$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa File: 5fc3e362-19d5-308a-8dcb-de8129446685.roa (raw, json) Hash identifier: k/T02Nsmf6jl4MSYZtAz7pMD5G4N0ciyDN2QRIK4K1M= Subject key identifier: 0E:6A:58:C1:8F:B5:AC:99:60:5B:28:DE:07:85:74:73:77:71:FA:66 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584AB650D83223E3BA6EFCE90B70 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 20278 IP address blocks: 167.88.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:d8:32:23:e3:ba:6e:fc:e9:0b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=812704f1-e807-4817-828d-8dcfc3f38724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:81:c5:0a:fa:92:2f:cc:16:d2:61:00:ef: 05:6c:4d:ad:9f:c3:42:31:bc:81:ae:e5:48:92:4d: 75:e2:10:84:be:f3:9b:56:c4:7a:37:60:7e:f3:8c: 93:d3:ea:aa:2d:ba:4e:18:0c:1c:23:d4:a9:54:f1: bd:d7:90:50:43:3a:a1:1a:be:0e:3a:ac:a1:f7:e3: 38:f2:9c:64:74:e7:09:58:21:c3:f1:83:54:28:93: 6f:93:63:ce:5c:70:25:7b:39:56:90:4b:33:ec:5e: b1:57:7a:e0:24:55:96:16:07:92:15:38:fc:d2:67: 02:28:dd:ab:aa:fc:58:ac:4b:51:00:65:54:6f:7f: 41:ef:eb:b1:b0:33:45:9c:f0:18:fb:ce:d3:27:52: fa:f1:9e:dd:ab:96:6b:32:fe:f3:3e:bb:79:7f:62: be:67:99:61:a8:0c:57:4d:4d:b8:ce:15:51:0d:82: 1f:98:1e:81:11:00:7f:5a:8c:f3:de:e6:e5:05:44: 96:98:e6:62:04:76:a8:01:be:14:9d:19:ec:13:a7: bb:d2:1e:9a:92:ed:7e:ee:e9:41:77:5e:c3:a3:8d: ec:0f:74:a3:11:c5:d9:c1:fb:06:6e:ad:b1:db:58: 51:f7:5c:3b:42:19:d9:2f:01:93:42:7e:f5:44:4c: 2f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6A:58:C1:8F:B5:AC:99:60:5B:28:DE:07:85:74:73:77:71:FA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 167.88.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:be:e1:f4:2d:81:c4:69:9a:28:14:dc:cd:6a:af:82:c0:31: 32:ba:50:ea:1a:07:29:b2:89:0e:cb:0d:5d:07:f4:45:10:6a: 5d:67:50:70:df:6c:87:e2:81:2b:bc:ea:43:6e:56:75:78:41: 8d:8f:7f:53:3a:12:77:b5:38:2f:c0:0d:83:10:fa:cc:f2:28: 65:19:35:50:a7:aa:93:cf:80:24:fd:2b:28:6f:db:5a:4c:19: 4c:b5:85:6e:02:8b:f1:88:7f:b0:45:a0:d7:72:7c:c9:79:34: 76:91:56:71:c4:8a:8c:1b:54:91:a0:fb:ab:61:b1:c7:d7:17: 67:d2:df:f0:9a:80:48:35:b7:99:6f:5b:a7:7d:66:82:8c:2c: 2d:4b:65:f2:b2:47:5a:83:55:6a:11:7f:42:a6:dd:e3:62:88: fb:63:43:cf:6c:e6:45:10:81:85:9f:b1:64:08:cd:a1:4a:9a: 68:0d:91:78:59:a1:85:5f:c7:9b:de:4b:ff:ad:8b:f9:07:ae: 42:0f:bb:b9:c7:c6:29:fb:b8:6a:3a:83:ff:c8:b3:21:fa:4f: 10:fd:c7:ee:f3:15:7f:21:02:21:b1:3c:d3:e7:e5:bd:e1:9c: d4:14:8d:94:1b:ac:de:96:eb:06:a5:c1:7a:30:ae:68:35:d5: b1:c5:6c:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UNgyI+O6bvzpC3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ODEyNzA0ZjEtZTgwNy00ODE3LTgyOGQtOGRjZmMzZjM4NzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnweBxQr6ki/MFtJhAO8FbE2tn8NCMbyBruVI kk114hCEvvObVsR6N2B+84yT0+qqLbpOGAwcI9SpVPG915BQQzqhGr4OOqyh9+M4 8pxkdOcJWCHD8YNUKJNvk2POXHAlezlWkEsz7F6xV3rgJFWWFgeSFTj80mcCKN2r qvxYrEtRAGVUb39B7+uxsDNFnPAY+87TJ1L68Z7dq5ZrMv7zPrt5f2K+Z5lhqAxX TU24zhVRDYIfmB6BEQB/Wozz3ublBUSWmOZiBHaoAb4UnRnsE6e70h6aku1+7ulB d17Do43sD3SjEcXZwfsGbq2x21hR91w7QhnZLwGTQn71REwvKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5qWMGPtayZYFso3geFdHN3cfpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNWZjM2UzNjItMTlkNS0z MDhhLThkY2ItZGU4MTI5NDQ2Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp1gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS+4fQtgcRpmigU3M1qr4LAMTK6UOoaBymyiQ7LDV0H9EUQal1nUHDf bIfigSu86kNuVnV4QY2Pf1M6Ene1OC/ADYMQ+szyKGUZNVCnqpPPgCT9Kyhv21pM GUy1hW4Ci/GIf7BFoNdyfMl5NHaRVnHEiowbVJGg+6thscfXF2fS3/CagEg1t5lv W6d9ZoKMLC1LZfKyR1qDVWoRf0Km3eNiiPtjQ89s5kUQgYWfsWQIzaFKmmgNkXhZ oYVfx5veS/+ti/kHrkIPu7nHxin7uGo6g//IsyH6TxD9x+7zFX8hAiGxPNPn5b3h nNQUjZQbrN6W6walwXowrmg11bHFbPg= -----END CERTIFICATE-----Generated at Sat Aug 9 14:20:01 2025 by rpki-client