$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa File: 471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa (raw, json) Hash identifier: Hn9E45g7Ls57nU/i53Bx0ZIA4YJ5KhS8BhhSmc2quF4= Subject key identifier: FB:51:73:58:EC:BA:6E:26:54:2E:59:2A:11:F1:BB:25:B0:89:F2:22 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584F4C3D6BF4B3FBB98947B36700 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 32806 IP address blocks: 208.114.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6b:f4:b3:fb:b9:89:47:b3:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5b1aaeb6-3feb-44b5-8184-23a4e4d93154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:b6:83:5e:9a:2f:a3:ce:9c:fb:09:4f:ad: eb:6c:c8:eb:e5:89:e7:02:1a:aa:38:b2:8b:ae:e9: 8e:e1:05:8f:f1:2c:76:e1:7f:11:95:ad:e3:bc:05: eb:d6:ac:2e:d8:6e:20:1a:34:a4:bd:04:9e:cb:4b: 2b:d7:2a:4e:01:4f:cc:12:eb:ca:2f:16:8c:04:a4: cf:ac:57:58:ce:93:be:b7:dc:fc:36:a4:2c:a6:1b: ba:00:32:b4:d3:b3:db:70:68:b6:af:f2:ea:79:32: 37:eb:2e:3f:2e:b8:26:d5:05:78:b1:07:56:49:2e: 6c:76:48:fa:dc:f2:7f:72:d5:95:58:fb:12:d8:e4: a7:6c:d2:bf:52:a6:62:ac:52:cc:ce:ed:fb:1c:15: 62:a0:3b:0b:9e:11:ef:5d:c2:ce:b7:4e:54:85:14: bc:c7:40:52:f7:b4:d3:ab:9f:48:6b:5e:b5:87:8b: ab:3e:89:3d:c6:19:76:d1:33:b6:82:6b:1a:80:b7: 16:28:06:6d:8f:f5:c7:9f:3f:c3:98:f5:4b:e6:8a: 60:5e:b7:f3:6a:6f:1f:b7:87:d0:e6:07:1b:c7:73: 23:a8:c0:03:6b:99:21:03:3f:cc:c0:f4:49:bf:87: d6:46:ea:ce:36:07:5f:e2:02:ac:d2:a8:35:66:49: 2a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:51:73:58:EC:BA:6E:26:54:2E:59:2A:11:F1:BB:25:B0:89:F2:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/471bf59f-b37c-3055-9b37-6ed7a1bc4a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 208.114.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9d:40:5b:62:bd:8b:5f:e0:ce:97:0e:1c:d8:2f:ba:36:cf: bc:c5:84:14:d0:25:73:f1:51:3a:2a:4c:11:80:95:fb:d2:f1: 62:d9:da:62:bb:b3:1e:d6:ee:fe:7d:78:d2:a5:12:f6:6a:f4: 14:a2:16:7f:f1:a2:78:f9:85:92:2a:6a:ff:e1:e0:a0:76:ca: 0a:c5:5a:44:40:03:0a:29:18:84:51:ef:d9:56:a2:94:af:cf: 25:d5:92:d3:35:0e:70:04:a3:a8:09:49:b3:8a:00:4b:61:95: ca:26:67:f6:3e:76:1d:c7:7c:01:88:9e:2d:5a:52:79:fd:ef: 84:ab:81:e6:d6:a1:3b:95:88:3d:c3:0c:dc:ec:aa:52:b7:59: 09:7b:16:66:2a:a5:1a:36:1b:b3:6f:45:38:79:ca:d3:61:51: 2c:77:cf:63:95:7c:87:ad:16:5d:bc:9f:5a:14:ec:90:c6:4d: 20:60:1f:f9:f9:8b:12:30:89:96:95:ec:8e:df:60:f7:68:5c: 76:57:10:42:38:48:44:7d:0f:00:8e:e0:ce:92:3b:02:8a:f1: ce:22:03:5d:5d:1a:c0:6a:32:fa:77:98:f7:93:56:7d:ce:a2: f0:31:d7:42:e0:56:2a:03:2a:37:06:28:07:be:5c:57:1a:15: 68:be:3a:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWv0s/u5iUezZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NWIxYWFlYjYtM2ZlYi00NGI1LTgxODQtMjNhNGU0ZDkzMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuq2g16aL6POnPsJT63rbMjr5YnnAhqqOLKL rumO4QWP8Sx24X8Rla3jvAXr1qwu2G4gGjSkvQSey0sr1ypOAU/MEuvKLxaMBKTP rFdYzpO+t9z8NqQsphu6ADK007PbcGi2r/LqeTI36y4/Lrgm1QV4sQdWSS5sdkj6 3PJ/ctWVWPsS2OSnbNK/UqZirFLMzu37HBVioDsLnhHvXcLOt05UhRS8x0BS97TT q59Ia161h4urPok9xhl20TO2gmsagLcWKAZtj/XHnz/DmPVL5opgXrfzam8ft4fQ 5gcbx3MjqMADa5khAz/MwPRJv4fWRurONgdf4gKs0qg1ZkkqHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtRc1jsum4mVC5ZKhHxuyWwifIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNDcxYmY1OWYtYjM3Yy0z MDU1LTliMzctNmVkN2ExYmM0YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HJ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6dQFtivYtf4M6XDhzYL7o2z7zFhBTQJXPxUToqTBGAlfvS8WLZ2mK7 sx7W7v59eNKlEvZq9BSiFn/xonj5hZIqav/h4KB2ygrFWkRAAwopGIRR79lWopSv zyXVktM1DnAEo6gJSbOKAEthlcomZ/Y+dh3HfAGIni1aUnn974SrgebWoTuViD3D DNzsqlK3WQl7FmYqpRo2G7NvRTh5ytNhUSx3z2OVfIetFl28n1oU7JDGTSBgH/n5 ixIwiZaV7I7fYPdoXHZXEEI4SER9DwCO4M6SOwKK8c4iA11dGsBqMvp3mPeTVn3O ovAx10LgVioDKjcGKAe+XFcaFWi+Os8= -----END CERTIFICATE-----Generated at Wed Sep 30 03:36:01 2026 by rpki-client