$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4d996a08-7a98-3669-b141-9b37c37656da.roa File: 4d996a08-7a98-3669-b141-9b37c37656da.roa (raw, json) Hash identifier: 49ZLI5cthcf1V+QmsEu6BfGEb1IHzJ7XEcfkIAicS+4= Subject key identifier: A1:71:A7:29:39:C8:31:4B:C5:B5:DA:11:84:A6:6C:82:34:E6:35:66 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF68309FCDB4490378970A80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4d996a08-7a98-3669-b141-9b37c37656da.roa Signing time: Thu 06 Aug 2026 14:17:50 +0000 ROA not before: Thu 06 Aug 2026 14:17:50 +0000 ROA not after: Wed 04 Nov 2026 15:17:50 +0000 asID: 396190 IP address blocks: 173.208.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:68:30:9f:cd:b4:49:03:78:97:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:17:50 2026 GMT Not After : Nov 4 15:17:50 2026 GMT Subject: CN=0718d546-9656-42ba-a23d-b786a7a2a4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:55:cf:ec:ee:fe:8a:7c:fd:d0:48:54:2c: 91:9e:5f:9a:3f:9c:8b:e8:66:e7:fa:95:48:db:6e: db:77:22:16:d5:b1:19:70:fe:ba:47:f4:4d:f1:79: 45:5c:83:ac:08:73:21:b4:44:1d:c4:ef:7b:a0:b2: d3:93:72:ad:bb:2d:b3:83:d4:15:9e:92:52:33:ea: f2:d0:7f:38:14:d7:1d:b0:c2:9d:08:fa:1a:63:90: 4f:cf:3f:04:d8:3a:14:81:8b:4d:e6:7d:b5:c5:9f: e3:79:0b:cc:80:48:1d:e7:e6:2d:a6:05:d1:88:04: 51:b2:1e:6b:f1:d9:66:63:00:1d:6d:f2:1a:c8:9f: 3d:61:6c:7d:c8:3e:4b:ae:e3:67:7e:91:22:02:a4: ea:84:2e:17:27:d3:ee:27:30:c7:4d:ee:d5:cb:21: 62:d5:b6:14:5c:63:72:6c:55:1e:5d:41:52:70:91: 02:15:60:7b:82:7b:f7:8c:da:21:24:8a:e4:92:1e: d8:28:66:a8:19:65:02:0b:d7:ac:f0:7f:9e:13:06: ee:14:a5:f8:88:c3:9a:78:ef:e7:6c:1f:df:56:80: 00:5f:0d:15:b0:61:df:6d:1b:ad:22:ab:6e:d1:ca: f7:f5:b0:8a:69:59:0f:5d:30:a5:f0:09:5d:6f:63: b5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:71:A7:29:39:C8:31:4B:C5:B5:DA:11:84:A6:6C:82:34:E6:35:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4d996a08-7a98-3669-b141-9b37c37656da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.208.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5e:6b:4f:c4:b0:50:31:00:34:d4:e4:b1:ab:e1:dc:be:d7: b6:d1:a7:f4:66:84:a4:5d:d9:29:17:71:64:b9:3d:1d:52:e4: 5f:3f:a4:60:46:25:c7:25:52:6d:9b:3e:3b:e2:62:85:dc:04: 52:13:ad:17:ee:ae:4e:24:80:7e:40:2d:e5:80:b9:fd:de:15: 28:36:bb:8f:9b:26:56:0a:12:1c:e4:57:4e:92:1f:84:4d:37: 9a:f1:64:74:6b:37:8c:26:41:7b:13:26:80:7f:09:fe:12:9a: bb:69:bd:98:d6:7e:05:bb:b8:33:75:5c:26:ba:ee:19:7b:b1: 9e:e2:10:31:c6:40:0e:a5:75:8e:a1:63:63:0e:97:ec:2b:4a: 34:3c:88:0e:7d:af:58:01:14:a5:31:0f:f5:31:e7:b4:71:d1: d0:9f:a7:cb:56:93:78:20:81:eb:8f:a6:bc:06:3c:69:c0:65: 76:2e:c0:b8:9e:d9:f8:29:0c:fc:b0:c4:e8:88:81:5e:83:af: 3b:50:eb:30:06:ae:36:aa:14:17:21:de:11:4c:72:bd:56:6d: c3:e4:36:59:9e:a1:0c:02:e7:ef:0b:c5:ba:fd:d1:2a:14:64: 56:53:52:48:58:79:87:7e:cb:82:21:93:1c:26:4f:bb:a9:24: 9d:f4:db:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/aDCfzbRJA3iXCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0MTc1MFoXDTI2MTEwNDE1MTc1MFowLzEtMCsGA1UEAxMk MDcxOGQ1NDYtOTY1Ni00MmJhLWEyM2QtYjc4NmE3YTJhNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst9Vz+zu/op8/dBIVCyRnl+aP5yL6Gbn+pVI 227bdyIW1bEZcP66R/RN8XlFXIOsCHMhtEQdxO97oLLTk3Ktuy2zg9QVnpJSM+ry 0H84FNcdsMKdCPoaY5BPzz8E2DoUgYtN5n21xZ/jeQvMgEgd5+YtpgXRiARRsh5r 8dlmYwAdbfIayJ89YWx9yD5LruNnfpEiAqTqhC4XJ9PuJzDHTe7VyyFi1bYUXGNy bFUeXUFScJECFWB7gnv3jNohJIrkkh7YKGaoGWUCC9es8H+eEwbuFKX4iMOaeO/n bB/fVoAAXw0VsGHfbRutIqtu0cr39bCKaVkPXTCl8Aldb2O1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFxpyk5yDFLxbXaEYSmbII05jVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNGQ5OTZhMDgtN2E5OC0z NjY5LWIxNDEtOWIzN2MzNzY1NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrdAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApea0/EsFAxADTU5LGr4dy+17bRp/RmhKRd2SkXcWS5PR1S5F8/pGBG JcclUm2bPjviYoXcBFITrRfurk4kgH5ALeWAuf3eFSg2u4+bJlYKEhzkV06SH4RN N5rxZHRrN4wmQXsTJoB/Cf4SmrtpvZjWfgW7uDN1XCa67hl7sZ7iEDHGQA6ldY6h Y2MOl+wrSjQ8iA59r1gBFKUxD/Ux57Rx0dCfp8tWk3gggeuPprwGPGnAZXYuwLie 2fgpDPywxOiIgV6DrztQ6zAGrjaqFBch3hFMcr1WbcPkNlmeoQwC5+8Lxbr90SoU ZFZTUkhYeYd+y4IhkxwmT7upJJ302yg= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:19 2026 by rpki-client