$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa File: a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa (raw, json) Hash identifier: el8glN2abpyX4MHo+w6gDDP8DV1O5S27rjrdHTcZdxU= Subject key identifier: D5:DB:E1:43:60:2A:E5:D5:DA:D8:BD:09:CF:0B:8E:48:8A:F6:EA:38 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584E4559D84FFDD7247A09DF49C0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 399629 IP address blocks: 168.100.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:d8:4f:fd:d7:24:7a:09:df:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=d0c59983-d17d-4e8d-acf5-6016c352e02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:32:a9:9f:8e:c8:aa:33:1d:4a:c0:b7:be: d4:85:a6:7b:5d:9b:15:d3:20:77:23:96:f9:07:f1: 11:78:16:05:a7:c7:16:90:1d:fe:45:d9:f4:92:89: e5:72:bb:55:33:cc:44:08:e7:4e:35:76:33:3a:38: ed:93:a0:f4:0e:34:30:b5:d5:69:09:a2:9e:9e:e0: 81:c0:0e:1b:67:51:6c:4d:91:91:a3:62:2d:c1:0c: 4b:b0:82:7c:d6:c1:26:bf:a1:b1:fc:22:c8:73:a5: 5b:3c:69:c3:5c:fa:25:e9:22:64:05:d4:e0:c6:7d: 15:ef:5d:51:b5:c6:da:33:73:2f:92:55:9b:85:60: 3c:5a:7e:8b:21:77:2d:82:df:c9:47:d9:18:e0:74: 8e:62:15:51:89:8d:db:91:65:6d:00:3d:93:65:97: f8:3a:a5:97:48:b5:d2:a9:7a:44:db:e4:7c:c8:12: d5:4e:16:64:5d:26:75:58:47:0a:23:8d:8e:e8:cf: af:60:70:5d:34:ba:70:18:55:16:a9:22:b2:c4:32: b0:73:85:77:4c:4c:63:a0:02:6c:06:c6:c9:68:bb: 57:89:f6:83:31:4c:be:59:bb:8b:3c:1b:9a:72:05: 67:46:17:69:bc:4b:60:d6:2c:05:eb:a1:b9:12:2b: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DB:E1:43:60:2A:E5:D5:DA:D8:BD:09:CF:0B:8E:48:8A:F6:EA:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 168.100.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:70:30:01:93:25:cd:6f:d1:9c:b5:8a:4f:60:12:a5:34:9b: 1e:14:0f:19:f4:4e:70:1b:e4:2a:c4:9f:12:87:9e:1d:94:bc: e1:4e:ba:2d:3d:a0:f0:64:70:20:ac:8a:06:69:08:57:d7:38: ce:3a:70:bb:93:5e:fe:20:63:1a:5a:ac:f7:9b:80:0f:b1:4c: 66:12:5d:9d:a6:ec:f1:38:95:c3:f0:a9:12:91:ac:a6:b9:0a: b4:c3:9d:2a:71:51:cb:4f:f8:26:ea:f8:91:9b:e9:23:e8:7e: fa:37:65:4a:57:b0:0e:dc:60:e1:9e:21:70:03:b3:7b:0d:e4: 66:27:0d:39:8a:7a:67:36:b8:ed:44:28:8a:b1:5d:fe:ce:a0: 68:e1:09:f1:7a:69:fc:e1:d7:88:c9:20:dd:2b:84:05:19:57: 43:78:06:56:5e:14:e6:dd:51:4f:98:4b:e1:fd:a0:16:13:67: ac:3c:2a:3e:6a:b7:22:47:b3:b5:d2:5c:d8:1a:fb:77:ff:9c: 82:bd:d5:32:60:26:d0:51:11:61:e8:6d:73:e9:98:bb:bb:61: d6:2a:52:b5:1f:7e:b0:b9:1e:a7:70:e2:5e:5c:c6:6e:cb:d7: 51:6c:e4:1c:ee:15:de:6a:49:2f:6b:61:9f:23:3f:0b:4f:ed: 75:cc:17:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWdhP/dckegnfScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk ZDBjNTk5ODMtZDE3ZC00ZThkLWFjZjUtNjAxNmMzNTJlMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDkyqZ+OyKozHUrAt77UhaZ7XZsV0yB3I5b5 B/EReBYFp8cWkB3+Rdn0konlcrtVM8xECOdONXYzOjjtk6D0DjQwtdVpCaKenuCB wA4bZ1FsTZGRo2ItwQxLsIJ81sEmv6Gx/CLIc6VbPGnDXPol6SJkBdTgxn0V711R tcbaM3MvklWbhWA8Wn6LIXctgt/JR9kY4HSOYhVRiY3bkWVtAD2TZZf4OqWXSLXS qXpE2+R8yBLVThZkXSZ1WEcKI42O6M+vYHBdNLpwGFUWqSKyxDKwc4V3TExjoAJs BsbJaLtXifaDMUy+WbuLPBuacgVnRhdpvEtg1iwF66G5EisoQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXb4UNgKuXV2ti9Cc8LjkiK9uo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTNmODM3MzYtYTJmNC0z ZThiLWE2OTQtZTRlYjcyZDVjNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZwMAGTJc1v0Zy1ik9gEqU0mx4UDxn0TnAb5CrEnxKHnh2UvOFOui09 oPBkcCCsigZpCFfXOM46cLuTXv4gYxparPebgA+xTGYSXZ2m7PE4lcPwqRKRrKa5 CrTDnSpxUctP+Cbq+JGb6SPofvo3ZUpXsA7cYOGeIXADs3sN5GYnDTmKemc2uO1E KIqxXf7OoGjhCfF6afzh14jJIN0rhAUZV0N4BlZeFObdUU+YS+H9oBYTZ6w8Kj5q tyJHs7XSXNga+3f/nIK91TJgJtBREWHobXPpmLu7YdYqUrUffrC5Hqdw4l5cxm7L 11Fs5BzuFd5qSS9rYZ8jPwtP7XXMF2g= -----END CERTIFICATE-----Generated at Tue Jul 21 22:38:29 2026 by rpki-client