$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa File: 32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa (raw, json) Hash identifier: 4KDV0C1DHo2YJ0YvbgelFKJeX0KQ74SA5rbYBHzxtAs= Subject key identifier: 3D:DB:76:14:F9:29:41:7C:65:CE:22:22:06:6B:1F:72:30:08:18:5F Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e Certificate serial: 010D0C9F4328584F374D2C7C7405515DFAC68F00 Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 36861 IP address blocks: 208.68.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2c:7c:74:05:51:5d:fa:c6:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=b2515eb8-ad89-4f60-b43a-281a4d91cbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9f:65:a0:bc:20:65:8e:e8:7a:44:56:9f:97: e9:55:b5:2a:7e:20:04:da:c2:ee:42:9b:33:6e:5a: c5:94:b0:80:e0:2c:d0:d6:09:91:16:52:82:ff:e6: 76:b3:8a:48:e8:36:eb:6d:7e:01:6c:e6:bf:88:6e: d8:e0:5d:60:73:77:4a:da:0c:f4:dc:8b:cd:f4:dc: 10:d0:3c:e7:ec:94:0d:24:d8:c6:a7:82:54:23:a1: bf:ed:e7:76:6a:4a:ae:99:58:cb:da:6b:32:a0:2b: 4a:51:12:b3:d3:bd:19:8e:29:79:b4:6e:88:a3:e7: 2a:3e:d8:5d:84:d4:19:75:aa:3f:e0:c1:25:8a:f0: fb:4f:23:4e:a3:a5:f1:ae:99:f8:74:67:8f:e0:9e: 2c:c9:79:5b:b1:9d:40:55:fd:17:d0:3d:4c:0b:fa: ef:3e:51:ad:90:8b:b7:57:74:3c:0c:23:ad:c8:2b: de:ae:fc:d7:78:c6:de:c3:fd:de:77:58:59:94:d3: a3:98:59:1f:90:dc:58:53:c7:de:6a:47:ab:a7:ad: ee:fe:64:2c:68:aa:3d:d1:d6:c2:e5:74:67:a4:45: c8:03:60:0d:ac:bd:92:da:c8:ff:dd:ac:79:a0:fe: 4f:78:7c:99:82:3b:25:e4:76:01:dd:f1:30:81:f4: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DB:76:14:F9:29:41:7C:65:CE:22:22:06:6B:1F:72:30:08:18:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl X509v3 Authority Key Identifier: keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer sbgp-ipAddrBlock: critical IPv4: 208.68.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3d:10:4e:d6:ed:a8:43:93:d2:ae:4d:b5:66:58:fe:a9:d4: 5c:d6:f3:b9:ef:35:e1:20:53:5b:ea:43:58:b4:ad:89:51:7c: f7:f6:e2:21:8d:73:23:80:3d:bb:47:ef:3a:8e:a9:47:5d:93: a9:ed:2f:86:95:fe:6a:e4:26:d9:fe:b9:ae:3d:9c:c1:f8:5a: 6c:a8:c4:c0:89:c4:32:ed:ed:8c:d1:23:d4:81:5b:09:0b:f0: 37:00:5f:0b:2e:ac:f8:c7:07:0f:5f:d1:bf:41:37:0e:c4:64: 8b:32:34:49:d6:9e:44:2b:b3:1f:74:9f:52:fa:e1:8e:25:74: bf:0f:e9:62:93:26:a5:18:9c:cd:62:63:e0:19:1c:ce:29:b3: da:f3:ee:02:db:e4:d2:94:cb:34:8c:f2:8c:5a:64:a7:cf:c9: e3:a9:c0:01:ce:ac:2e:ec:88:48:d4:9d:2c:77:44:d4:ab:c8: d7:45:a5:e6:eb:1b:5c:7c:8b:01:4b:ca:6f:23:20:4a:cf:a3: 13:9c:d5:f6:8a:6b:b5:91:eb:6a:18:c1:6d:df:8d:d7:58:12: 58:b5:a8:0c:53:28:43:36:de:4d:3d:29:a4:c3:63:6a:82:7b: f3:e6:75:42:d1:c5:41:50:34:94:1f:70:56:cc:24:fd:9c:d1: 4f:d4:d7:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSx8dAVRXfrGjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxNzEwZGEtNGMyOC00OTIzLTkyMWItZTFkNzEwY2Vj MjllMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YjI1MTVlYjgtYWQ4OS00ZjYwLWI0M2EtMjgxYTRkOTFjYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp9loLwgZY7oekRWn5fpVbUqfiAE2sLuQpsz blrFlLCA4CzQ1gmRFlKC/+Z2s4pI6DbrbX4BbOa/iG7Y4F1gc3dK2gz03IvN9NwQ 0Dzn7JQNJNjGp4JUI6G/7ed2akqumVjL2msyoCtKURKz070Zjil5tG6Io+cqPthd hNQZdao/4MElivD7TyNOo6Xxrpn4dGeP4J4syXlbsZ1AVf0X0D1MC/rvPlGtkIu3 V3Q8DCOtyCvervzXeMbew/3ed1hZlNOjmFkfkNxYU8feakerp63u/mQsaKo90dbC 5XRnpEXIA2ANrL2S2sj/3ax5oP5PeHyZgjsl5HYB3fEwgfQjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3bdhT5KUF8Zc4iIgZrH3IwCBhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNzE3 MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3MTBjZWMyOWUvMzI5ODI5MDEtYmExZS0z NWExLWI2ODMtMmNjYmQwZDRhYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzcxNzEwZGEtNGMyOC00OTIzLTky MWItZTFkNzEwY2VjMjllLzM3MTcxMGRhLTRjMjgtNDkyMy05MjFiLWUxZDcxMGNl YzI5ZS5jcmwwHwYDVR0jBBgwFoAUXW/a/Le23lFw8Ej2m6zdI6ddeV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNzE3MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3 MTBjZWMyOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU9EE7W7ahDk9KuTbVmWP6p1FzW87nvNeEgU1vqQ1i0rYlRfPf24iGN cyOAPbtH7zqOqUddk6ntL4aV/mrkJtn+ua49nMH4WmyoxMCJxDLt7YzRI9SBWwkL 8DcAXwsurPjHBw9f0b9BNw7EZIsyNEnWnkQrsx90n1L64Y4ldL8P6WKTJqUYnM1i Y+AZHM4ps9rz7gLb5NKUyzSM8oxaZKfPyeOpwAHOrC7siEjUnSx3RNSryNdFpebr G1x8iwFLym8jIErPoxOc1faKa7WR62oYwW3fjddYEli1qAxTKEM23k09KaTDY2qC e/PmdULRxUFQNJQfcFbMJP2c0U/U1+Q= -----END CERTIFICATE-----Generated at Sat Sep 26 02:52:42 2026 by rpki-client