$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/499a84c2-191a-39f2-b4fd-5937af6f121f.roa File: 499a84c2-191a-39f2-b4fd-5937af6f121f.roa (raw, json) Hash identifier: nY2KN1TW1JZJnlO70mzwhiAotlcqg36/EB8Jdz07uUA= Subject key identifier: A2:67:1E:79:31:A9:C8:53:A8:43:DB:63:FA:EA:6F:12:56:A9:83:08 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584BA9325838279CDD60CEBD1940 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/499a84c2-191a-39f2-b4fd-5937af6f121f.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 23959 IP address blocks: 172.93.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:58:38:27:9c:dd:60:ce:bd:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=433a9170-97d0-4265-b509-437da9489333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:d7:3a:a1:9c:44:50:d0:31:2c:99:70:b5: f2:c4:d6:66:91:be:34:99:ac:b1:01:1e:39:45:af: 54:5a:fd:bd:c3:ed:24:13:a4:89:84:aa:53:01:45: 42:78:01:bf:ae:82:17:90:6c:05:2e:53:f8:c3:5e: 00:87:cc:f3:91:44:62:4b:6c:ae:4e:c1:d8:e8:1f: b6:d7:34:81:aa:52:b6:d4:2c:0e:eb:bf:76:39:e5: bc:a7:00:8f:65:6c:32:35:14:45:55:5e:d1:97:72: 83:32:a2:b6:e9:95:f4:f7:7f:cc:37:6e:8d:b5:b5: 44:85:8d:18:34:85:ca:0e:7f:61:a7:cf:03:da:98: 18:0c:eb:6d:0f:9b:ad:9c:69:e2:b9:f0:29:97:6e: de:82:69:5a:19:9d:92:21:9d:96:41:7f:b4:20:df: ac:7d:b3:fa:a4:a4:f5:22:d3:6f:64:9f:f3:6c:2e: 3a:09:61:10:7b:d6:e0:c8:90:e9:47:81:d0:5e:14: e4:92:09:4a:7c:17:cc:79:36:07:cc:55:b3:d1:dd: c1:26:73:58:3c:5f:74:ce:eb:f6:47:dc:aa:66:7e: 66:53:c7:84:e8:5b:a6:74:29:93:4b:7b:26:2c:e0: 3c:8a:c9:58:86:54:7b:6d:b5:64:7d:0c:d1:a6:e8: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:67:1E:79:31:A9:C8:53:A8:43:DB:63:FA:EA:6F:12:56:A9:83:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/499a84c2-191a-39f2-b4fd-5937af6f121f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 172.93.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f2:81:1b:51:24:7c:84:fa:fc:60:d4:61:b9:df:cd:73:25: f1:cc:7b:cd:8e:5f:a5:f6:8f:57:db:f0:98:8a:d6:75:ee:ca: df:19:e7:93:28:63:bf:ef:3f:94:f3:81:21:f8:f3:a2:3f:7e: ad:1b:0a:59:73:a8:84:51:50:67:c0:4e:d3:1f:ee:59:8d:aa: f2:de:e7:ec:0b:e1:29:01:c3:54:c9:ba:e9:50:fe:47:34:3f: 34:a2:b0:b2:dc:50:10:1c:fc:5c:a7:40:96:3d:9b:64:24:c6: ac:ae:2a:11:c2:b8:14:11:42:e2:da:ec:b9:1c:6f:df:26:c8: e3:5f:9b:0a:38:6c:1f:5d:bb:ee:d0:eb:f8:e3:ab:00:bf:c3: 8e:82:63:ec:32:11:7b:dd:8d:ca:aa:47:df:ad:83:91:e0:9c: a9:17:4f:3a:97:51:c4:ea:9b:d9:c9:96:1a:52:70:e9:53:bf: 79:db:ab:83:41:08:f1:b4:58:bd:66:40:af:14:43:2a:58:ff: 17:e7:1f:ea:69:50:00:ec:e4:3d:3d:69:34:12:43:e9:67:42: d3:39:70:f2:9f:8b:2d:60:b9:ce:e2:77:17:dc:e6:9d:73:02: cf:20:dd:08:c5:b6:6e:79:9f:c7:21:bc:86:2a:56:92:09:5e: 3f:0e:63:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlg4J5zdYM69GUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NDMzYTkxNzAtOTdkMC00MjY1LWI1MDktNDM3ZGE5NDg5MzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNXXOqGcRFDQMSyZcLXyxNZmkb40mayxAR45 Ra9UWv29w+0kE6SJhKpTAUVCeAG/roIXkGwFLlP4w14Ah8zzkURiS2yuTsHY6B+2 1zSBqlK21CwO6792OeW8pwCPZWwyNRRFVV7Rl3KDMqK26ZX093/MN26NtbVEhY0Y NIXKDn9hp88D2pgYDOttD5utnGniufApl27egmlaGZ2SIZ2WQX+0IN+sfbP6pKT1 ItNvZJ/zbC46CWEQe9bgyJDpR4HQXhTkkglKfBfMeTYHzFWz0d3BJnNYPF90zuv2 R9yqZn5mU8eE6FumdCmTS3smLOA8islYhlR7bbVkfQzRpui2TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJnHnkxqchTqEPbY/rqbxJWqYMIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNDk5YTg0YzItMTkxYS0z OWYyLWI0ZmQtNTkzN2FmNmYxMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrF3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnygRtRJHyE+vxg1GG5381zJfHMe82OX6X2j1fb8JiK1nXuyt8Z55Mo Y7/vP5TzgSH486I/fq0bCllzqIRRUGfATtMf7lmNqvLe5+wL4SkBw1TJuulQ/kc0 PzSisLLcUBAc/FynQJY9m2QkxqyuKhHCuBQRQuLa7Lkcb98myONfmwo4bB9du+7Q 6/jjqwC/w46CY+wyEXvdjcqqR9+tg5HgnKkXTzqXUcTqm9nJlhpScOlTv3nbq4NB CPG0WL1mQK8UQypY/xfnH+ppUADs5D09aTQSQ+lnQtM5cPKfiy1guc7idxfc5p1z As8g3QjFtm55n8chvIYqVpIJXj8OY4E= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:50 2025 by rpki-client