$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa File: 32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa (raw, json) Hash identifier: lWfkcENv3apc/Ym8/TzicC4cOz+lfGucwQchsB/n/OE= Subject key identifier: BA:40:95:CC:F5:63:37:09:A0:BE:41:1C:97:FA:77:69:CC:DB:F3:30 Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e Certificate serial: 010D0C9F4328584E94EA5D653161821A676E1CF0 Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 36861 IP address blocks: 208.68.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:5d:65:31:61:82:1a:67:6e:1c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=cc0569b7-a67b-4ec3-b830-3acafe980b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:d2:8f:b9:a6:98:6d:87:54:f2:6c:a0:b5: 23:77:df:28:78:87:6e:8a:c6:99:ad:4f:27:68:7d: f2:5b:14:48:8e:f1:ce:ee:72:7f:6e:89:e5:bf:01: 87:05:a4:ab:7a:39:e8:e0:2a:91:8f:c3:46:8d:ff: c8:46:b8:91:3b:55:71:47:f0:3a:a9:da:21:55:4b: d1:bb:8a:e3:95:18:d0:2e:4a:c6:93:fc:51:27:36: 3c:b9:d3:91:ff:a3:1a:89:15:c4:1c:9f:50:aa:78: 71:fe:60:30:e7:21:36:2f:f3:1a:a5:1f:aa:1c:0a: 37:93:fe:35:ee:2e:a9:4e:32:a4:af:23:54:de:9d: f6:a1:fe:37:d3:ad:04:f2:e6:05:8a:b3:08:cb:5f: 71:97:02:1b:2f:60:ff:8d:eb:8e:30:5f:c7:26:28: 51:e4:7b:77:99:b6:b6:85:8d:7e:1f:d1:e1:b1:ee: 37:17:e5:0a:70:24:58:21:41:5b:96:c5:57:64:01: 71:3b:bb:3d:04:5e:e3:f7:08:2b:18:86:24:e0:2c: 6e:46:77:f9:59:29:93:c2:9e:9c:7b:71:b9:3e:00: 44:ae:f8:38:0f:53:15:e8:ba:51:0c:8a:12:61:0b: 05:71:9b:32:26:66:36:04:cf:4e:7d:4d:e4:dc:5e: 13:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:40:95:CC:F5:63:37:09:A0:BE:41:1C:97:FA:77:69:CC:DB:F3:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl X509v3 Authority Key Identifier: keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer sbgp-ipAddrBlock: critical IPv4: 208.68.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6d:80:ff:68:db:1a:56:4f:26:92:fa:06:79:50:2a:7e:3e: 91:54:51:26:69:06:2f:6c:d0:97:0e:a8:12:54:57:ce:ef:8a: 77:6a:52:96:01:86:bc:35:a5:b2:b6:a9:9d:53:ad:99:10:5b: b7:34:c8:64:68:e5:45:9b:b5:c1:3d:20:b6:12:c6:3e:6d:9f: 95:71:46:f4:22:d4:db:7b:92:45:a4:31:64:79:e3:69:94:1c: a6:ca:9a:05:59:51:eb:53:f2:80:3c:5b:36:59:2e:0c:0e:c9: f6:7c:e1:43:f1:61:77:00:7d:f0:8e:e4:18:98:17:a6:ca:72: 2c:25:a2:5c:d5:13:af:f8:09:cb:69:b2:5e:cd:46:c2:4f:99: 2e:35:3c:2a:50:fa:9b:f0:4e:d5:ae:cc:59:de:f2:a9:a6:f4: ab:56:93:18:3f:89:3f:af:d8:9f:37:13:02:24:9a:b3:26:49: 8d:16:2c:c2:87:13:aa:9f:95:ba:29:3d:2f:8f:99:c3:cf:12: 2d:c3:08:b9:dc:a2:f6:64:a3:87:37:5f:97:e8:2a:d8:e1:9e: c8:6b:0e:f2:40:68:c6:70:98:7d:c3:0f:6f:6c:9b:aa:c0:33: 85:cc:aa:e3:17:82:c2:18:c6:7a:b5:6c:a2:4f:92:a3:6f:9a: 65:60:a1:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6l1lMWGCGmduHPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxNzEwZGEtNGMyOC00OTIzLTkyMWItZTFkNzEwY2Vj MjllMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk Y2MwNTY5YjctYTY3Yi00ZWMzLWI4MzAtM2FjYWZlOTgwYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKfSj7mmmG2HVPJsoLUjd98oeIduisaZrU8n aH3yWxRIjvHO7nJ/bonlvwGHBaSrejno4CqRj8NGjf/IRriRO1VxR/A6qdohVUvR u4rjlRjQLkrGk/xRJzY8udOR/6MaiRXEHJ9Qqnhx/mAw5yE2L/MapR+qHAo3k/41 7i6pTjKkryNU3p32of43060E8uYFirMIy19xlwIbL2D/jeuOMF/HJihR5Ht3mba2 hY1+H9Hhse43F+UKcCRYIUFblsVXZAFxO7s9BF7j9wgrGIYk4CxuRnf5WSmTwp6c e3G5PgBErvg4D1MV6LpRDIoSYQsFcZsyJmY2BM9OfU3k3F4TFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpAlcz1YzcJoL5BHJf6d2nM2/MwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNzE3 MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3MTBjZWMyOWUvMzI5ODI5MDEtYmExZS0z NWExLWI2ODMtMmNjYmQwZDRhYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzcxNzEwZGEtNGMyOC00OTIzLTky MWItZTFkNzEwY2VjMjllLzM3MTcxMGRhLTRjMjgtNDkyMy05MjFiLWUxZDcxMGNl YzI5ZS5jcmwwHwYDVR0jBBgwFoAUXW/a/Le23lFw8Ej2m6zdI6ddeV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNzE3MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3 MTBjZWMyOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5tgP9o2xpWTyaS+gZ5UCp+PpFUUSZpBi9s0JcOqBJUV87vindqUpYB hrw1pbK2qZ1TrZkQW7c0yGRo5UWbtcE9ILYSxj5tn5VxRvQi1Nt7kkWkMWR542mU HKbKmgVZUetT8oA8WzZZLgwOyfZ84UPxYXcAffCO5BiYF6bKciwlolzVE6/4Cctp sl7NRsJPmS41PCpQ+pvwTtWuzFne8qmm9KtWkxg/iT+v2J83EwIkmrMmSY0WLMKH E6qflbopPS+PmcPPEi3DCLncovZko4c3X5foKtjhnshrDvJAaMZwmH3DD29sm6rA M4XMquMXgsIYxnq1bKJPkqNvmmVgoWc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:23:29 2026 by rpki-client