$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa File: 32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa (raw, json) Hash identifier: SsOqievxVYivuM9/sRz21CLqpjEYeOuDEYZ9m6q3WtQ= Subject key identifier: 42:82:A5:C5:99:15:A8:A2:7B:4B:8F:9B:F3:16:07:83:A2:A2:7A:30 Certificate issuer: /CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Certificate serial: 010D0C9F4328584E6144AFDE3BF52A39764FA310 Authority key identifier: 98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 2386 IP address blocks: 170.190.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:af:de:3b:f5:2a:39:76:4f:a3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=f11522fb-cfb6-45e3-8d36-370d89cc3fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:52:d0:94:6a:53:15:6e:3f:7f:99:aa:4b: fb:85:90:30:25:84:6b:c1:3c:25:69:a8:db:95:69: 15:fe:de:00:9d:c5:04:83:c8:0f:74:77:16:7c:f1: 88:1b:6e:55:13:00:eb:14:e0:8f:6f:8b:4a:57:29: c3:bb:fc:34:64:97:1f:c3:58:b1:87:18:b1:a0:70: d9:87:3b:46:24:4a:b8:b3:61:da:d1:e4:57:04:b4: 91:8f:85:0d:51:f2:19:df:e6:e7:49:e2:e2:ec:cf: 20:5c:8b:e5:10:26:f9:b0:94:2f:e7:13:2f:60:0f: 9f:20:a7:b9:f4:67:70:9c:ad:fa:f0:ee:71:a2:5d: 1d:ce:4d:0c:07:ef:31:96:f0:b2:b4:15:28:de:cb: 45:31:7d:f7:17:0b:27:58:ee:20:e3:e2:17:ef:40: f0:c5:d4:1a:ab:9c:61:b4:4c:a6:c0:51:c6:d4:c6: 89:96:6d:a5:ba:0b:71:91:dc:d0:a5:5b:5f:4f:79: 45:ff:7a:c7:df:17:3a:98:f8:0d:52:3e:67:5f:ab: bb:50:d4:bf:7a:07:ff:53:d9:30:5c:77:a1:51:f4: 80:e7:6d:f5:45:01:01:d6:b6:c0:bc:62:56:3a:b2: cd:89:16:86:5f:98:10:13:92:14:54:3a:31:4e:b3: 80:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:82:A5:C5:99:15:A8:A2:7B:4B:8F:9B:F3:16:07:83:A2:A2:7A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl X509v3 Authority Key Identifier: keyid:98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer sbgp-ipAddrBlock: critical IPv4: 170.190.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:85:07:25:2f:cc:3a:44:00:a3:a5:76:32:13:80:a1:c0:db: 88:b7:08:b7:d4:26:bc:40:01:38:4d:15:ff:01:35:b1:13:c4: a8:34:17:24:16:37:8b:ef:71:9e:8d:79:1a:6f:dd:7a:9d:a1: ca:48:21:4d:27:2c:49:0a:2b:27:5a:d4:1b:7d:2c:d6:3e:a5: 29:d5:33:56:ce:80:88:9a:5d:68:ff:e7:5b:ca:45:75:d7:5e: 8a:5a:5e:21:af:fd:2a:ea:ea:fa:3f:b6:ee:6d:fd:d9:29:1b: 6e:06:a3:be:7c:b8:de:61:27:ec:4c:84:27:c3:a8:27:a2:83: f5:86:32:8b:28:c8:3f:b3:dd:0e:e4:3d:0a:11:fb:f7:85:31: cd:47:18:86:5b:cc:71:5e:91:53:0e:42:23:60:0c:e7:63:a2: 17:f3:a5:e4:c1:9f:5b:79:39:84:79:37:5c:1a:8d:6f:1e:4b: d6:1b:0a:93:2c:78:0d:4c:85:c0:07:70:3b:b4:e1:b4:59:a3: be:5a:d3:1b:3c:58:38:6c:ff:c0:57:bf:0d:c8:28:57:4b:76: fd:d4:f5:69:50:d4:e5:80:0d:f2:1c:10:ff:82:06:7e:82:9a: 50:0c:28:fa:6b:7c:33:c0:9b:c8:34:3e:a1:4a:e0:75:d2:93: 6a:29:d4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRK/eO/UqOXZPoxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhYjQ3NGYtZTg2ZS00NTdjLThlNGYtNTI1ZTQ3M2Y5 ZTAxMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk ZjExNTIyZmItY2ZiNi00NWUzLThkMzYtMzcwZDg5Y2MzZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTpS0JRqUxVuP3+Zqkv7hZAwJYRrwTwlaajb lWkV/t4AncUEg8gPdHcWfPGIG25VEwDrFOCPb4tKVynDu/w0ZJcfw1ixhxixoHDZ hztGJEq4s2Ha0eRXBLSRj4UNUfIZ3+bnSeLi7M8gXIvlECb5sJQv5xMvYA+fIKe5 9GdwnK368O5xol0dzk0MB+8xlvCytBUo3stFMX33FwsnWO4g4+IX70DwxdQaq5xh tEymwFHG1MaJlm2lugtxkdzQpVtfT3lF/3rH3xc6mPgNUj5nX6u7UNS/egf/U9kw XHehUfSA5231RQEB1rbAvGJWOrLNiRaGX5gQE5IUVDoxTrOAHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKCpcWZFaiie0uPm/MWB4OionowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80N2Fi NDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVlNDczZjllMDEvMzJmYmFjNGUtZTFhZS0z NmQwLTk0NjAtYzU2MzNjM2E5YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDdhYjQ3NGYtZTg2ZS00NTdjLThl NGYtNTI1ZTQ3M2Y5ZTAxLzQ3YWI0NzRmLWU4NmUtNDU3Yy04ZTRmLTUyNWU0NzNm OWUwMS5jcmwwHwYDVR0jBBgwFoAUmLjiKxPCPsM43Lo6U1UYTTFS8DEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80N2FiNDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVl NDczZjllMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqr4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6FByUvzDpEAKOldjITgKHA24i3CLfUJrxAAThNFf8BNbETxKg0FyQW N4vvcZ6NeRpv3XqdocpIIU0nLEkKKyda1Bt9LNY+pSnVM1bOgIiaXWj/51vKRXXX XopaXiGv/Srq6vo/tu5t/dkpG24Go758uN5hJ+xMhCfDqCeig/WGMosoyD+z3Q7k PQoR+/eFMc1HGIZbzHFekVMOQiNgDOdjohfzpeTBn1t5OYR5N1wajW8eS9YbCpMs eA1MhcAHcDu04bRZo75a0xs8WDhs/8BXvw3IKFdLdv3U9WlQ1OWADfIcEP+CBn6C mlAMKPprfDPAm8g0PqFK4HXSk2op1Lk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:34:55 2026 by rpki-client