$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa File: 2d29c9cc-f352-359a-a680-78348c95a6e1.roa (raw, json) Hash identifier: /H5Sn8OCtzP0WTv5cj4u1LdFuLutBzjDtY+sjGFD6qk= Subject key identifier: E6:38:6E:AA:E3:68:DF:B3:81:BF:F4:85:B4:1F:54:D8:83:1E:9B:4E Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584E6B0A12EFA33AC2D1DB5E1EE0 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 32788 IP address blocks: 208.88.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:12:ef:a3:3a:c2:d1:db:5e:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=f6965e7c-0e3e-436b-b2ea-55ac545e5f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:58:fc:f8:7d:4d:72:c5:9d:b2:13:8f:1c: c1:8f:e6:97:3c:b3:3e:b7:1b:f9:33:09:e7:cd:7b: 36:42:87:99:b7:f9:8f:58:a3:a9:ee:e8:60:2e:fb: 75:79:11:2e:3f:bc:62:7a:ef:1c:cb:1d:88:01:d1: 02:d0:cf:d5:a0:41:ce:05:54:99:2e:36:e6:36:c3: 77:32:d0:0f:95:83:6c:23:4a:0c:27:22:37:53:af: 2b:1b:09:7e:39:bf:7a:58:44:ea:33:fa:2f:28:c1: 95:00:44:fc:30:c4:0f:1d:40:75:bc:0b:46:10:76: 2f:6c:66:44:30:d7:2d:c9:bf:da:d5:e2:12:7f:4a: fb:37:d7:36:11:5c:a8:20:bb:8a:50:a6:69:66:8d: 13:df:42:65:13:45:23:c8:35:0d:29:5d:40:7e:8c: 95:10:8c:ef:a2:cd:37:a4:40:e3:88:f6:43:a4:21: 67:b2:9b:36:04:2e:7b:5a:15:f6:fc:29:c2:99:bb: db:de:0d:be:21:80:09:97:b3:e6:36:b4:8e:3a:49: 10:ee:4c:62:24:9b:f1:41:bf:54:08:07:22:be:ff: 8f:d3:aa:97:15:bf:92:16:13:9c:23:f0:e8:96:45: ce:a9:27:c6:cc:bf:e1:5b:78:e9:69:cb:ca:3d:7e: b2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:38:6E:AA:E3:68:DF:B3:81:BF:F4:85:B4:1F:54:D8:83:1E:9B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9a:6d:ea:f6:a4:f4:bc:14:0b:fc:27:a3:7c:8e:96:29:21: 90:d3:88:1f:33:c2:db:a9:af:47:29:09:dc:b5:1d:49:f7:95: 3c:87:69:50:35:5f:6f:5a:ff:fd:ad:ef:bb:c7:5a:99:37:27: bb:fc:2d:25:f8:31:03:47:99:60:16:de:bd:1d:db:b4:7e:e2: 2e:29:a7:70:b9:dd:cc:ba:6f:1c:1e:bb:12:58:cc:0b:ba:92: fb:e7:65:69:9c:bf:be:4d:2b:4a:a7:ac:af:d2:65:68:8f:79: 18:c5:be:3f:fd:68:ec:91:f9:0d:b0:ca:ef:44:2b:d4:7d:3c: 4b:f4:d8:2c:30:9e:ab:5b:40:d6:e0:8c:8f:50:9d:fe:0a:bb: 24:25:ee:cc:94:06:30:68:d3:08:58:63:cd:54:1c:41:85:ee: 3a:b8:fc:6d:bc:ef:a4:76:bf:77:fc:6e:33:4b:cc:ae:9f:47: 39:8f:32:ea:fb:30:bd:c7:e2:f4:f0:ee:3d:ef:9f:ff:c4:74: bd:e8:50:db:b1:2b:c2:58:2c:85:2e:ca:d0:3a:87:7b:02:48: fa:21:0e:08:ca:60:cf:87:16:d0:e1:53:30:7a:21:85:59:72: 73:19:3b:44:25:32:16:3b:49:44:cf:cc:cc:a1:c1:94:e0:28: ca:89:0d:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChLvozrC0dteHuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ZjY5NjVlN2MtMGUzZS00MzZiLWIyZWEtNTVhYzU0NWU1ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPZY/Ph9TXLFnbITjxzBj+aXPLM+txv5Mwnn zXs2QoeZt/mPWKOp7uhgLvt1eREuP7xieu8cyx2IAdEC0M/VoEHOBVSZLjbmNsN3 MtAPlYNsI0oMJyI3U68rGwl+Ob96WETqM/ovKMGVAET8MMQPHUB1vAtGEHYvbGZE MNctyb/a1eISf0r7N9c2EVyoILuKUKZpZo0T30JlE0UjyDUNKV1AfoyVEIzvos03 pEDjiPZDpCFnsps2BC57WhX2/CnCmbvb3g2+IYAJl7PmNrSOOkkQ7kxiJJvxQb9U CAcivv+P06qXFb+SFhOcI/DolkXOqSfGzL/hW3jpacvKPX6yrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY4bqrjaN+zgb/0hbQfVNiDHptOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMmQyOWM5Y2MtZjM1Mi0z NTlhLWE2ODAtNzgzNDhjOTVhNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyaber2pPS8FAv8J6N8jpYpIZDTiB8zwtupr0cpCdy1HUn3lTyHaVA1 X29a//2t77vHWpk3J7v8LSX4MQNHmWAW3r0d27R+4i4pp3C53cy6bxweuxJYzAu6 kvvnZWmcv75NK0qnrK/SZWiPeRjFvj/9aOyR+Q2wyu9EK9R9PEv02CwwnqtbQNbg jI9Qnf4KuyQl7syUBjBo0whYY81UHEGF7jq4/G2876R2v3f8bjNLzK6fRzmPMur7 ML3H4vTw7j3vn//EdL3oUNuxK8JYLIUuytA6h3sCSPohDgjKYM+HFtDhUzB6IYVZ cnMZO0QlMhY7SUTPzMyhwZTgKMqJDc0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:16:01 2026 by rpki-client