 2025 GMT Subject: CN=5a9c4647-23d9-40ae-84e6-c88d9c194829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:76:5d:02:df:22:dd:13:d9:9e:e9:b3:b4: 17:6e:ea:33:40:82:60:f5:be:5a:d0:39:5f:f9:db: 6a:5e:03:ef:a9:8e:14:15:4c:ce:89:02:85:ad:3f: fa:8e:2c:51:d2:fb:94:87:f1:0d:ed:71:7c:14:0f: 9e:6d:fe:0e:9d:1a:18:8f:0f:10:e5:70:4d:cb:eb: ea:da:58:be:88:36:e9:7e:0b:00:24:03:b9:35:6f: 03:aa:29:9d:75:6f:b4:17:d4:31:2e:8b:15:4c:a9: 98:03:16:76:ce:43:12:59:5f:4c:ec:ed:b8:11:41: 38:d9:31:f8:88:bb:2a:5c:d4:d5:19:ff:4c:10:79: 5c:ea:87:7e:f0:ad:69:e8:71:9b:3d:18:c7:b9:2d: 18:ae:0a:83:f7:d1:f6:e7:56:ee:cf:b0:68:8a:4b: 86:af:a4:20:07:98:22:3d:4f:d6:fd:80:de:39:33: 63:64:77:fd:57:2c:12:8e:b5:c3:77:9c:35:cc:fc: 9c:93:76:a1:0a:7d:15:97:97:99:76:7b:70:90:9f: e6:48:81:8f:67:38:a5:08:e3:51:8d:28:80:de:c2: dd:5a:6c:9a:df:f3:b9:fb:70:77:be:7b:39:6a:54: 7b:c8:28:df:ef:4b:67:e8:f5:a1:b0:9f:9e:7c:47: ec:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6A:0B:DF:66:5E:EF:42:DA:17:A0:4F:E0:45:E2:BA:87:B7:E9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 208.114.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:f2:f6:9f:bf:88:8f:65:97:8e:16:ad:b6:9b:75:1b:a2:29: d0:81:68:53:d6:2c:cf:0c:22:61:71:17:b8:24:19:76:43:17: 49:fa:9b:6f:5e:93:91:4b:da:9a:68:75:f8:a8:52:2e:09:5b: 30:e0:d6:dd:51:9e:f5:02:3e:9c:7f:6c:4a:12:f1:a3:e9:ad: 53:4e:a2:b5:57:df:23:f8:0e:b9:b3:78:a0:20:5f:11:04:64: 21:6c:b2:7e:23:b2:e3:47:4a:b1:3b:7a:f5:50:ea:3e:f0:c7: 70:51:83:8c:23:d9:37:b7:72:99:44:cf:84:82:8b:ac:a6:51: e9:a0:3a:9d:43:78:a3:c4:f3:9d:ee:9f:24:05:b0:55:26:1c: 39:b1:b9:91:b4:d3:e7:ae:f8:e4:b3:98:67:60:ee:52:55:3a: 73:3b:98:19:4d:9a:f8:68:d0:3f:0e:ca:6d:8b:2d:a8:07:ab: 63:d3:0c:1a:d1:f6:85:94:80:d9:dc:3b:d0:bb:a8:3a:80:66: 72:89:d5:37:ad:95:c9:84:f5:e4:ac:96:ae:af:fc:10:90:44: bd:f2:af:85:23:f2:41:b1:bc:db:f7:d9:f3:2b:e2:32:86:c6: 6d:7b:8d:85:09:98:e8:55:c1:15:6d:23:d8:68:c8:92:44:16: 74:b3:5d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHgrKrF6IdO9bwtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MDcxNTE4MzgxNFoXDTI1MTAxMzE4MzgxNFowLzEtMCsGA1UEAxMk NWE5YzQ2NDctMjNkOS00MGFlLTg0ZTYtYzg4ZDljMTk0ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZJ2XQLfIt0T2Z7ps7QXbuozQIJg9b5a0Dlf +dtqXgPvqY4UFUzOiQKFrT/6jixR0vuUh/EN7XF8FA+ebf4OnRoYjw8Q5XBNy+vq 2li+iDbpfgsAJAO5NW8DqimddW+0F9QxLosVTKmYAxZ2zkMSWV9M7O24EUE42TH4 iLsqXNTVGf9MEHlc6od+8K1p6HGbPRjHuS0YrgqD99H251buz7BoikuGr6QgB5gi PU/W/YDeOTNjZHf9VywSjrXDd5w1zPyck3ahCn0Vl5eZdntwkJ/mSIGPZzilCONR jSiA3sLdWmya3/O5+3B3vns5alR7yCjf70tn6PWhsJ+efEfszQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxqC99mXu9C2hegT+BF4rqHt+mJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNDcxYmY1OWYtYjM3Yy0z MDU1LTliMzctNmVkN2ExYmM0YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HJ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzy9p+/iI9ll44WrbabdRuiKdCBaFPWLM8MImFxF7gkGXZDF0n6m29e k5FL2ppodfioUi4JWzDg1t1RnvUCPpx/bEoS8aPprVNOorVX3yP4DrmzeKAgXxEE ZCFssn4jsuNHSrE7evVQ6j7wx3BRg4wj2Te3cplEz4SCi6ymUemgOp1DeKPE853u nyQFsFUmHDmxuZG00+eu+OSzmGdg7lJVOnM7mBlNmvho0D8Oym2LLagHq2PTDBrR 9oWUgNncO9C7qDqAZnKJ1TetlcmE9eSslq6v/BCQRL3yr4Uj8kGxvNv32fMr4jKG xm17jYUJmOhVwRVtI9hoyJJEFnSzXQ0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:16 2025 by rpki-client