$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa File: e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa (raw, json) Hash identifier: ErteQ5x6+9ipFV8AIRkzbq53xWoyD2SCuV1VX/htsKc= Subject key identifier: 92:78:8B:4B:2A:C0:68:F1:04:48:90:C4:B5:B9:03:C0:73:0F:48:42 Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F4328584BC270549B8CF5015DA9B8ED00 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 16509 IP address blocks: 199.19.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:54:9b:8c:f5:01:5d:a9:b8:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=5132c0c3-210e-40a6-b606-5c128a43dcaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e6:52:9f:d2:06:d1:1f:56:90:a5:9b:aa:54: be:5f:c8:70:28:4b:8a:dd:94:36:47:41:89:97:7b: 39:99:c1:93:9f:1b:00:b1:78:61:88:40:bc:af:32: 9b:ca:b0:91:d5:12:84:33:d8:ce:b5:e0:bc:8c:ea: a4:82:ef:1e:a7:67:ac:a2:5c:62:c5:67:10:c9:a4: d1:bf:c7:17:3c:1e:a6:9c:13:87:07:5a:01:4f:ab: 88:7c:1b:c1:6a:06:3a:84:a2:2a:de:37:ce:7e:27: 96:39:d2:ca:03:b7:b5:0e:4b:25:11:50:90:e6:01: 1c:ba:dd:8f:83:f6:eb:87:f7:97:75:c6:c3:14:9d: ce:a4:c3:86:41:18:03:09:ea:f1:f2:97:3e:11:b9: fa:04:84:69:09:9b:62:13:56:66:fd:84:32:24:16: 44:b6:39:32:dc:ff:a5:b2:49:f0:f3:1f:c8:3e:60: b7:f2:6a:b8:87:46:ef:4f:40:53:56:da:a7:d6:5a: ca:0f:04:c4:74:25:2d:95:17:b7:34:9d:93:cd:1a: a5:05:f3:78:26:ad:6d:ae:90:26:dd:3a:a2:e5:bc: 36:08:3e:be:84:a3:93:fb:12:8d:cb:1a:40:33:12: 90:4f:5d:fe:9e:a4:01:6b:bd:e4:a4:53:dc:3e:cf: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:78:8B:4B:2A:C0:68:F1:04:48:90:C4:B5:B9:03:C0:73:0F:48:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/e32dca6f-e0d7-3a1f-b51e-a2dda4a8b2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 199.19.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:9c:13:bf:02:9e:76:98:6f:af:0e:50:f7:20:b2:53:af:32: ce:5b:3d:99:20:dc:2d:42:be:a9:b2:28:1a:8d:46:ac:f6:19: 3e:a7:50:80:70:06:78:d8:e0:8f:a4:f0:dc:bd:59:77:38:bc: 17:43:48:1e:3f:34:fe:b5:e0:6c:ae:1d:fd:1e:cc:45:a7:37: 1e:34:6d:da:8a:78:d1:72:f7:07:64:71:f7:90:b1:e6:fa:9e: dc:6c:9c:de:2c:1b:00:83:57:e9:52:75:d9:c6:ab:24:23:5e: 02:44:8b:2b:9b:7f:84:fc:07:9c:88:69:88:99:5f:a5:cc:70: 56:32:ee:ec:69:f0:28:a1:4d:04:a8:f8:65:fb:9b:2d:7b:7a: 2d:0f:d0:20:1a:59:02:7c:47:3f:a5:00:ee:89:94:80:d7:4e: f4:12:e0:31:32:cf:95:eb:92:ea:8a:13:31:84:58:0d:d6:ce: fa:a7:5f:ff:d4:32:05:21:7f:cd:d8:dc:52:a7:6e:cd:b6:0a: f1:2c:3c:21:cb:96:ec:8f:4d:86:ec:ff:dd:69:79:73:a0:d6: 9a:5e:3b:ec:ab:31:99:c6:55:d8:1c:78:e5:35:f7:08:8e:db: ef:10:6c:31:94:b9:fd:19:e8:8a:00:1a:db:e5:25:76:b8:c4: ad:fd:41:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcFSbjPUBXam47QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk NTEzMmMwYzMtMjEwZS00MGE2LWI2MDYtNWMxMjhhNDNkY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeZSn9IG0R9WkKWbqlS+X8hwKEuK3ZQ2R0GJ l3s5mcGTnxsAsXhhiEC8rzKbyrCR1RKEM9jOteC8jOqkgu8ep2esolxixWcQyaTR v8cXPB6mnBOHB1oBT6uIfBvBagY6hKIq3jfOfieWOdLKA7e1DkslEVCQ5gEcut2P g/brh/eXdcbDFJ3OpMOGQRgDCerx8pc+Ebn6BIRpCZtiE1Zm/YQyJBZEtjky3P+l sknw8x/IPmC38mq4h0bvT0BTVtqn1lrKDwTEdCUtlRe3NJ2TzRqlBfN4Jq1trpAm 3Tqi5bw2CD6+hKOT+xKNyxpAMxKQT13+nqQBa73kpFPcPs9t4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJ4i0sqwGjxBEiQxLW5A8BzD0hCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvZTMyZGNhNmYtZTBkNy0z YTFmLWI1MWUtYTJkZGE0YThiMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJicE78CnnaYb68OUPcgslOvMs5bPZkg3C1CvqmyKBqNRqz2GT6nUIBw BnjY4I+k8Ny9WXc4vBdDSB4/NP614GyuHf0ezEWnNx40bdqKeNFy9wdkcfeQseb6 ntxsnN4sGwCDV+lSddnGqyQjXgJEiyubf4T8B5yIaYiZX6XMcFYy7uxp8CihTQSo +GX7my17ei0P0CAaWQJ8Rz+lAO6JlIDXTvQS4DEyz5XrkuqKEzGEWA3WzvqnX//U MgUhf83Y3FKnbs22CvEsPCHLluyPTYbs/91peXOg1ppeO+yrMZnGVdgceOU19wiO 2+8QbDGUuf0Z6IoAGtvlJXa4xK39QRE= -----END CERTIFICATE-----Generated at Wed Nov 5 23:41:59 2025 by rpki-client