$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa File: a68996cc-64bd-36b9-b93b-500d1edd511f.roa (raw, json) Hash identifier: Y4bKh89BPczATrXjKiyZK4Ey0Pzjc0E0uKE4EaxUkKg= Subject key identifier: 5C:C4:DF:11:AA:E5:1D:5D:BE:D6:16:C4:4F:3D:3C:65:E1:12:21:92 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584B970CDC77E297B836C3EE98C0 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 20278 IP address blocks: 172.93.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:dc:77:e2:97:b8:36:c3:ee:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=7890a06f-a40b-49f9-a971-571d6187cede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6c:25:3f:fe:3e:cd:d2:0d:4c:c7:0c:40:9b: 61:ac:1e:80:ca:cf:22:19:95:03:5e:95:03:9a:72: 25:24:52:e4:c7:90:c1:f9:e2:86:45:4b:41:7c:1e: b2:d5:c1:11:89:ae:4c:b0:21:0f:b3:6a:6f:a4:8d: 4b:0c:54:60:63:c7:8a:52:f9:d7:61:aa:ad:14:72: c0:04:8a:76:c7:8e:29:a3:66:0b:df:75:9c:f2:a7: 20:aa:89:5a:dd:23:18:b7:e6:cd:c1:ac:8a:f3:d0: ce:ea:06:44:97:f4:cc:2d:af:f1:d2:d0:ca:9b:a2: dd:66:75:d4:96:95:36:f6:0e:a1:74:2e:b6:01:0f: ba:76:70:e9:a1:73:d4:4f:98:ce:5f:42:72:38:39: 5c:11:6e:6a:dd:25:73:4d:66:5b:ea:ac:7f:90:76: 50:e2:bc:75:77:f7:c3:f9:1b:cd:ce:3b:44:14:e1: 76:f2:f3:75:e3:73:3e:f4:77:d3:61:2a:69:9a:46: a5:0d:6a:bb:1f:ba:47:3f:fa:8c:55:92:cf:68:69: b3:e1:0a:d9:57:6e:6c:f4:05:59:63:30:2a:c9:12: 92:bc:66:4d:ec:f5:4c:37:1b:a3:da:95:c1:c1:bb: ec:d5:c5:c4:84:1c:0f:af:8d:1f:14:ea:45:43:22: 0d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C4:DF:11:AA:E5:1D:5D:BE:D6:16:C4:4F:3D:3C:65:E1:12:21:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 172.93.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:da:4a:bc:7d:1e:a2:10:a0:f0:fd:66:96:9d:41:be:52:8d: 2f:7f:5c:c8:2e:fc:45:20:5f:3d:1f:ab:7f:50:ae:67:1c:01: 30:36:9b:ef:7c:1b:83:73:bb:be:b5:93:dd:3f:3f:f0:c1:f9: 1f:7d:6e:d8:1c:5e:c0:42:ce:d7:80:ca:dc:b2:03:9d:4e:09: 5e:4c:5f:53:3b:28:b2:1c:24:ac:d1:3a:a8:84:ee:29:2c:d0: 64:ee:3c:ed:f8:59:2e:9e:7a:77:00:2f:54:e0:11:e3:c6:26: 4b:ef:27:ab:85:39:d4:d9:7d:48:ff:85:0d:2a:a1:27:53:a4: 52:d9:92:90:b0:75:03:57:63:61:8e:ce:29:11:b1:4e:f9:f3: c5:c8:f6:df:dd:b6:7c:5b:60:53:e6:29:c5:a8:36:d4:eb:52: 26:89:c8:0d:73:e0:4f:0d:84:68:8e:19:5b:7c:44:14:2c:57: 68:78:e2:2c:9c:9b:81:19:69:f2:97:fc:0d:44:ba:82:17:4f: 21:85:37:33:1c:e8:38:d9:29:1a:fa:04:dd:c0:91:37:b5:c3: ed:99:00:a6:c1:33:28:a1:a9:9b:ce:83:fb:ee:1a:bf:45:d5: c7:25:de:27:7e:cb:f8:c8:6e:37:3c:33:76:1b:75:b1:6b:bd: 39:cf:d4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNx34pe4NsPumMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk Nzg5MGEwNmYtYTQwYi00OWY5LWE5NzEtNTcxZDYxODdjZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmwlP/4+zdINTMcMQJthrB6Ays8iGZUDXpUD mnIlJFLkx5DB+eKGRUtBfB6y1cERia5MsCEPs2pvpI1LDFRgY8eKUvnXYaqtFHLA BIp2x44po2YL33Wc8qcgqola3SMYt+bNwayK89DO6gZEl/TMLa/x0tDKm6LdZnXU lpU29g6hdC62AQ+6dnDpoXPUT5jOX0JyODlcEW5q3SVzTWZb6qx/kHZQ4rx1d/fD +RvNzjtEFOF28vN143M+9HfTYSppmkalDWq7H7pHP/qMVZLPaGmz4QrZV25s9AVZ YzAqyRKSvGZN7PVMNxuj2pXBwbvs1cXEhBwPr40fFOpFQyINcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzE3xGq5R1dvtYWxE89PGXhEiGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYTY4OTk2Y2MtNjRiZC0z NmI5LWI5M2ItNTAwZDFlZGQ1MTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrF2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITaSrx9HqIQoPD9ZpadQb5SjS9/XMgu/EUgXz0fq39QrmccATA2m+98 G4Nzu761k90/P/DB+R99btgcXsBCzteAytyyA51OCV5MX1M7KLIcJKzROqiE7iks 0GTuPO34WS6eencAL1TgEePGJkvvJ6uFOdTZfUj/hQ0qoSdTpFLZkpCwdQNXY2GO zikRsU7588XI9t/dtnxbYFPmKcWoNtTrUiaJyA1z4E8NhGiOGVt8RBQsV2h44iyc m4EZafKX/A1EuoIXTyGFNzMc6DjZKRr6BN3AkTe1w+2ZAKbBMyihqZvOg/vuGr9F 1ccl3id+y/jIbjc8M3YbdbFrvTnP1Hk= -----END CERTIFICATE-----Generated at Wed Nov 5 09:40:46 2025 by rpki-client