$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42c8aebf-b739-3801-82ed-718c13dec108.roa File: 42c8aebf-b739-3801-82ed-718c13dec108.roa (raw, json) Hash identifier: V9sctpY2tsWA1LkSgnwYpBN8h0RS1K17HqhENBCBsNM= Subject key identifier: FE:46:AB:73:4E:91:80:98:F7:17:F6:0F:F8:18:68:5A:94:6B:99:5C Certificate issuer: /CN=cb3c1858-774e-412f-8f35-dbceb0979782 Certificate serial: 010D0C9F4328584EA7999BF6F0CECA327BC96C80 Authority key identifier: B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42c8aebf-b739-3801-82ed-718c13dec108.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23118 IP address blocks: 167.104.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:9b:f6:f0:ce:ca:32:7b:c9:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3c1858-774e-412f-8f35-dbceb0979782 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=33a30882-ac84-4816-974f-03279d06d6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:cc:25:3b:29:f7:ac:74:ba:e2:90:0a:f5: d5:45:2e:7c:d6:67:d3:ce:3d:7c:47:01:d7:69:5f: 46:47:ca:ec:21:0f:4d:83:9a:5f:1b:5c:36:e7:3b: fd:23:55:4f:ed:ce:fa:9c:8c:42:f5:e3:e4:39:50: fc:ee:b6:20:fd:9b:94:0f:34:92:79:e9:28:d7:73: 82:12:28:df:aa:4d:e7:14:4b:b6:6a:71:8a:04:9e: e8:5d:7a:6a:7b:05:02:1f:76:f6:2e:c9:47:dd:b0: 88:86:82:60:e7:30:20:9b:34:17:05:5f:a2:b4:f5: ce:18:78:2a:70:e5:30:40:27:d1:a2:2c:ba:f7:a7: 07:ed:9b:5e:db:3e:1f:6a:22:5b:7b:ca:eb:a3:8b: cf:63:3b:93:43:79:d2:90:04:bd:d0:c1:12:b4:42: aa:55:77:b5:66:b3:a6:e7:df:49:2e:37:41:7b:17: 0f:39:2c:a4:b1:3f:f6:c5:20:62:4f:95:ed:e1:dd: c8:84:29:b1:9f:ed:6a:51:71:ab:aa:c5:b3:dd:be: 0c:fa:41:e5:a7:0a:ab:fb:b9:4d:d4:2a:8a:82:9d: 81:2b:03:d7:ba:06:70:b2:62:e8:bb:69:65:1a:5f: 62:2a:ee:eb:eb:00:a3:35:9a:b5:89:61:5e:8e:0f: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:46:AB:73:4E:91:80:98:F7:17:F6:0F:F8:18:68:5A:94:6B:99:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42c8aebf-b739-3801-82ed-718c13dec108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl X509v3 Authority Key Identifier: keyid:B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer sbgp-ipAddrBlock: critical IPv4: 167.104.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:dd:dd:f2:f1:15:d6:0e:10:87:a8:8a:01:58:c9:bc:10:81: 78:43:82:b1:f3:94:0e:16:5c:51:c1:ca:86:69:41:f2:38:1b: 21:12:72:a1:13:41:4c:0f:be:4a:ce:d0:8e:b0:1c:91:4f:39: 2b:34:6f:38:66:1a:05:45:8d:44:22:df:b7:9f:37:de:8d:a2: 53:28:57:c7:0a:d9:cc:5d:21:65:bd:56:a3:c1:3a:5a:45:33: 49:7f:5d:2f:55:e0:37:f5:81:30:6a:69:f1:fa:b3:d7:97:a7: b8:db:10:8c:32:de:8d:51:f5:db:26:3e:cb:10:c8:d6:c3:c9: 3c:d4:36:7f:0f:5e:22:c9:63:1e:46:90:09:01:94:48:2c:55: 79:8c:80:9e:33:e7:b0:2c:45:e2:31:93:df:2e:57:5b:5e:64: 54:4e:e6:99:4e:df:eb:02:97:0d:21:a6:9d:ab:ce:18:fe:15: 04:8a:01:50:22:e8:b5:48:b7:d9:0d:0a:ee:a6:0e:de:71:87: e9:4c:8c:d9:83:88:92:5b:b3:9a:a0:99:29:f7:e3:7d:35:e4: f5:b5:de:59:1e:46:8f:d6:db:a6:15:30:ec:21:50:c2:79:1e: 2b:1b:30:e7:55:8d:48:ac:0c:9f:63:ca:50:da:43:2d:8a:5d: 65:f3:84:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmZv28M7KMnvJbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYzE4NTgtNzc0ZS00MTJmLThmMzUtZGJjZWIwOTc5 NzgyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzNhMzA4ODItYWM4NC00ODE2LTk3NGYtMDMyNzlkMDZkNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB/MJTsp96x0uuKQCvXVRS581mfTzj18RwHX aV9GR8rsIQ9Ng5pfG1w25zv9I1VP7c76nIxC9ePkOVD87rYg/ZuUDzSSeeko13OC Eijfqk3nFEu2anGKBJ7oXXpqewUCH3b2LslH3bCIhoJg5zAgmzQXBV+itPXOGHgq cOUwQCfRoiy696cH7Zte2z4faiJbe8rro4vPYzuTQ3nSkAS90MEStEKqVXe1ZrOm 599JLjdBexcPOSyksT/2xSBiT5Xt4d3IhCmxn+1qUXGrqsWz3b4M+kHlpwqr+7lN 1CqKgp2BKwPXugZwsmLou2llGl9iKu7r6wCjNZq1iWFejg8e7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5Gq3NOkYCY9xf2D/gYaFqUa5lcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjNj MTg1OC03NzRlLTQxMmYtOGYzNS1kYmNlYjA5Nzk3ODIvNDJjOGFlYmYtYjczOS0z ODAxLTgyZWQtNzE4YzEzZGVjMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2IzYzE4NTgtNzc0ZS00MTJmLThm MzUtZGJjZWIwOTc5NzgyL2NiM2MxODU4LTc3NGUtNDEyZi04ZjM1LWRiY2ViMDk3 OTc4Mi5jcmwwHwYDVR0jBBgwFoAUsxchefvHIXUBMemhKCKmwsqNtjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYjNjMTg1OC03NzRlLTQxMmYtOGYzNS1kYmNl YjA5Nzk3ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp2ggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3d3fLxFdYOEIeoigFYybwQgXhDgrHzlA4WXFHByoZpQfI4GyEScqET QUwPvkrO0I6wHJFPOSs0bzhmGgVFjUQi37efN96NolMoV8cK2cxdIWW9VqPBOlpF M0l/XS9V4Df1gTBqafH6s9eXp7jbEIwy3o1R9dsmPssQyNbDyTzUNn8PXiLJYx5G kAkBlEgsVXmMgJ4z57AsReIxk98uV1teZFRO5plO3+sClw0hpp2rzhj+FQSKAVAi 6LVIt9kNCu6mDt5xh+lMjNmDiJJbs5qgmSn343015PW13lkeRo/W26YVMOwhUMJ5 HisbMOdVjUisDJ9jylDaQy2KXWXzhHE= -----END CERTIFICATE-----Generated at Wed Jul 29 20:38:13 2026 by rpki-client