$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa File: 3e3631a7-6a34-3455-850a-0ec197b42195.roa (raw, json) Hash identifier: 8O1PL8zgHXq0LWVoJYbHA9b/hlz0DeHach5bPbfDuIA= Subject key identifier: 2E:CA:F5:E3:7E:42:F7:61:32:82:F7:B2:46:2D:3D:6C:9D:F1:29:4E Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F4328584EA79271767431FC62A40E5A40 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 800 IP address blocks: 207.32.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:71:76:74:31:fc:62:a4:0e:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fdf16c95-443a-4ca5-946a-35f73be25e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:b6:97:ed:91:02:27:d0:3c:f5:ef:a0:92: e1:31:a1:83:35:a5:b9:e6:f7:a8:d8:14:2a:b5:e2: 51:9d:da:56:c1:61:a7:03:53:1f:94:ad:de:97:94: e5:66:48:f2:83:2b:8b:58:c8:5f:94:b8:fa:e9:ba: fa:04:16:59:ec:f1:5e:4e:ed:4a:66:a1:09:16:92: cc:82:d7:52:c5:81:eb:ed:25:8c:04:4f:e9:d2:85: 71:24:f1:aa:5b:7f:8f:c1:a2:1a:45:31:f8:13:cb: 52:2c:23:5a:3f:82:3f:cc:16:9d:31:18:9b:1e:3f: af:f3:fa:90:6b:e1:d7:81:f8:88:18:be:8c:ed:76: e8:7b:21:0c:b6:9a:9a:e5:36:9b:1d:43:8a:e6:45: af:82:11:66:55:db:e6:5a:45:17:95:c0:34:a4:38: 68:b0:07:4f:e3:ee:20:5d:2a:f5:6f:4c:e7:38:a7: 00:db:5f:24:2d:80:a2:a4:7f:86:ac:2c:f0:06:e5: 08:b0:d0:82:e6:69:fc:7c:ea:2e:2b:45:a4:18:7a: 89:aa:e9:00:e5:06:9a:d4:44:58:97:ee:f2:dc:e8: fb:ca:71:bf:9e:66:de:22:09:53:be:de:47:45:6f: bb:88:3a:a9:73:93:61:1d:13:2f:24:fb:19:ef:4a: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CA:F5:E3:7E:42:F7:61:32:82:F7:B2:46:2D:3D:6C:9D:F1:29:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 207.32.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:23:f2:2b:a9:04:32:4b:4c:75:96:54:02:f8:e4:d9:55:6f: 3e:35:e1:c9:8a:34:15:2e:33:45:ac:cf:d3:ef:86:fb:4f:0f: 11:2e:de:3b:05:93:de:ce:3c:42:71:c6:30:97:6d:66:8b:d4: b9:28:54:d2:70:78:34:4b:26:1e:73:cc:fa:07:66:4d:4b:f9: b0:4b:38:77:c6:22:1e:42:76:b4:92:a9:c5:dc:4f:03:82:69: d5:93:e4:52:f9:1a:67:86:a3:e9:da:b4:b2:80:d6:36:cc:44: 6e:c7:e6:90:2a:ef:ad:b5:a1:62:86:d9:92:e9:46:ef:ff:04: 8e:8f:39:75:fe:e1:b0:50:09:34:5c:33:5f:8d:45:4b:e8:34: ee:3d:93:32:a9:57:e5:41:56:ef:ae:d1:d6:5c:c2:e6:94:00: a3:92:f4:c1:9c:52:ae:fb:7a:b7:5d:53:96:46:7d:ac:5a:c6: 00:07:6e:2f:1e:6f:58:41:d0:6b:b2:f4:6c:e7:50:ce:a4:25: 4e:e1:08:1f:10:8c:dd:4c:51:ec:67:74:bf:79:4e:a7:14:7d: 63:6a:ef:7a:b0:5e:90:df:c7:6d:d7:26:aa:9b:4d:f5:57:9c: ed:73:da:9e:cb:81:b9:e4:47:94:03:0d:b4:c9:12:ee:88:51: 85:92:16:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nknF2dDH8YqQOWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmRmMTZjOTUtNDQzYS00Y2E1LTk0NmEtMzVmNzNiZTI1ZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxK2l+2RAifQPPXvoJLhMaGDNaW55veo2BQq teJRndpWwWGnA1MflK3el5TlZkjygyuLWMhflLj66br6BBZZ7PFeTu1KZqEJFpLM gtdSxYHr7SWMBE/p0oVxJPGqW3+PwaIaRTH4E8tSLCNaP4I/zBadMRibHj+v8/qQ a+HXgfiIGL6M7XboeyEMtpqa5TabHUOK5kWvghFmVdvmWkUXlcA0pDhosAdP4+4g XSr1b0znOKcA218kLYCipH+GrCzwBuUIsNCC5mn8fOouK0WkGHqJqukA5Qaa1ERY l+7y3Oj7ynG/nmbeIglTvt5HRW+7iDqpc5NhHRMvJPsZ70qmAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7K9eN+QvdhMoL3skYtPWyd8SlOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvM2UzNjMxYTctNmEzNC0z NDU1LTg1MGEtMGVjMTk3YjQyMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMj8iupBDJLTHWWVAL45NlVbz414cmKNBUuM0Wsz9PvhvtPDxEu3jsF k97OPEJxxjCXbWaL1LkoVNJweDRLJh5zzPoHZk1L+bBLOHfGIh5CdrSSqcXcTwOC adWT5FL5GmeGo+natLKA1jbMRG7H5pAq7621oWKG2ZLpRu//BI6POXX+4bBQCTRc M1+NRUvoNO49kzKpV+VBVu+u0dZcwuaUAKOS9MGcUq77erddU5ZGfaxaxgAHbi8e b1hB0Guy9GznUM6kJU7hCB8QjN1MUexndL95TqcUfWNq73qwXpDfx23XJqqbTfVX nO1z2p7LgbnkR5QDDbTJEu6IUYWSFqs= -----END CERTIFICATE-----Generated at Wed Jul 29 03:43:20 2026 by rpki-client