$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa File: e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa (raw, json) Hash identifier: jAFNXZMEgrQQq504WNkxcEz+A9v/rtKAUE8ucCNiWTQ= Subject key identifier: 95:F8:54:66:51:AD:F4:6E:DD:8A:FD:9D:1C:E6:9F:ED:07:AA:DF:DB Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F4328584A00DABDA35783AD00876C2FC4 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 16509 IP address blocks: 199.19.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:bd:a3:57:83:ad:00:87:6c:2f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=6a7c3589-9e97-42fb-be22-95ce8127944b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7f:d2:ce:f5:61:70:55:68:cb:45:ec:24:38: 6d:2f:e8:e9:42:27:d8:8b:12:f9:62:4c:f6:0c:02: f2:b8:bc:1f:42:fb:32:34:6f:18:08:59:5d:b9:3c: 8f:34:e4:0d:9b:86:e9:0f:53:49:68:20:01:64:e2: 90:fe:11:3e:32:fe:05:95:56:ae:71:bf:6b:7e:0f: 53:d2:1c:e4:4e:0c:3b:43:89:80:28:41:45:ce:77: 4f:4b:f4:99:b9:b7:23:4f:9d:32:e9:a9:98:74:1f: 24:b4:80:a1:ad:55:10:01:f0:f6:f5:fd:02:17:b1: 32:16:a7:8f:6b:d8:14:be:e9:89:bc:a8:ff:89:b3: b3:a5:e1:f2:81:67:24:38:da:7e:db:fa:38:ac:26: eb:12:02:9d:1e:a8:8a:4d:a6:61:c1:c8:32:36:91: 55:6b:b4:df:ce:e7:9c:1d:71:46:7e:70:b3:4f:b0: fa:c8:2a:80:1b:77:c9:a9:6a:eb:09:11:36:b8:36: 00:18:bf:1e:a7:95:50:2f:c8:18:eb:b4:1e:fa:2c: 4e:68:ce:bf:45:67:2f:cd:a7:6d:9e:68:70:9b:40: 5f:a7:aa:8e:c6:21:1c:b3:2e:96:3a:a6:95:55:31: 9c:df:58:63:9b:45:7d:33:a9:c2:29:36:c6:14:01: 23:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F8:54:66:51:AD:F4:6E:DD:8A:FD:9D:1C:E6:9F:ED:07:AA:DF:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 199.19.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d6:e3:50:63:03:0d:1b:2b:2e:95:4f:12:21:68:19:d6:d4: fd:9e:11:6d:dd:07:4b:1d:8e:99:82:69:fe:85:96:c9:66:fb: 37:e6:08:12:db:cf:d9:8b:5e:c5:5d:88:a6:5f:1f:eb:25:ac: 0c:45:bb:58:6f:2e:2c:5f:cd:d1:91:38:12:4a:de:f8:d6:dd: 3b:13:a8:91:ce:08:55:36:9e:0f:c4:2a:a5:15:7e:75:1a:5b: a2:75:3b:26:39:44:b1:6d:0d:19:43:24:a4:21:00:3f:4a:3c: 8e:22:7f:12:de:8a:90:bc:12:48:14:bc:1c:53:e5:f9:c2:f5: f2:b8:eb:04:5b:70:cd:ce:97:03:dd:11:a4:10:54:8e:41:1a: a1:3d:17:1b:fd:32:d7:44:82:18:e3:e3:b5:ee:e1:29:17:0d: 3a:c7:76:85:88:92:76:c2:8f:9e:39:ec:5f:c1:92:59:3f:f3: 3b:1d:96:d4:49:89:27:0c:f7:d6:25:f1:ef:bc:a0:d6:42:0b: 0a:bf:e4:57:a6:14:8f:c9:82:9c:4e:f7:9e:65:dc:7b:05:40: 44:e8:e1:5d:a7:31:83:d0:f6:3e:d9:2f:92:26:70:79:98:0e: b5:39:3c:63:c2:3b:cc:f1:78:f8:da:f8:55:9b:62:11:fa:48: 47:82:ce:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2r2jV4OtAIdsL8QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NmE3YzM1ODktOWU5Ny00MmZiLWJlMjItOTVjZTgxMjc5NDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn/SzvVhcFVoy0XsJDhtL+jpQifYixL5Ykz2 DALyuLwfQvsyNG8YCFlduTyPNOQNm4bpD1NJaCABZOKQ/hE+Mv4FlVaucb9rfg9T 0hzkTgw7Q4mAKEFFzndPS/SZubcjT50y6amYdB8ktIChrVUQAfD29f0CF7EyFqeP a9gUvumJvKj/ibOzpeHygWckONp+2/o4rCbrEgKdHqiKTaZhwcgyNpFVa7Tfzuec HXFGfnCzT7D6yCqAG3fJqWrrCRE2uDYAGL8ep5VQL8gY67Qe+ixOaM6/RWcvzadt nmhwm0Bfp6qOxiEcsy6WOqaVVTGc31hjm0V9M6nCKTbGFAEjLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX4VGZRrfRu3Yr9nRzmn+0Hqt/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvZTMyZGNhNmYtZTBkNy0z YTFmLWI1MWUtYTJkZGE0YThiMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3W41BjAw0bKy6VTxIhaBnW1P2eEW3dB0sdjpmCaf6Flslm+zfmCBLb z9mLXsVdiKZfH+slrAxFu1hvLixfzdGROBJK3vjW3TsTqJHOCFU2ng/EKqUVfnUa W6J1OyY5RLFtDRlDJKQhAD9KPI4ifxLeipC8EkgUvBxT5fnC9fK46wRbcM3OlwPd EaQQVI5BGqE9Fxv9MtdEghjj47Xu4SkXDTrHdoWIknbCj5457F/Bklk/8zsdltRJ iScM99Yl8e+8oNZCCwq/5FemFI/JgpxO955l3HsFQETo4V2nMYPQ9j7ZL5ImcHmY DrU5PGPCO8zxePja+FWbYhH6SEeCzhw= -----END CERTIFICATE-----Generated at Sat Jun 14 05:46:37 2025 by rpki-client