$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa File: 32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa (raw, json) Hash identifier: WMstAt8Oj+yCUp16PbcLcAt4NvtdkRvoSivxpDmgSeI= Subject key identifier: 5E:65:DB:80:74:51:EB:5D:38:93:9C:65:8E:13:0A:8F:9A:F5:79:1D Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e Certificate serial: 010D0C9F4328584CD4076DBE4E483456046CA580 Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 36861 IP address blocks: 208.68.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:6d:be:4e:48:34:56:04:6c:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=b14dc244-b4ea-4b43-a962-15510552ff58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:75:ec:de:19:a0:a5:07:d8:c7:e0:1b:89:69: 58:6f:a8:f1:90:8d:11:83:9b:2e:21:de:ce:b3:d5: 35:42:cf:56:f2:0c:85:ce:a0:ac:bc:5b:f9:11:95: 7f:a1:a6:d5:9a:cc:ee:68:41:be:35:4f:a7:56:dd: 16:b0:39:3f:26:1d:6d:8f:fb:60:74:73:9a:7f:b6: cf:e7:3c:7f:b1:37:75:5e:85:03:6d:85:bb:97:f6: 4e:b1:47:0c:40:40:b0:63:d3:c7:af:1a:b2:66:20: 60:3a:13:84:fb:f7:e2:34:a1:5b:26:8d:f4:52:d3: f6:ec:bb:de:f6:28:fb:fb:69:f7:0e:cd:7c:58:db: 7d:26:89:f2:f2:f7:30:e2:8e:6a:6f:d5:c8:f1:88: a7:14:86:9d:7a:0e:f4:b7:36:15:1b:b5:0d:48:c5: 91:d4:4d:86:4a:c7:fc:0c:f2:3e:5b:65:ca:bd:29: 36:ab:ad:3b:a1:b3:56:c7:ab:8f:ef:02:14:5d:1e: e1:5a:df:aa:be:ae:84:07:6b:c3:73:d4:6a:c3:6a: 3d:d3:bb:5e:49:8e:b8:8d:e2:46:0e:d1:c1:4b:4b: 38:68:d8:64:e1:ac:82:6c:41:80:bc:7e:34:37:76: a8:99:9e:dc:88:0c:1b:a5:4d:62:26:57:8f:91:2d: 63:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:65:DB:80:74:51:EB:5D:38:93:9C:65:8E:13:0A:8F:9A:F5:79:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl X509v3 Authority Key Identifier: keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer sbgp-ipAddrBlock: critical IPv4: 208.68.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ad:43:47:ab:7b:d8:8c:7a:44:d2:53:93:85:87:64:fb:30: 63:62:15:f1:b8:47:a0:c0:a5:66:e1:4f:60:94:60:24:13:32: 61:c9:0b:89:c3:97:01:ae:5d:b5:36:9f:1d:ff:49:a6:6f:6f: 64:6a:ad:69:8e:d9:e2:2f:11:7b:f3:09:e2:3c:3f:d9:6f:34: 9c:21:49:55:a5:1e:62:c4:9b:f1:67:e1:32:83:ba:43:92:ad: bf:5a:12:a1:0b:4d:87:6e:28:1d:56:ac:75:f0:8d:15:6f:e2: d4:f6:af:66:f6:2f:c7:c6:20:cf:7e:f6:80:d5:45:fb:93:e0: d6:67:9c:41:37:ec:3b:c4:2f:e8:0d:52:a2:c1:0d:d2:38:8b: 14:50:36:9d:52:35:71:fc:ce:36:bd:26:95:ba:97:75:ce:84: 7e:5e:cf:55:99:d7:79:22:e5:5c:11:7a:c0:d2:30:a4:f6:76: 21:e3:d7:e1:a4:2d:01:bb:a3:00:02:aa:75:da:d8:0a:d8:37: e0:43:ec:85:78:0a:6f:d3:d9:07:be:0c:7b:23:f7:8c:fc:6b: 57:ce:77:f4:d4:49:07:a9:ea:3e:33:0f:ea:5c:cc:a6:06:2d: 61:c3:78:22:30:b4:66:48:96:cf:94:3d:97:bb:e4:10:60:97: 8b:c2:a5:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB22+Tkg0VgRspYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxNzEwZGEtNGMyOC00OTIzLTkyMWItZTFkNzEwY2Vj MjllMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk YjE0ZGMyNDQtYjRlYS00YjQzLWE5NjItMTU1MTA1NTJmZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Xs3hmgpQfYx+AbiWlYb6jxkI0Rg5suId7O s9U1Qs9W8gyFzqCsvFv5EZV/oabVmszuaEG+NU+nVt0WsDk/Jh1tj/tgdHOaf7bP 5zx/sTd1XoUDbYW7l/ZOsUcMQECwY9PHrxqyZiBgOhOE+/fiNKFbJo30UtP27Lve 9ij7+2n3Ds18WNt9Jony8vcw4o5qb9XI8YinFIadeg70tzYVG7UNSMWR1E2GSsf8 DPI+W2XKvSk2q607obNWx6uP7wIUXR7hWt+qvq6EB2vDc9Rqw2o907teSY64jeJG DtHBS0s4aNhk4ayCbEGAvH40N3aomZ7ciAwbpU1iJlePkS1jRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5l24B0UetdOJOcZY4TCo+a9XkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNzE3 MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3MTBjZWMyOWUvMzI5ODI5MDEtYmExZS0z NWExLWI2ODMtMmNjYmQwZDRhYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzcxNzEwZGEtNGMyOC00OTIzLTky MWItZTFkNzEwY2VjMjllLzM3MTcxMGRhLTRjMjgtNDkyMy05MjFiLWUxZDcxMGNl YzI5ZS5jcmwwHwYDVR0jBBgwFoAUXW/a/Le23lFw8Ej2m6zdI6ddeV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNzE3MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3 MTBjZWMyOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqtQ0ere9iMekTSU5OFh2T7MGNiFfG4R6DApWbhT2CUYCQTMmHJC4nD lwGuXbU2nx3/SaZvb2RqrWmO2eIvEXvzCeI8P9lvNJwhSVWlHmLEm/Fn4TKDukOS rb9aEqELTYduKB1WrHXwjRVv4tT2r2b2L8fGIM9+9oDVRfuT4NZnnEE37DvEL+gN UqLBDdI4ixRQNp1SNXH8zja9JpW6l3XOhH5ez1WZ13ki5VwResDSMKT2diHj1+Gk LQG7owACqnXa2ArYN+BD7IV4Cm/T2Qe+DHsj94z8a1fOd/TUSQep6j4zD+pczKYG LWHDeCIwtGZIls+UPZe75BBgl4vCpSU= -----END CERTIFICATE-----Generated at Mon Mar 2 12:40:46 2026 by rpki-client