$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa File: ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa (raw, json) Hash identifier: Ui7BZmj10/92RqdnnfZBUQ/DjUFwsuDtV7Y+ZCT2o50= Subject key identifier: 27:65:4D:42:2A:54:5B:3A:7C:5C:75:5F:04:BF:10:85:34:65:B1:03 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584B970CD61D9F58D4C835FC9700 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 32204 IP address blocks: 64.44.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d6:1d:9f:58:d4:c8:35:fc:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=f5822d7f-e81e-4c20-83b8-fee4d1709e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:94:2b:9a:e7:fc:17:a3:c3:3d:b6:cd:a2:65: 3b:36:80:b1:31:9f:3c:ff:d9:8b:74:27:39:cd:31: ef:60:b5:1a:29:29:f9:6c:d7:d5:24:a3:7a:c5:38: 75:52:cd:f4:72:b2:f9:10:af:08:b4:39:07:d6:63: 69:4f:50:f5:18:7e:2e:84:0d:3e:6f:67:0a:7c:15: 90:15:4e:d7:61:f7:d8:80:b2:0d:7a:72:b1:84:04: 1d:57:76:3a:9b:fd:f3:f9:e1:87:85:ef:69:c1:0c: a3:0e:d0:b1:f9:85:7e:de:10:ec:1c:d2:60:f1:ef: c1:ad:d3:02:c6:e0:e7:b8:96:cd:63:61:69:42:ee: 93:28:e4:42:fe:07:42:8e:07:d6:e1:90:39:be:3c: 52:59:d2:26:6f:64:37:72:72:16:f7:1d:80:ce:38: e6:98:7c:24:b2:25:24:f4:ab:9c:f3:bf:0b:e6:32: c2:6a:75:5c:c4:52:e6:98:11:5a:33:1a:7e:25:41: 8f:03:5a:57:dc:e9:f0:0b:30:bc:63:9e:46:95:30: cd:5a:84:a3:f9:57:fd:d0:8d:da:8c:77:db:10:45: 44:d2:6b:7f:aa:57:2d:78:a3:2b:1b:f0:1e:b1:a3: b2:21:18:a3:32:e6:3d:17:60:af:f2:0d:5b:25:c4: af:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:65:4D:42:2A:54:5B:3A:7C:5C:75:5F:04:BF:10:85:34:65:B1:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 64.44.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:be:20:56:05:41:9f:56:70:5a:4f:67:f7:28:47:18:24:9a: bb:59:46:03:aa:63:15:15:7e:eb:31:b5:ac:a0:6c:05:ed:05: 3f:32:d2:48:8c:66:b5:85:0f:41:a7:23:c4:52:05:f6:9f:6c: 4f:be:5e:c9:e4:85:5a:33:28:43:38:99:af:37:f3:5f:cd:ca: 14:97:e6:f4:05:12:fe:d2:57:b3:0e:a9:40:f4:09:d2:a2:11: 51:87:aa:ea:f6:fe:62:cb:62:9d:f1:54:9e:e6:4b:c8:60:b6: af:c9:bb:82:33:56:65:fb:7e:64:61:23:5f:c0:55:d1:61:bb: 0d:60:b8:11:1a:90:bf:bb:69:d6:bd:83:6c:6c:44:c4:17:d5: 95:a3:65:91:20:73:42:06:56:66:56:d8:9b:77:07:19:ab:d0: d8:60:cb:73:f9:bb:63:22:bd:c6:f9:fd:28:f3:f3:21:c7:b5: 41:f9:a2:cb:a6:ea:20:13:6a:b9:11:3d:34:46:92:a3:9e:76: 30:b7:a1:ba:7a:48:59:06:15:a7:95:25:4c:75:3e:f2:00:85: a8:ab:0b:12:1e:51:ac:e6:05:d9:c7:31:d2:84:a7:68:6d:b5: e3:24:40:62:fc:9b:83:dd:1f:90:29:7c:93:85:60:17:d1:bd: c6:70:7c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNYdn1jUyDX8lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZjU4MjJkN2YtZTgxZS00YzIwLTgzYjgtZmVlNGQxNzA5ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJQrmuf8F6PDPbbNomU7NoCxMZ88/9mLdCc5 zTHvYLUaKSn5bNfVJKN6xTh1Us30crL5EK8ItDkH1mNpT1D1GH4uhA0+b2cKfBWQ FU7XYffYgLINenKxhAQdV3Y6m/3z+eGHhe9pwQyjDtCx+YV+3hDsHNJg8e/BrdMC xuDnuJbNY2FpQu6TKORC/gdCjgfW4ZA5vjxSWdImb2Q3cnIW9x2AzjjmmHwksiUk 9Kuc878L5jLCanVcxFLmmBFaMxp+JUGPA1pX3OnwCzC8Y55GlTDNWoSj+Vf90I3a jHfbEEVE0mt/qlcteKMrG/AesaOyIRijMuY9F2Cv8g1bJcSvzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdlTUIqVFs6fFx1XwS/EIU0ZbEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvZGRjZDE2ZTYtM2I1Yi0z NjQ1LWI4YTAtMzQ5MGEyYWVmMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW+IFYFQZ9WcFpPZ/coRxgkmrtZRgOqYxUVfusxtaygbAXtBT8y0kiM ZrWFD0GnI8RSBfafbE++XsnkhVozKEM4ma8381/NyhSX5vQFEv7SV7MOqUD0CdKi EVGHqur2/mLLYp3xVJ7mS8hgtq/Ju4IzVmX7fmRhI1/AVdFhuw1guBEakL+7ada9 g2xsRMQX1ZWjZZEgc0IGVmZW2Jt3Bxmr0Nhgy3P5u2Mivcb5/Sjz8yHHtUH5osum 6iATarkRPTRGkqOedjC3obp6SFkGFaeVJUx1PvIAhairCxIeUazmBdnHMdKEp2ht teMkQGL8m4PdH5ApfJOFYBfRvcZwfDQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:04 2025 by rpki-client