$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa File: 4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa (raw, json) Hash identifier: Jz7qSuGfGCodA1JD2z+hvc04vF6ny7FyG4hcIg6MDKs= Subject key identifier: 91:D9:66:9A:E6:81:C3:EB:EE:6D:DB:A7:55:6B:70:27:03:19:8F:0D Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584D6AAAA9DA4289A4D0D3584180 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 32806 IP address blocks: 208.114.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:a9:da:42:89:a4:d0:d3:58:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=7ede86cd-f070-4014-a9cf-f8219b399808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:14:61:e0:d4:f0:78:85:e9:1f:f9:8a:26: 13:da:7e:de:0a:f0:08:97:dd:08:b7:3f:e4:32:97: cc:b3:f3:d6:ef:0b:18:8f:de:58:64:3f:57:8f:0e: 14:ee:04:0b:05:61:bf:64:ba:8d:57:d1:06:02:28: 2d:bb:92:99:3b:3a:d4:10:c7:2e:01:90:38:fa:44: 84:bb:34:14:ba:81:a3:e0:cc:53:d7:5e:60:27:22: 68:e0:d6:61:f8:6c:71:cf:21:e1:f0:77:68:87:e5: 72:d1:42:95:5e:18:3a:31:9a:87:f0:4b:bb:04:d7: 67:7e:0e:4b:c3:52:4b:5a:51:34:45:5d:ce:59:6a: 75:55:46:01:78:79:ff:94:a6:12:0f:c6:7e:bd:94: 83:87:46:fd:99:73:9c:57:d1:16:7f:76:0e:15:74: 54:4d:d6:0f:6a:e3:a2:ce:4f:79:a5:4b:a8:30:95: e3:5c:f7:b2:60:87:22:8c:12:33:77:4a:dc:b0:71: e1:3c:68:47:f5:95:15:86:b2:b6:98:87:f5:a3:ca: a1:85:e2:6a:1a:da:9b:97:e1:66:5a:96:27:b7:ed: 02:be:7d:df:7e:46:fb:d3:f5:71:4f:a1:96:ac:2b: 0e:b2:a5:0d:52:6e:23:70:28:61:78:82:df:76:5b: f7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D9:66:9A:E6:81:C3:EB:EE:6D:DB:A7:55:6B:70:27:03:19:8F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 208.114.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:5f:6e:e5:0c:f5:21:7e:d5:1c:43:07:59:1e:22:6e:9f:45: 0c:c2:ce:88:25:43:e5:df:64:96:a9:34:69:81:3e:50:6c:c2: cb:94:23:bd:c3:ec:b5:53:c4:60:17:9a:33:16:64:fa:98:b7: c7:52:d8:ef:52:5e:a6:d8:ba:95:da:52:db:d1:6d:db:e1:49: ed:a8:33:ec:c0:88:5c:30:2d:0d:fd:2f:2b:e1:04:c6:44:87: 6a:e2:17:53:fd:bd:04:22:00:2d:0c:b9:86:22:59:32:6f:0f: 5f:25:d8:93:95:0f:8a:5d:15:1d:5f:b1:81:ce:3b:6a:5e:26: 7b:ba:15:d1:b8:7c:0d:16:ab:33:ef:e2:7f:b9:fd:fb:ca:d1: d7:a7:be:94:59:af:87:60:73:d2:71:6d:22:e5:11:8b:9a:57: 2d:d3:e5:37:5c:fd:ab:dc:b7:9d:d2:b9:a7:96:ea:16:47:94: cd:c6:ec:3f:77:b5:d6:73:3d:f9:2c:3a:7f:bb:0a:05:12:b8: 78:ca:d6:49:68:f3:19:cb:ad:1d:1a:e7:3a:3e:df:55:a6:7b: 00:e5:0a:be:c0:49:fe:f6:a3:5c:d0:ed:72:73:04:c1:8a:fa: 85:05:0e:1f:52:cb:11:c9:68:86:bc:ed:7b:58:e7:04:c3:b0: 6e:7d:1b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqnaQomk0NNYQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk N2VkZTg2Y2QtZjA3MC00MDE0LWE5Y2YtZjgyMTliMzk5ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowgUYeDU8HiF6R/5iiYT2n7eCvAIl90Itz/k MpfMs/PW7wsYj95YZD9Xjw4U7gQLBWG/ZLqNV9EGAigtu5KZOzrUEMcuAZA4+kSE uzQUuoGj4MxT115gJyJo4NZh+GxxzyHh8Hdoh+Vy0UKVXhg6MZqH8Eu7BNdnfg5L w1JLWlE0RV3OWWp1VUYBeHn/lKYSD8Z+vZSDh0b9mXOcV9EWf3YOFXRUTdYPauOi zk95pUuoMJXjXPeyYIcijBIzd0rcsHHhPGhH9ZUVhrK2mIf1o8qhheJqGtqbl+Fm WpYnt+0Cvn3ffkb70/VxT6GWrCsOsqUNUm4jcChheILfdlv3XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHZZprmgcPr7m3bp1VrcCcDGY8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNGY3NzBiMGEtMjAxMS0z NGQ3LWJmNWUtNTRlMWY2Zjk2ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HJ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9fbuUM9SF+1RxDB1keIm6fRQzCzoglQ+XfZJapNGmBPlBswsuUI73D 7LVTxGAXmjMWZPqYt8dS2O9SXqbYupXaUtvRbdvhSe2oM+zAiFwwLQ39LyvhBMZE h2riF1P9vQQiAC0MuYYiWTJvD18l2JOVD4pdFR1fsYHOO2peJnu6FdG4fA0WqzPv 4n+5/fvK0denvpRZr4dgc9JxbSLlEYuaVy3T5Tdc/avct53SuaeW6hZHlM3G7D93 tdZzPfksOn+7CgUSuHjK1klo8xnLrR0a5zo+31WmewDlCr7ASf72o1zQ7XJzBMGK +oUFDh9SyxHJaIa87XtY5wTDsG59GzI= -----END CERTIFICATE-----Generated at Fri Apr 17 14:32:46 2026 by rpki-client