$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32ca3b8d-eec0-3af6-904b-d8d6894eacee.roa File: 32ca3b8d-eec0-3af6-904b-d8d6894eacee.roa (raw, json) Hash identifier: cxkrgkSXryqvgGollmk7ClX9BoHwtBuk63imhzXL9WY= Subject key identifier: F3:15:F1:6D:47:27:0B:1D:A2:46:38:DF:03:7D:8C:F7:1D:4A:C2:FB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA78EFDC0CFD32C12A74FC294 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32ca3b8d-eec0-3af6-904b-d8d6894eacee.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 31898 IP address blocks: 140.238.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8e:fd:c0:cf:d3:2c:12:a7:4f:c2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=073f233b-1d70-43a1-a24a-31f899a2cbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:6f:05:02:6f:ce:0e:af:61:61:9c:17:f5: 8e:c8:65:68:bb:59:77:dd:dd:3c:15:b3:6c:b4:5f: 90:e3:68:60:86:96:14:39:3e:7b:81:89:b7:0e:8f: 7f:77:56:67:92:5f:58:84:a1:e7:de:9f:fa:06:cc: 44:98:32:a5:65:f3:fc:3b:48:6d:4c:51:31:ed:20: f3:f6:6c:b6:85:3b:57:cb:3b:7f:de:ec:fb:de:88: 08:1c:64:67:6b:04:22:2f:f6:b5:99:d3:74:95:f5: 42:09:da:3c:b3:19:cf:79:0b:b5:e1:29:04:6b:00: 9b:89:2b:66:0a:53:44:20:33:8d:fd:2b:31:60:e5: 9d:b1:18:35:32:15:16:ed:ca:dc:18:f4:3e:93:ff: f6:5a:52:77:cc:03:1a:4c:22:dc:2f:21:2e:89:55: 93:63:f0:12:a0:94:aa:01:b9:9c:7a:6a:bf:49:fc: 77:f0:34:bc:98:19:7e:da:94:69:92:b7:78:bf:ce: fe:a5:07:cd:40:f5:70:3d:6c:a9:35:68:db:e2:9d: 04:fa:2a:2f:c7:f2:1a:7e:fb:36:40:42:23:9c:ba: 3a:59:f8:9c:56:65:99:8d:da:8a:00:d1:f0:38:46: e1:e9:3e:7b:57:c7:09:cc:80:82:44:d5:75:4b:16: de:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:15:F1:6D:47:27:0B:1D:A2:46:38:DF:03:7D:8C:F7:1D:4A:C2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32ca3b8d-eec0-3af6-904b-d8d6894eacee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e7:7e:61:5f:4c:5d:fe:0a:1c:0c:a2:22:2a:97:aa:04:cd: 9c:dc:f1:c0:3a:b8:11:48:3e:72:b3:98:e9:84:5c:46:9d:bf: 98:3e:cc:9d:0e:42:9c:99:fd:3b:63:da:47:92:e1:57:75:fd: 35:b3:55:33:f1:24:22:a5:88:4b:ab:49:48:b0:d0:2a:9b:a0: 6a:f2:f2:f5:e6:ec:62:8d:ed:a8:9d:9c:7b:a8:d8:29:fa:60: ae:20:53:ab:bc:49:df:4b:e2:35:7a:33:65:b3:66:58:36:f8: e8:d5:0f:f1:4f:c3:52:21:21:f3:8a:2f:d4:5c:68:c4:8a:8c: 12:a9:2b:c4:f8:cf:d4:05:a2:de:91:04:e1:61:58:4a:26:cd: c0:6b:72:5f:e6:20:c6:b5:7c:6d:62:a0:d1:87:29:cc:6d:5a: 8a:d4:c8:99:94:8a:06:da:17:84:93:63:11:98:83:c0:7d:dc: e9:6d:7e:d8:19:28:04:05:b1:04:7c:13:29:fb:a6:d1:1b:f3: 7a:47:64:4e:f1:9d:b9:47:aa:51:1b:7a:fe:b6:ef:33:82:1f: 55:23:64:77:cd:a7:85:02:85:75:ad:a6:93:b1:e1:63:34:bc: d0:9b:e9:87:d7:08:03:68:f7:0a:ed:46:92:44:ed:54:15:ff: 9f:31:f2:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njv3Az9MsEqdPwpQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDczZjIzM2ItMWQ3MC00M2ExLWEyNGEtMzFmODk5YTJjYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+xvBQJvzg6vYWGcF/WOyGVou1l33d08FbNs tF+Q42hghpYUOT57gYm3Do9/d1Znkl9YhKHn3p/6BsxEmDKlZfP8O0htTFEx7SDz 9my2hTtXyzt/3uz73ogIHGRnawQiL/a1mdN0lfVCCdo8sxnPeQu14SkEawCbiStm ClNEIDON/SsxYOWdsRg1MhUW7crcGPQ+k//2WlJ3zAMaTCLcLyEuiVWTY/ASoJSq Abmcemq/Sfx38DS8mBl+2pRpkrd4v87+pQfNQPVwPWypNWjb4p0E+iovx/Iafvs2 QEIjnLo6WficVmWZjdqKANHwOEbh6T57V8cJzICCRNV1SxbeFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMV8W1HJwsdokY43wN9jPcdSsL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzJjYTNiOGQtZWVjMC0z YWY2LTkwNGItZDhkNjg5NGVhY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjO7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvnfmFfTF3+ChwMoiIql6oEzZzc8cA6uBFIPnKzmOmEXEadv5g+zJ0O QpyZ/Ttj2keS4Vd1/TWzVTPxJCKliEurSUiw0CqboGry8vXm7GKN7aidnHuo2Cn6 YK4gU6u8Sd9L4jV6M2WzZlg2+OjVD/FPw1IhIfOKL9RcaMSKjBKpK8T4z9QFot6R BOFhWEomzcBrcl/mIMa1fG1ioNGHKcxtWorUyJmUigbaF4STYxGYg8B93OltftgZ KAQFsQR8Eyn7ptEb83pHZE7xnblHqlEbev627zOCH1UjZHfNp4UChXWtppOx4WM0 vNCb6YfXCANo9wrtRpJE7VQV/58x8lY= -----END CERTIFICATE-----Generated at Thu Aug 27 07:55:50 2026 by rpki-client