$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32267.roa File: AS32267.roa (raw, json) Hash identifier: 3E3RDE7isAM21z1PPaAB+b4GRQETLIZvhtp7PaRE2tY= Subject key identifier: 31:E5:3B:31:D2:71:39:74:43:00:68:FE:5E:37:D0:05:69:EB:8E:94 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 4C43E7A00C5072F29E7F3E6E319D00ACB6E8D82C Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32267.roa Signing time: Wed 22 Oct 2025 19:30:39 +0000 ROA not before: Wed 22 Oct 2025 19:25:39 +0000 ROA not after: Wed 21 Oct 2026 19:30:39 +0000 asID: 32267 IP address blocks: 104.234.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:43:e7:a0:0c:50:72:f2:9e:7f:3e:6e:31:9d:00:ac:b6:e8:d8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 22 19:25:39 2025 GMT Not After : Oct 21 19:30:39 2026 GMT Subject: CN=31E53B31D2713974430068FE5E37D00569EB8E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:82:13:86:37:4b:06:15:89:87:22:01:0d: 20:14:1f:af:db:3d:51:49:dc:e5:0a:45:4e:04:c3: 7c:fd:38:cb:b8:89:06:63:69:d0:64:45:5d:c9:a6: a0:e1:75:19:1b:d7:37:76:c5:cf:7e:d6:6c:9c:51: 2c:80:4c:44:90:6e:37:05:4c:0f:fb:bc:d2:7d:f6: c2:bb:f3:de:1e:f8:79:bd:ca:73:f2:41:f8:ee:40: c6:e3:6b:c1:bd:47:20:63:d7:a1:4b:ed:c9:03:0e: 2d:ac:39:ff:40:f1:6e:22:cd:9b:1c:cf:f9:d8:69: 33:8e:e8:3e:d6:9c:fd:32:98:5f:72:9a:da:66:85: 60:16:7b:71:d9:f2:21:c9:e5:37:5b:fe:58:24:b7: f5:aa:63:da:e2:d2:75:04:e2:d2:aa:4f:c1:6b:71: dd:a3:09:f1:d1:ed:10:68:85:13:d2:51:f8:9c:3d: 11:eb:6f:19:3c:00:89:05:76:57:6d:14:d2:23:46: 40:98:86:8d:40:0d:40:24:c4:ae:ea:97:6b:77:26: cd:49:ab:e8:c6:3f:72:fe:e5:85:ff:28:ec:3e:93: ed:27:0a:01:4e:c9:b3:c7:d2:b8:fc:c7:6b:59:a1: bd:1e:ac:c7:87:75:b5:8e:0b:7c:cb:0f:36:40:31: a9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E5:3B:31:D2:71:39:74:43:00:68:FE:5E:37:D0:05:69:EB:8E:94 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32267.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.38.0/23 Signature Algorithm: sha256WithRSAEncryption 02:40:f1:d6:2d:cb:91:f1:f8:b3:a3:21:bb:b2:f3:4c:f6:58: 15:e1:ae:6d:f0:81:16:39:31:1e:31:10:a5:79:3e:89:08:04: b7:81:df:9c:bc:25:75:dd:a7:e9:a6:51:0b:b1:d7:85:47:21: 2e:96:ca:d8:bd:cc:80:54:4e:54:8e:bc:61:33:d1:4b:50:a5: 30:48:c8:ac:d4:e3:e5:47:71:7a:77:d7:c6:a7:c3:83:2f:ec: 21:72:2f:03:da:da:d0:c3:66:c1:32:38:0c:6b:b9:17:dd:dc: 73:29:96:37:3e:9f:5e:09:56:c2:37:bd:6c:92:6c:99:d9:56: 9e:e5:a3:b8:e3:6a:45:f6:5c:cb:c1:db:af:6b:16:73:36:3f: 8a:1a:fd:93:c4:50:9d:f7:8a:51:39:bf:b2:3b:2a:87:6f:4f: 27:f9:a2:03:be:ca:70:dc:c8:fe:56:2e:d9:a8:24:6c:19:dd: 2f:b9:22:ee:2c:5a:d4:44:2c:da:f1:8c:cc:98:38:c7:96:11: 9f:59:87:b0:59:17:6d:44:d8:13:5e:68:52:fa:5f:84:69:1a: 0b:c5:12:c3:f2:33:d6:d9:29:64:bc:8f:a9:93:75:27:f1:8e: 75:5c:35:0e:4d:2e:e7:d3:1d:89:7c:35:2f:e9:54:4e:92:f9: 0b:ab:9e:7c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUTEPnoAxQcvKefz5uMZ0ArLbo2CwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDIyMTkyNTM5WhcNMjYxMDIxMTkzMDM5 WjAzMTEwLwYDVQQDEygzMUU1M0IzMUQyNzEzOTc0NDMwMDY4RkU1RTM3RDAwNTY5 RUI4RTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSGCE4Y3SwYV iYciAQ0gFB+v2z1RSdzlCkVOBMN8/TjLuIkGY2nQZEVdyaag4XUZG9c3dsXPftZs nFEsgExEkG43BUwP+7zSffbCu/PeHvh5vcpz8kH47kDG42vBvUcgY9ehS+3JAw4t rDn/QPFuIs2bHM/52Gkzjug+1pz9MphfcpraZoVgFntx2fIhyeU3W/5YJLf1qmPa 4tJ1BOLSqk/Ba3Hdownx0e0QaIUT0lH4nD0R628ZPACJBXZXbRTSI0ZAmIaNQA1A JMSu6pdrdybNSavoxj9y/uWF/yjsPpPtJwoBTsmzx9K4/MdrWaG9HqzHh3W1jgt8 yw82QDGpGQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFDHlOzHScTl0QwBo/l430AVp 646UMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzMyMjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOomMA0GCSqGSIb3DQEBCwUAA4IB AQACQPHWLcuR8fizoyG7svNM9lgV4a5t8IEWOTEeMRCleT6JCAS3gd+cvCV13afp plELsdeFRyEulsrYvcyAVE5UjrxhM9FLUKUwSMis1OPlR3F6d9fGp8ODL+whci8D 2trQw2bBMjgMa7kX3dxzKZY3Pp9eCVbCN71skmyZ2Vae5aO442pF9lzLwduvaxZz Nj+KGv2TxFCd94pROb+yOyqHb08n+aIDvspw3Mj+Vi7ZqCRsGd0vuSLuLFrURCza 8YzMmDjHlhGfWYewWRdtRNgTXmhS+l+EaRoLxRLD8jPW2SlkvI+pk3Un8Y51XDUO TS7n0x2JfDUv6VROkvkLq558 -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:20 2025 by rpki-client