$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa File: b31f8880-9daf-3934-8200-09c9b0c1e35f.roa (raw, json) Hash identifier: KC0MWwlCPib3meIPyRi7/CxEeVGOepI34WipuXMNclE= Subject key identifier: 52:BA:A5:11:10:36:0B:07:CF:5C:FC:84:F4:2B:F1:39:A4:DE:E6:80 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584BBCDADD5F3E045A874C66A480 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 8888 IP address blocks: 96.9.211.0/24 maxlen: 24 96.9.212.0/24 maxlen: 24 96.9.213.0/24 maxlen: 24 172.93.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:dd:5f:3e:04:5a:87:4c:66:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=e9eb02d3-2f12-48c7-9694-a288300eb680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:70:87:22:e4:66:52:0c:c6:46:9e:6d:c5:5a: ba:51:04:15:41:be:af:ff:ba:06:c2:7a:de:39:b5: e6:51:e8:66:95:57:76:0f:1f:d8:b4:4d:e0:91:7e: 83:1b:50:5f:39:cc:32:9d:81:e0:75:dd:1e:b4:d8: c4:fa:b1:9d:8d:79:7f:49:b4:8a:a5:e2:0c:eb:87: ba:4d:40:7f:6b:3b:ba:45:d5:df:48:f9:77:7a:a8: 2c:5e:f9:23:8c:6a:27:f1:ec:e8:89:48:f4:40:f3: bf:06:0a:a0:2b:71:b3:45:10:5a:b8:1e:8a:cc:03: a2:4a:e3:04:99:76:66:ba:51:aa:18:0c:ea:4e:78: d7:7c:92:8c:75:83:17:f4:3b:77:1b:da:2d:ee:12: 8a:9c:30:d2:e1:1f:e1:f8:83:d4:a9:23:f3:5d:d0: 16:54:e8:8b:9c:1f:ed:3e:fd:3c:f6:4d:d1:6d:a7: 82:3d:16:b4:f5:f9:23:88:3b:cb:32:63:b4:42:c6: ff:0e:66:ed:ac:a2:c0:10:ac:46:ad:a2:46:13:8e: e8:c4:7f:79:8b:f9:de:3b:d3:75:53:f5:92:b1:12: a1:fd:91:f4:e7:84:66:49:bd:f6:5a:14:cd:63:3a: d3:f3:c7:5e:b0:04:9c:ed:d7:7e:a3:00:77:db:5c: e7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BA:A5:11:10:36:0B:07:CF:5C:FC:84:F4:2B:F1:39:A4:DE:E6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 96.9.211.0-96.9.213.255 172.93.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1a:87:60:5c:f3:9b:0f:3a:c1:3a:ff:22:93:46:17:d5:f7: 07:d3:01:44:8a:4a:ec:45:9c:41:23:8e:c8:f2:36:b6:07:f2: 00:b6:dd:39:11:23:96:db:57:18:b5:85:0d:d1:6f:72:57:51: 15:00:d9:b1:4b:91:9c:ef:67:fd:6b:8c:04:04:6a:31:09:a8: 66:55:29:6a:ca:a3:2a:be:9a:dc:37:4d:c3:49:97:14:74:ec: 84:bb:65:8c:3d:f0:88:28:06:ea:ed:de:59:72:20:f4:5f:15: 12:c8:f0:66:01:df:97:1e:72:45:67:93:4d:c0:9d:e6:d3:a2: ea:7b:79:6f:82:92:12:f5:cd:5a:b9:5f:3d:70:26:f0:e6:f9: 93:f4:b2:4a:86:32:1b:dc:66:61:66:b6:e6:30:d8:a1:9e:6c: 3d:a0:fb:f5:aa:3e:21:c8:73:9f:97:09:fc:0a:a4:3e:d3:74: 0e:f7:02:bb:7f:e1:ea:5b:1c:dc:b3:8d:e7:2c:1e:51:d9:c0: 00:1a:3e:c7:76:ff:70:39:0e:ac:3a:e5:4a:a6:a2:71:b1:ef: 8b:cf:55:2e:5d:16:a1:ff:8f:c9:b8:89:6f:35:b8:54:61:28: f1:d0:ab:10:45:c3:45:3c:35:f6:9e:a9:9a:e3:da:be:02:01: db:1e:3e:79 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEu82t1fPgRah0xmpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTllYjAyZDMtMmYxMi00OGM3LTk2OTQtYTI4ODMwMGViNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXCHIuRmUgzGRp5txVq6UQQVQb6v/7oGwnre ObXmUehmlVd2Dx/YtE3gkX6DG1BfOcwynYHgdd0etNjE+rGdjXl/SbSKpeIM64e6 TUB/azu6RdXfSPl3eqgsXvkjjGon8ezoiUj0QPO/BgqgK3GzRRBauB6KzAOiSuME mXZmulGqGAzqTnjXfJKMdYMX9Dt3G9ot7hKKnDDS4R/h+IPUqSPzXdAWVOiLnB/t Pv089k3RbaeCPRa09fkjiDvLMmO0Qsb/DmbtrKLAEKxGraJGE47oxH95i/neO9N1 U/WSsRKh/ZH054RmSb32WhTNYzrT88desASc7dd+owB321znFQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFFK6pREQNgsHz1z8hPQr8Tmk3uaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYjMxZjg4ODAtOWRhZi0z OTM0LTgyMDAtMDljOWIwYzFlMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABgCdMD BAFgCdQDBACsXbowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAchqHYFzzmw86wTr/IpNGF9X3B9MBRIpK7EWc QSOOyPI2tgfyALbdOREjlttXGLWFDdFvcldRFQDZsUuRnO9n/WuMBARqMQmoZlUp asqjKr6a3DdNw0mXFHTshLtljD3wiCgG6u3eWXIg9F8VEsjwZgHflx5yRWeTTcCd 5tOi6nt5b4KSEvXNWrlfPXAm8Ob5k/SySoYyG9xmYWa25jDYoZ5sPaD79ao+Ichz n5cJ/AqkPtN0DvcCu3/h6lsc3LON5yweUdnAABo+x3b/cDkOrDrlSqaicbHvi89V Ll0Wof+PybiJbzW4VGEo8dCrEEXDRTw19p6pmuPavgIB2x4+eQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:55 2025 by rpki-client