$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/32a1b157-c9d6-3c97-aef9-fd5e3eff86e6.roa File: 32a1b157-c9d6-3c97-aef9-fd5e3eff86e6.roa (raw, json) Hash identifier: z4ZLd3vCtw3X+G0fiuByyOmVKCGqiGYQcHG5JHYYUNs= Subject key identifier: C5:39:82:07:3E:50:9E:6F:70:8E:9D:D9:E1:AF:CA:1A:1B:B2:93:39 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584BBE406529985E56FECD0080B0 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/32a1b157-c9d6-3c97-aef9-fd5e3eff86e6.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 401838 IP address blocks: 208.123.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:65:29:98:5e:56:fe:cd:00:80:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=6067880b-3be5-43f0-bfcd-77b6bd264eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:ae:fd:37:45:87:13:e4:c2:39:88:bd:26: 4d:72:0c:7c:81:9a:0c:b7:23:67:13:75:c4:78:c1: cd:a7:48:8e:d1:ed:fa:96:74:76:60:e1:78:4a:50: 20:bb:c4:ff:d2:89:6c:08:27:ab:cf:d5:47:05:6c: 32:13:b2:79:f1:da:7e:95:32:ab:25:88:94:9b:5d: e6:b0:df:8c:e5:c7:49:e2:48:65:c1:34:65:61:22: fa:82:8b:63:aa:dc:5b:71:37:32:64:49:d4:ff:f7: ca:aa:f0:5c:01:4c:44:5b:2d:c0:45:dd:5d:20:e9: c6:4e:c8:6f:99:4e:4d:fc:d1:29:7b:7a:44:c3:d3: ca:c1:6f:67:ec:d3:85:0b:eb:bf:e8:86:20:e2:39: 2a:26:12:5e:85:cf:08:12:0e:79:c3:c7:a0:23:2b: 7c:fa:eb:ae:55:f6:17:fd:6b:d5:24:9d:8d:76:17: 6b:7b:c8:d0:2c:8e:4b:b3:fd:6f:18:b0:71:0d:e5: 41:ab:e5:93:60:c2:ad:9a:7d:51:ba:89:71:a0:1a: 2e:e7:ce:12:aa:c5:c5:2b:6b:92:f8:2d:80:fe:f1: 4c:b6:02:17:ba:68:85:40:f7:2d:a1:f0:92:2b:22: b9:fa:9f:72:92:39:52:e8:f9:e2:fd:01:6f:6b:88: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:39:82:07:3E:50:9E:6F:70:8E:9D:D9:E1:AF:CA:1A:1B:B2:93:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/32a1b157-c9d6-3c97-aef9-fd5e3eff86e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 208.123.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:95:ba:fb:17:ea:3f:1c:3e:31:c8:71:f8:7f:fb:87:06:00: dc:a1:2c:9a:00:ee:f0:0c:12:23:4f:7a:de:78:99:5f:9f:d0: 47:0c:72:68:b5:03:92:f7:77:22:d3:9d:be:66:33:1f:d9:e3: 38:bc:4b:b7:bd:17:0f:8e:0d:d5:e5:bc:c5:63:88:48:b4:e6: 36:14:f3:ad:9c:53:6c:be:95:28:ad:38:2b:df:e1:e0:97:8e: c5:49:35:43:b8:43:63:c8:4e:be:db:e0:0b:ac:63:7c:38:c0: 03:a7:76:37:a1:40:09:a6:dd:73:38:45:8f:cf:ee:24:92:fc: 2f:c5:86:70:6f:0a:35:bb:6d:20:12:2e:7c:92:55:f8:50:76: c2:10:89:2d:01:77:9a:81:9f:31:12:3d:46:b3:49:3c:03:21: ca:a0:a6:7a:d0:83:42:f9:9f:94:88:52:8b:01:2a:78:02:91: 2b:35:32:e8:20:c2:c2:79:2c:68:cb:fd:51:bd:bc:4d:04:e0: d0:de:0e:1e:09:e4:9b:e7:eb:04:a6:e9:ce:e8:87:93:2c:5f: 0f:69:93:03:9a:7b:41:48:05:0e:ce:80:4a:e2:0a:9f:c9:e1: 25:e3:33:a9:ca:d1:d5:53:f6:5e:51:63:87:f6:23:eb:2c:b2: 6a:b8:21:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGUpmF5W/s0AgLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NjA2Nzg4MGItM2JlNS00M2YwLWJmY2QtNzdiNmJkMjY0ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMCu/TdFhxPkwjmIvSZNcgx8gZoMtyNnE3XE eMHNp0iO0e36lnR2YOF4SlAgu8T/0olsCCerz9VHBWwyE7J58dp+lTKrJYiUm13m sN+M5cdJ4khlwTRlYSL6gotjqtxbcTcyZEnU//fKqvBcAUxEWy3ARd1dIOnGTshv mU5N/NEpe3pEw9PKwW9n7NOFC+u/6IYg4jkqJhJehc8IEg55w8egIyt8+uuuVfYX /WvVJJ2Ndhdre8jQLI5Ls/1vGLBxDeVBq+WTYMKtmn1RuolxoBou584SqsXFK2uS +C2A/vFMtgIXumiFQPctofCSKyK5+p9ykjlS6Pni/QFva4ijdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU5ggc+UJ5vcI6d2eGvyhobspM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvMzJhMWIxNTctYzlkNi0z Yzk3LWFlZjktZmQ1ZTNlZmY4NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeVuvsX6j8cPjHIcfh/+4cGANyhLJoA7vAMEiNPet54mV+f0EcMcmi1 A5L3dyLTnb5mMx/Z4zi8S7e9Fw+ODdXlvMVjiEi05jYU862cU2y+lSitOCvf4eCX jsVJNUO4Q2PITr7b4AusY3w4wAOndjehQAmm3XM4RY/P7iSS/C/FhnBvCjW7bSAS LnySVfhQdsIQiS0Bd5qBnzESPUazSTwDIcqgpnrQg0L5n5SIUosBKngCkSs1Mugg wsJ5LGjL/VG9vE0E4NDeDh4J5Jvn6wSm6c7oh5MsXw9pkwOae0FIBQ7OgEriCp/J 4SXjM6nK0dVT9l5RY4f2I+sssmq4ISE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:00:46 2025 by rpki-client