$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/220e7b39-75ae-3367-8d1f-c52011aa7b40.roa File: 220e7b39-75ae-3367-8d1f-c52011aa7b40.roa (raw, json) Hash identifier: CmSF03BpJIAJdclwtGorUgyMi+HvduTUxvAJYPy2rfE= Subject key identifier: C0:2D:DD:58:AC:F6:42:A7:28:12:0C:F1:23:C8:72:B4:67:5A:69:6A Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BA39D01D2CBACB3E1E20F0F00 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/220e7b39-75ae-3367-8d1f-c52011aa7b40.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 399629 IP address blocks: 162.33.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:01:d2:cb:ac:b3:e1:e2:0f:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=a6adbc8b-1b9c-40a3-ae5f-92fd5d0ae5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8c:8a:31:75:73:d3:d0:8e:a3:f1:1a:1d:02: 82:ac:48:75:e4:db:2f:27:69:19:1a:b1:02:a6:10: c8:c2:03:94:0f:e7:55:99:18:63:38:29:2c:1e:d6: 59:be:97:97:12:c0:84:1b:65:d0:a6:7a:fc:12:39: 94:5a:5b:b8:39:df:c5:c8:22:92:96:b6:d3:db:20: 91:dd:a4:db:c2:f8:b2:a3:15:1d:59:de:60:8e:bd: 13:21:30:a5:3d:91:ea:20:6a:98:c0:bc:13:f6:3d: 04:cf:50:02:b6:71:c4:14:f1:00:90:99:ea:a4:1b: 85:83:25:39:54:61:2f:13:eb:83:24:67:33:53:af: 3b:e5:8e:06:51:8a:ba:22:e4:e2:ec:0a:26:17:a6: 40:97:7b:8e:c9:02:e7:4a:05:ae:1c:ad:65:62:3e: 3d:90:8e:22:97:eb:ce:a5:13:db:fc:fb:b6:34:1f: 28:4d:47:02:c4:16:60:1f:99:2c:36:3f:0f:1f:5b: 62:dd:0d:46:bb:e6:e9:04:c4:23:b7:d4:f1:61:a4: 49:2a:12:f0:10:f6:0c:e2:78:3c:5a:a1:6b:64:1c: 16:94:1a:f0:ab:f3:db:a2:c1:76:82:69:ae:a8:b1: e1:47:cf:36:e3:41:c9:96:d5:4f:76:dc:73:9f:c0: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2D:DD:58:AC:F6:42:A7:28:12:0C:F1:23:C8:72:B4:67:5A:69:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/220e7b39-75ae-3367-8d1f-c52011aa7b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 162.33.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:33:72:a3:2c:93:39:c0:3d:8f:84:62:32:53:7a:2e:01:85: e6:45:47:e4:fe:ca:0b:19:60:b7:53:98:b0:da:6c:5b:81:f6: da:d1:ea:7c:ba:ab:21:2e:44:15:fb:e7:61:25:69:d6:ed:89: ad:8e:3c:a7:d2:3a:f6:1c:67:94:93:c1:9a:bf:6a:e9:cb:d6: 9c:77:7a:56:2a:92:c7:7d:e7:e7:ba:6f:96:bf:0d:f4:84:06: ff:f5:44:39:fd:a1:ce:85:b1:11:a4:be:b6:47:fe:c3:c4:d5: 6b:d9:65:cd:7d:15:8c:0d:f6:a0:7e:ba:2a:41:0a:a4:b4:b2: e2:d9:be:e6:94:42:f4:a3:34:41:f4:b9:9d:b0:0e:a0:51:71: 4e:20:52:b4:c7:65:39:b5:22:cc:83:89:69:a5:fa:35:76:a5: 86:72:57:00:d8:66:86:1b:d4:20:be:72:be:b0:a9:62:b2:06: 15:2f:eb:24:a1:0c:bd:9e:a4:d3:45:bd:40:48:97:9c:e7:0a: 8a:18:c5:0b:6e:a8:e1:c6:8b:9a:a0:75:f7:71:2b:93:4d:47: 89:2b:74:7b:e6:c9:8a:bf:44:f1:57:88:dc:76:c5:40:3d:a4: 20:3f:02:cf:10:26:02:22:be:86:9e:7e:37:d4:aa:b9:80:c9: 61:41:f4:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQHSy6yz4eIPDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YTZhZGJjOGItMWI5Yy00MGEzLWFlNWYtOTJmZDVkMGFlNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYyKMXVz09COo/EaHQKCrEh15NsvJ2kZGrEC phDIwgOUD+dVmRhjOCksHtZZvpeXEsCEG2XQpnr8EjmUWlu4Od/FyCKSlrbT2yCR 3aTbwviyoxUdWd5gjr0TITClPZHqIGqYwLwT9j0Ez1ACtnHEFPEAkJnqpBuFgyU5 VGEvE+uDJGczU6875Y4GUYq6IuTi7AomF6ZAl3uOyQLnSgWuHK1lYj49kI4il+vO pRPb/Pu2NB8oTUcCxBZgH5ksNj8PH1ti3Q1Gu+bpBMQjt9TxYaRJKhLwEPYM4ng8 WqFrZBwWlBrwq/PbosF2gmmuqLHhR88240HJltVPdtxzn8AqWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAt3Vis9kKnKBIM8SPIcrRnWmlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMjIwZTdiMzktNzVhZS0z MzY3LThkMWYtYzUyMDExYWE3YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoiGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAzcqMskznAPY+EYjJTei4BheZFR+T+ygsZYLdTmLDabFuB9trR6ny6 qyEuRBX752Eladbtia2OPKfSOvYcZ5STwZq/aunL1px3elYqksd95+e6b5a/DfSE Bv/1RDn9oc6FsRGkvrZH/sPE1WvZZc19FYwN9qB+uipBCqS0suLZvuaUQvSjNEH0 uZ2wDqBRcU4gUrTHZTm1IsyDiWml+jV2pYZyVwDYZoYb1CC+cr6wqWKyBhUv6ySh DL2epNNFvUBIl5znCooYxQtuqOHGi5qgdfdxK5NNR4krdHvmyYq/RPFXiNx2xUA9 pCA/As8QJgIivoaefjfUqrmAyWFB9KQ= -----END CERTIFICATE-----Generated at Wed Nov 5 16:07:56 2025 by rpki-client