$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa File: 4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa (raw, json) Hash identifier: T8k5l0uHiBFqFUcVtKxiGdadpETMBTRfc12maoWCCeI= Subject key identifier: 52:79:71:0D:AE:F0:C8:96:B3:CE:F6:0F:C6:81:84:89:04:EB:88:94 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584E4AEF6C25E85B38D811AEFBC0 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 32806 IP address blocks: 208.114.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:6c:25:e8:5b:38:d8:11:ae:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=a85184d3-008e-421d-99e2-7e3a879c7a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f5:91:c7:b9:38:0f:e3:56:3a:0d:df:a3:12: 0a:2b:b9:06:ed:d2:33:07:12:f8:e2:e9:0e:26:fd: c8:8b:12:ea:a3:55:62:a9:30:2d:9d:0a:a8:a5:f0: 16:4b:69:b0:cd:23:8f:2f:ab:bc:b7:b0:ba:3a:1b: 33:23:c3:75:8d:3b:6c:06:52:fb:74:e3:4f:43:dc: c3:54:89:76:88:40:64:5a:32:5b:5f:32:0c:b6:79: ca:31:57:6a:02:8a:76:7c:76:aa:96:59:61:c6:16: f9:91:8f:24:c5:30:7d:a9:6a:9f:d6:da:b7:68:27: 86:b9:5b:31:58:97:bd:92:9b:59:c7:6a:20:05:25: d4:0e:64:e9:5e:66:9c:02:10:ca:b7:60:63:37:51: 59:5f:63:b7:e8:e0:a1:c7:bb:1f:81:1f:ee:5e:9b: ef:0d:48:8e:2e:67:0a:e5:8a:34:3b:cc:10:30:dd: 9a:b0:f9:61:c0:a7:45:b2:a6:f9:13:dd:fb:f8:0e: 39:73:05:a3:b2:8a:54:6e:42:d4:61:5b:86:ae:12: 7e:75:df:9e:8a:88:f7:29:4f:0e:56:dc:88:14:45: 59:cb:ae:9f:5f:d7:67:5b:e5:2c:a4:ff:e1:d4:8a: c2:1c:d1:40:fe:07:fc:72:8f:6a:26:4a:d7:67:d3: 38:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:71:0D:AE:F0:C8:96:B3:CE:F6:0F:C6:81:84:89:04:EB:88:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 208.114.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4b:e3:65:e7:5b:34:dd:04:3d:8f:08:5b:82:92:2b:5b:91: 20:31:36:b1:ae:57:da:a9:55:fa:ee:79:69:d9:72:73:84:3f: 5d:30:d6:4d:1f:ba:e6:10:ba:df:ee:22:06:be:15:3f:75:9d: 32:6e:20:d1:0b:07:50:aa:27:be:b8:d4:48:24:ff:13:f0:4c: 30:70:a7:a1:e4:de:a4:63:b0:96:83:8a:d5:28:b4:59:1b:2f: ab:b5:cd:e1:96:6a:63:86:e8:bc:97:77:cf:a5:41:29:6d:5f: 08:2b:d1:ee:28:ed:da:a1:f4:af:44:ad:c2:d6:f5:cd:2b:3b: e0:65:d9:e9:8d:03:79:7d:43:3b:a1:8d:da:a6:d5:51:af:4c: 37:99:eb:63:2b:db:49:35:16:80:d4:f6:a9:46:79:e2:a0:0d: c7:af:df:e3:72:ad:16:c0:28:6c:a9:b5:fa:ac:b2:92:e4:5a: d2:9e:19:d9:6f:65:c9:25:b5:f7:67:7a:1e:21:bd:93:6d:6e: 27:03:32:b5:a1:8f:05:79:a7:ce:91:72:95:f3:0a:ad:cc:14: dc:73:55:d5:67:66:ee:ff:2d:61:cd:5c:d6:5e:2d:7d:d9:05: d5:ac:42:e8:99:39:ca:3e:04:61:24:33:f2:79:73:b3:00:d3: 30:9a:67:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72wl6Fs42BGu+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YTg1MTg0ZDMtMDA4ZS00MjFkLTk5ZTItN2UzYTg3OWM3YTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPWRx7k4D+NWOg3foxIKK7kG7dIzBxL44ukO Jv3IixLqo1ViqTAtnQqopfAWS2mwzSOPL6u8t7C6OhszI8N1jTtsBlL7dONPQ9zD VIl2iEBkWjJbXzIMtnnKMVdqAop2fHaqlllhxhb5kY8kxTB9qWqf1tq3aCeGuVsx WJe9kptZx2ogBSXUDmTpXmacAhDKt2BjN1FZX2O36OChx7sfgR/uXpvvDUiOLmcK 5Yo0O8wQMN2asPlhwKdFsqb5E937+A45cwWjsopUbkLUYVuGrhJ+dd+eioj3KU8O VtyIFEVZy66fX9dnW+UspP/h1IrCHNFA/gf8co9qJkrXZ9M4OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ5cQ2u8MiWs872D8aBhIkE64iUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNGY3NzBiMGEtMjAxMS0z NGQ3LWJmNWUtNTRlMWY2Zjk2ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HJ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtL42XnWzTdBD2PCFuCkitbkSAxNrGuV9qpVfrueWnZcnOEP10w1k0f uuYQut/uIga+FT91nTJuINELB1CqJ7641Egk/xPwTDBwp6Hk3qRjsJaDitUotFkb L6u1zeGWamOG6LyXd8+lQSltXwgr0e4o7dqh9K9ErcLW9c0rO+Bl2emNA3l9Qzuh jdqm1VGvTDeZ62Mr20k1FoDU9qlGeeKgDcev3+NyrRbAKGyptfqsspLkWtKeGdlv Zckltfdneh4hvZNtbicDMrWhjwV5p86RcpXzCq3MFNxzVdVnZu7/LWHNXNZeLX3Z BdWsQuiZOco+BGEkM/J5c7MA0zCaZ1o= -----END CERTIFICATE-----Generated at Mon Jun 29 15:45:29 2026 by rpki-client