$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/32a1b157-c9d6-3c97-aef9-fd5e3eff86e6.roa File: 32a1b157-c9d6-3c97-aef9-fd5e3eff86e6.roa (raw, json) Hash identifier: meCDCN0IUP7wRmnfSiAIUTlwTLFAiSIy5E1y+IqsVtY= Subject key identifier: BA:03:C5:D9:7E:D2:3D:77:F4:87:A4:BE:1B:D6:D0:79:31:16:EA:C5 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584E5FDF4D8DFEB4B97A4E326700 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/32a1b157-c9d6-3c97-aef9-fd5e3eff86e6.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 401838 IP address blocks: 208.123.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:4d:8d:fe:b4:b9:7a:4e:32:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=703be254-c0b2-4721-86aa-62fb1f5f1436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:d2:65:70:2e:ff:55:a5:be:68:d2:47:cc: c6:ec:8a:fe:13:fa:5c:da:0c:83:79:96:45:23:90: 6c:e3:bc:b6:8a:cd:1b:40:62:2a:e2:8d:b9:0e:21: 83:ab:57:d6:00:61:c8:9f:33:d3:ae:9e:35:1f:51: 95:82:91:8a:85:08:a6:fd:cd:59:41:b7:69:72:36: 77:f3:e7:dc:46:87:d5:19:29:e0:91:91:ec:36:20: 6f:39:52:83:94:47:be:18:49:52:1a:6e:70:0b:4e: 96:28:5c:3e:f2:d8:f4:b9:9f:0c:d7:02:bb:c8:b7: af:fe:92:26:1a:f1:4e:16:95:8b:bd:1f:44:d3:7e: cf:f2:79:41:94:93:93:d1:ff:ab:99:0e:3b:77:d5: 82:d6:f9:36:55:e9:a3:37:3a:89:ec:0d:6d:01:26: 94:44:00:84:d8:87:79:9b:7f:ed:5f:a4:dc:12:89: 39:5a:23:7a:af:9e:e4:b9:43:5a:78:43:c3:21:0c: 6e:c6:2b:d4:54:74:94:79:f0:1b:0c:de:c2:e4:c0: 00:64:8a:be:7c:aa:38:05:5e:0e:9c:07:76:76:8b: 94:f9:12:f3:24:fd:d6:31:3c:2a:a6:94:f6:54:59: 33:75:ba:5c:51:b6:e4:59:c2:31:65:45:b5:52:52: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:03:C5:D9:7E:D2:3D:77:F4:87:A4:BE:1B:D6:D0:79:31:16:EA:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/32a1b157-c9d6-3c97-aef9-fd5e3eff86e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 208.123.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b1:a5:53:d6:8a:11:d9:e2:79:77:a9:a7:b1:49:94:d9:7c: d0:27:47:88:1a:53:62:aa:ec:4e:3e:1e:00:19:98:05:5d:9d: da:56:d8:76:f1:ca:f6:10:62:04:b1:d0:57:17:df:fc:59:2a: 32:58:3a:e8:d5:d1:fb:f1:d3:5f:19:1a:a5:4a:4a:60:eb:32: 1e:f4:45:aa:11:22:3e:ca:bf:9d:8e:93:70:8f:a8:af:eb:35: b7:00:b0:9f:83:4d:e3:63:af:42:06:14:fa:7e:0a:6b:c1:59: 58:b2:f5:38:f4:41:86:ad:4b:d4:a3:d9:34:9b:04:1a:9b:c1: 77:f9:56:40:8d:1d:5b:ff:1d:b0:23:91:bf:1c:72:21:1a:97: 82:3d:69:d5:b6:73:d6:ce:c8:11:c6:33:e4:10:fb:2d:bd:6d: ae:55:71:4c:46:ee:b1:bb:b3:4b:30:db:4f:a5:70:04:19:23: 91:8d:8d:30:60:99:0d:65:1a:5a:9e:d6:a4:9c:48:2b:d4:88: 3e:59:80:5d:b7:7e:07:43:2f:18:31:ac:b6:20:a8:65:14:b2: 77:b2:8d:33:f1:bc:57:2c:cc:57:d4:ff:26:55:71:70:71:b1: 57:8f:e3:99:9b:a9:81:e3:62:a6:ec:d1:67:c8:ec:48:42:bc: 7c:11:db:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f302N/rS5ek4yZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NzAzYmUyNTQtYzBiMi00NzIxLTg2YWEtNjJmYjFmNWYxNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoTSZXAu/1WlvmjSR8zG7Ir+E/pc2gyDeZZF I5Bs47y2is0bQGIq4o25DiGDq1fWAGHInzPTrp41H1GVgpGKhQim/c1ZQbdpcjZ3 8+fcRofVGSngkZHsNiBvOVKDlEe+GElSGm5wC06WKFw+8tj0uZ8M1wK7yLev/pIm GvFOFpWLvR9E037P8nlBlJOT0f+rmQ47d9WC1vk2VemjNzqJ7A1tASaURACE2Id5 m3/tX6TcEok5WiN6r57kuUNaeEPDIQxuxivUVHSUefAbDN7C5MAAZIq+fKo4BV4O nAd2douU+RLzJP3WMTwqppT2VFkzdbpcUbbkWcIxZUW1UlLfRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoDxdl+0j139IekvhvW0HkxFurFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvMzJhMWIxNTctYzlkNi0z Yzk3LWFlZjktZmQ1ZTNlZmY4NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaxpVPWihHZ4nl3qaexSZTZfNAnR4gaU2Kq7E4+HgAZmAVdndpW2Hbx yvYQYgSx0FcX3/xZKjJYOujV0fvx018ZGqVKSmDrMh70RaoRIj7Kv52Ok3CPqK/r NbcAsJ+DTeNjr0IGFPp+CmvBWViy9Tj0QYatS9Sj2TSbBBqbwXf5VkCNHVv/HbAj kb8cciEal4I9adW2c9bOyBHGM+QQ+y29ba5VcUxG7rG7s0sw20+lcAQZI5GNjTBg mQ1lGlqe1qScSCvUiD5ZgF23fgdDLxgxrLYgqGUUsneyjTPxvFcszFfU/yZVcXBx sVeP45mbqYHjYqbs0WfI7EhCvHwR2zc= -----END CERTIFICATE-----Generated at Tue Jul 21 10:29:38 2026 by rpki-client