$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa File: e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa (raw, json) Hash identifier: /Y+THPsgn17vvgGNJ/FdADp4A6TlYa0juXSEMVj4wKU= Subject key identifier: 4F:DE:C0:AB:05:2D:ED:01:71:38:51:9C:DC:4B:53:20:83:A1:0C:CA Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584EA2DFC5135A9058C6876251E0 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 398471 IP address blocks: 204.108.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:c5:13:5a:90:58:c6:87:62:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=0e5430d9-1c66-4c31-9c36-51447579d14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a1:97:ac:80:94:cc:75:e2:16:a8:19:2b:1d: 26:00:d4:d8:6a:bc:64:4f:7e:13:36:45:63:84:8a: 2f:23:a2:9c:e9:d9:20:08:5f:c4:0f:27:5e:d1:25: 84:54:1b:6a:70:a2:be:e9:5f:30:ed:b1:c4:5a:b3: 22:0c:d3:1e:75:92:58:1f:57:f9:34:fe:f2:80:4f: 89:b0:46:b3:7f:e2:97:39:9d:0e:30:c7:ad:dc:85: 28:40:e8:97:b1:65:dc:c4:fc:02:b2:1e:ac:7b:81: 46:e2:32:38:6d:9b:e8:98:03:99:4c:43:d3:8b:6a: 5e:a8:f0:73:ef:58:24:b5:42:8d:5e:3c:89:e3:57: af:1a:27:ed:e6:33:47:7f:4c:33:15:09:cf:7a:d7: 6f:34:ba:f6:54:bf:d2:2b:f4:17:c4:87:5c:a0:28: 59:6b:ea:04:54:d7:78:ee:22:1a:35:8e:a4:f0:16: cb:18:35:c0:f8:be:65:10:0b:a3:a4:55:b3:94:42: 6c:b1:a4:bb:c3:ad:28:b9:ae:46:ab:7a:87:47:f1: 18:30:72:2d:1e:95:b6:60:e0:ce:21:15:80:91:41: 72:9f:fd:64:93:93:a0:3f:99:16:e2:da:a5:d9:7d: b1:3b:50:f1:ea:3b:b1:b4:a6:ba:0a:ae:2f:b9:fd: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DE:C0:AB:05:2D:ED:01:71:38:51:9C:DC:4B:53:20:83:A1:0C:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 204.108.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:86:3c:9e:3b:3c:58:44:6b:22:92:92:e2:0c:12:62:2f:1c: 97:1f:f5:76:3d:df:9a:15:e5:4d:67:6e:26:4b:e7:5b:8d:4f: 2d:41:8f:af:1b:62:33:52:53:4d:b1:83:85:92:42:09:1e:91: 82:eb:72:93:e1:f5:6d:ba:ce:7c:23:eb:35:d9:12:9a:65:fd: 71:71:60:97:98:ae:ea:b6:f9:42:f6:0e:92:f3:dc:09:c0:0d: f3:4e:76:24:f9:26:fa:c5:16:8e:a5:23:2e:aa:56:27:a1:63: fa:06:57:90:30:14:2f:e6:54:84:55:6c:60:52:7f:61:e4:24: 22:59:ef:2d:94:fd:0b:e4:a5:89:63:88:45:5b:50:e5:a6:d5: bd:97:ab:73:0d:a0:92:dc:bb:54:b0:d3:fe:ab:e4:c5:a6:da: e5:77:d3:96:d2:47:57:b7:d4:7f:28:27:d4:28:25:6b:18:d1: 19:75:a9:58:35:2e:d0:4f:be:6a:83:3b:32:05:0d:ad:a2:f2: b5:ce:de:1d:fc:e6:20:ab:d8:a0:ea:cd:29:8e:0b:6e:87:b4: f3:c3:2b:7c:58:de:cc:d0:78:e3:30:72:55:dd:68:ad:ce:b0: 58:1c:aa:7a:97:8d:24:48:db:fa:78:ef:27:69:c1:0e:f2:7d: b6:2a:a0:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i38UTWpBYxodiUeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk MGU1NDMwZDktMWM2Ni00YzMxLTljMzYtNTE0NDc1NzlkMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6GXrICUzHXiFqgZKx0mANTYarxkT34TNkVj hIovI6Kc6dkgCF/EDyde0SWEVBtqcKK+6V8w7bHEWrMiDNMedZJYH1f5NP7ygE+J sEazf+KXOZ0OMMet3IUoQOiXsWXcxPwCsh6se4FG4jI4bZvomAOZTEPTi2peqPBz 71gktUKNXjyJ41evGift5jNHf0wzFQnPetdvNLr2VL/SK/QXxIdcoChZa+oEVNd4 7iIaNY6k8BbLGDXA+L5lEAujpFWzlEJssaS7w60oua5Gq3qHR/EYMHItHpW2YODO IRWAkUFyn/1kk5OgP5kW4tql2X2xO1Dx6juxtKa6Cq4vuf14ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/ewKsFLe0BcThRnNxLUyCDoQzKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZTdiYjA2MWYtNmQzZi0z YmRlLWJlZTQtNDRjMGZlZTRhMjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuGPJ47PFhEayKSkuIMEmIvHJcf9XY935oV5U1nbiZL51uNTy1Bj68b YjNSU02xg4WSQgkekYLrcpPh9W26znwj6zXZEppl/XFxYJeYruq2+UL2DpLz3AnA DfNOdiT5JvrFFo6lIy6qViehY/oGV5AwFC/mVIRVbGBSf2HkJCJZ7y2U/QvkpYlj iEVbUOWm1b2Xq3MNoJLcu1Sw0/6r5MWm2uV305bSR1e31H8oJ9QoJWsY0Rl1qVg1 LtBPvmqDOzIFDa2i8rXO3h385iCr2KDqzSmOC26HtPPDK3xY3szQeOMwclXdaK3O sFgcqnqXjSRI2/p47ydpwQ7yfbYqoHQ= -----END CERTIFICATE-----Generated at Wed Jul 29 12:51:17 2026 by rpki-client