$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/1ca08956-dede-3899-a28b-0e0c904cf504.roa File: 1ca08956-dede-3899-a28b-0e0c904cf504.roa (raw, json) Hash identifier: 9RXC5ubYYSL7uYW9TnTMTWOAH7HnR2Az9EUTekF+A2g= Subject key identifier: EE:25:A0:4F:A3:DD:8E:5B:CA:14:2C:F9:9E:49:DA:FE:86:6C:B9:DB Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584B970CD5F34F75E582EDCEE840 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/1ca08956-dede-3899-a28b-0e0c904cf504.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 20278 IP address blocks: 172.93.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d5:f3:4f:75:e5:82:ed:ce:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=f27bd04e-9b6c-48ca-9cca-811746d8b133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:8a:f7:f5:6d:db:06:bc:0f:0c:c5:24:14: bd:4b:14:f1:60:ac:b9:2b:d5:2a:81:c6:05:e7:52: 4e:29:83:2f:3b:75:5b:55:44:46:3f:ed:0b:ef:14: 63:94:1d:9d:2e:89:31:18:da:98:66:18:d2:1b:d8: 56:cc:e1:0c:6d:f1:9d:ba:f2:3d:28:c3:00:42:a0: cc:e8:3d:c4:49:0a:10:8a:a5:1d:0f:82:4c:82:01: 46:ab:07:3d:f6:8e:96:71:f5:2c:00:f2:76:67:97: 1c:c8:15:e3:c0:3e:86:29:d2:10:a3:c4:a1:c7:b8: 1d:68:5f:49:b3:9a:14:ee:ed:22:a0:60:43:d5:df: 83:54:95:94:cf:d9:b1:a4:08:1b:f9:4f:d0:11:a9: 06:9c:ca:84:e8:13:ef:7d:1c:ed:8f:ed:c0:b0:2f: e0:8b:11:68:f7:2d:02:08:62:c8:bd:5a:0f:50:2c: 6b:10:53:bc:bc:ee:fb:8b:24:e5:98:1d:27:47:cb: ea:37:f1:5a:c6:7f:8f:57:67:38:83:3e:3e:40:fe: c7:66:83:28:f1:b3:0d:96:6b:53:a1:f3:93:b8:51: f4:1a:f8:3a:46:cb:4c:97:ec:b3:2e:21:13:b3:13: e5:4e:00:cd:cd:66:d6:b8:fd:28:08:b1:83:eb:63: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:25:A0:4F:A3:DD:8E:5B:CA:14:2C:F9:9E:49:DA:FE:86:6C:B9:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/1ca08956-dede-3899-a28b-0e0c904cf504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 172.93.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:df:d8:60:5d:f5:19:6c:7f:10:c1:6b:da:b6:9c:6b:4b:d8: 3e:ec:23:56:cb:fd:10:aa:bb:26:5b:1b:ee:cf:9b:26:43:f6: 87:95:e2:7a:44:25:fe:9f:52:ca:05:93:df:86:ac:fa:dd:45: 87:92:e4:6e:02:bf:b3:55:2e:a0:01:8b:83:4d:d8:e8:3c:ee: 10:ce:a9:e8:81:2c:ac:ce:e0:52:bb:4d:f7:0c:f4:1f:6b:b5: c1:6c:1b:ae:3a:9c:c6:3b:b6:2d:00:c9:73:b3:a4:95:5b:70: 8f:56:05:9a:9d:13:72:3b:da:5a:1f:23:c2:1b:7b:ac:de:f0: 4e:57:42:45:e1:43:da:7a:28:ff:c6:56:75:6e:53:9d:a2:a2: ef:64:9c:12:fb:e6:ce:44:27:97:f0:2a:27:54:bc:fc:b8:f8: c4:77:b7:8c:2e:d7:03:c0:7f:8e:45:ab:a4:5b:bc:35:6e:5f: f4:20:fe:d4:6f:bb:2a:8b:65:84:e2:4f:bb:00:28:70:8e:9d: d2:44:08:16:39:1c:93:44:07:54:7e:ac:dd:00:e5:29:96:52: 39:3a:8f:f5:a2:60:a2:57:d5:72:ae:33:d0:00:81:60:11:9b: 02:20:c7:cf:8d:10:e4:d9:cf:a2:38:34:ce:bc:1f:d9:7a:f6: fd:c5:1e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNXzT3Xlgu3O6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZjI3YmQwNGUtOWI2Yy00OGNhLTljY2EtODExNzQ2ZDhiMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz6K9/Vt2wa8DwzFJBS9SxTxYKy5K9UqgcYF 51JOKYMvO3VbVURGP+0L7xRjlB2dLokxGNqYZhjSG9hWzOEMbfGduvI9KMMAQqDM 6D3ESQoQiqUdD4JMggFGqwc99o6WcfUsAPJ2Z5ccyBXjwD6GKdIQo8Shx7gdaF9J s5oU7u0ioGBD1d+DVJWUz9mxpAgb+U/QEakGnMqE6BPvfRztj+3AsC/gixFo9y0C CGLIvVoPUCxrEFO8vO77iyTlmB0nR8vqN/Faxn+PV2c4gz4+QP7HZoMo8bMNlmtT ofOTuFH0Gvg6RstMl+yzLiETsxPlTgDNzWbWuP0oCLGD62MOaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4loE+j3Y5byhQs+Z5J2v6GbLnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvMWNhMDg5NTYtZGVkZS0z ODk5LWEyOGItMGUwYzkwNGNmNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErF3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrf2GBd9RlsfxDBa9q2nGtL2D7sI1bL/RCquyZbG+7PmyZD9oeV4npE Jf6fUsoFk9+GrPrdRYeS5G4Cv7NVLqABi4NN2Og87hDOqeiBLKzO4FK7TfcM9B9r tcFsG646nMY7ti0AyXOzpJVbcI9WBZqdE3I72lofI8Ibe6ze8E5XQkXhQ9p6KP/G VnVuU52iou9knBL75s5EJ5fwKidUvPy4+MR3t4wu1wPAf45Fq6RbvDVuX/Qg/tRv uyqLZYTiT7sAKHCOndJECBY5HJNEB1R+rN0A5SmWUjk6j/WiYKJX1XKuM9AAgWAR mwIgx8+NEOTZz6I4NM68H9l69v3FHiQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:17:25 2025 by rpki-client