$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa File: 32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa (raw, json) Hash identifier: 5kDBh4Y4Hj5ZkSVF8OCMVHyFy1OKLrNA8wKpAxGB0WY= Subject key identifier: BD:F7:FE:F6:EB:74:CA:B5:85:E6:E2:24:83:37:CA:AE:EF:AD:AC:82 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584BBFA591C14BCEA121F4D1E020 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16509 IP address blocks: 199.187.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:91:c1:4b:ce:a1:21:f4:d1:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=34fd16b2-cb27-49c9-bdfc-aa4b4964de39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:34:71:53:d2:e0:73:74:87:27:ee:57:7c: 7f:ac:80:19:6a:69:f4:a2:b7:6a:ae:93:1f:d7:01: e9:10:54:ba:38:3b:13:02:a0:0d:aa:a1:0f:5c:ef: 68:c4:70:44:90:72:38:79:84:28:81:20:fb:dd:99: 29:ee:eb:f3:96:3a:9b:23:ac:e0:12:08:17:3f:f7: 2f:dc:19:b6:7d:0c:91:a4:17:93:4b:c7:a4:35:85: 7d:53:b8:f1:6f:13:f4:19:19:49:c0:d8:94:17:c7: 6e:63:55:1f:a9:29:03:7b:97:8a:ea:d6:2d:27:6a: 15:9c:bc:88:f7:b1:ed:4b:51:91:bf:8f:02:70:6f: 05:2a:c1:38:07:4f:65:4c:53:69:a0:4a:a4:e8:31: 10:c9:a1:3c:2a:19:a2:88:ec:9a:35:cd:37:7d:a7: 4d:d3:b0:39:15:09:14:7f:98:c8:78:19:8d:7a:c9: 59:82:59:69:01:be:ae:b3:5f:75:69:2a:ea:7d:38: b1:eb:41:ef:fd:d1:d0:32:aa:00:56:7d:ae:53:b4: 57:d5:87:e2:a6:75:3f:4a:34:2d:ec:3a:c3:1c:b9: b7:1a:bb:24:d6:3d:a1:c5:a8:2c:b8:b8:39:4e:1f: 8d:4f:ad:e1:2d:6b:83:0d:6b:05:cf:2f:c3:2e:48: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F7:FE:F6:EB:74:CA:B5:85:E6:E2:24:83:37:CA:AE:EF:AD:AC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e8:e2:fa:0c:9a:6c:0a:9f:a8:92:85:62:1f:59:de:b3:fa: 75:b7:3a:ae:83:b2:84:b5:6e:fd:d5:13:ff:db:12:88:30:03: b8:31:ae:3e:67:93:d3:df:72:27:9e:a1:f5:74:2b:73:78:a5: 76:25:d4:c7:ab:24:4e:fd:f6:23:b3:41:e9:d5:22:43:28:8c: 04:10:2a:51:3e:61:66:0b:4e:09:cd:dd:c3:31:b1:91:b5:dd: 9a:dc:8e:0a:c5:d1:64:d3:00:d0:6c:68:ba:0c:30:ab:57:c6: 7a:01:1e:86:7e:f9:3c:78:d6:d3:ab:08:30:6b:45:ae:f3:e6: 98:1d:48:e8:87:28:89:f9:44:f4:f5:8b:e9:44:81:19:41:7e: 68:a6:a3:d6:ef:56:5a:70:2f:db:6c:9a:c9:06:41:b5:70:fd: d3:c7:51:73:05:5e:4a:0b:a5:e9:f5:41:85:96:31:87:3a:45: f2:4d:48:71:de:eb:c1:d8:5f:39:86:71:cf:b1:97:58:e1:7a: ef:df:8e:3a:0f:91:40:c0:15:b1:45:d4:6e:25:98:32:d4:d3: a7:bb:b2:16:60:fa:86:a3:8d:c5:22:17:21:c7:57:36:28:ce: 10:63:a2:c7:d1:8e:51:cc:8a:3a:c1:e3:e9:59:79:ce:aa:86: 19:b1:74:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZHBS86hIfTR4CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MzRmZDE2YjItY2IyNy00OWM5LWJkZmMtYWE0YjQ5NjRkZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI40cVPS4HN0hyfuV3x/rIAZamn0ordqrpMf 1wHpEFS6ODsTAqANqqEPXO9oxHBEkHI4eYQogSD73Zkp7uvzljqbI6zgEggXP/cv 3Bm2fQyRpBeTS8ekNYV9U7jxbxP0GRlJwNiUF8duY1UfqSkDe5eK6tYtJ2oVnLyI 97HtS1GRv48CcG8FKsE4B09lTFNpoEqk6DEQyaE8KhmiiOyaNc03fadN07A5FQkU f5jIeBmNeslZgllpAb6us191aSrqfTix60Hv/dHQMqoAVn2uU7RX1YfipnU/SjQt 7DrDHLm3Grsk1j2hxagsuLg5Th+NT63hLWuDDWsFzy/DLkjFjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL33/vbrdMq1hebiJIM3yq7vrayCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvMzJlOGQ0ODItNTBkMC0z NWNhLTg1YmYtNDZiY2Q4NWRkZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7urMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7o4voMmmwKn6iShWIfWd6z+nW3Oq6DsoS1bv3VE//bEogwA7gxrj5n k9PfcieeofV0K3N4pXYl1MerJE799iOzQenVIkMojAQQKlE+YWYLTgnN3cMxsZG1 3ZrcjgrF0WTTANBsaLoMMKtXxnoBHoZ++Tx41tOrCDBrRa7z5pgdSOiHKIn5RPT1 i+lEgRlBfmimo9bvVlpwL9tsmskGQbVw/dPHUXMFXkoLpen1QYWWMYc6RfJNSHHe 68HYXzmGcc+xl1jheu/fjjoPkUDAFbFF1G4lmDLU06e7shZg+oajjcUiFyHHVzYo zhBjosfRjlHMijrB4+lZec6qhhmxdO0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:08 2025 by rpki-client