$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa File: 4687eb35-ec35-3007-bacb-6e57bd51c87b.roa (raw, json) Hash identifier: MhBf9j7blxCov0NavORReFTnnG7WWIUnaOdrIfpKPiE= Subject key identifier: 0C:D4:83:BA:59:D8:70:49:07:13:F8:2E:7F:9A:79:E9:AE:FA:1E:13 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AE9F6678CBEB5EA8112E00B80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 399629 IP address blocks: 64.7.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:67:8c:be:b5:ea:81:12:e0:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=036bd619-c030-4bb1-b3be-d26e98bb999b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:44:48:40:61:e1:d3:4b:9a:69:56:bd:79:4b: dd:49:c1:54:a8:4f:3c:c6:5c:75:21:b8:89:c0:f0: 9b:30:c3:de:99:60:d1:61:ce:02:ca:e5:07:e9:e3: f0:bc:1f:15:3e:fa:81:7f:30:28:39:e5:52:9a:66: df:6e:92:d2:56:ff:a7:83:84:53:f0:17:f4:13:69: 27:b8:1b:e6:0d:1a:e8:e2:8e:62:b4:24:94:cd:c9: b9:75:65:0f:dd:a5:c1:cd:2c:d3:02:ca:d7:dd:da: ca:f3:c7:e1:79:b5:ad:f4:fc:21:54:91:be:f8:f2: 43:b7:90:87:f2:90:b9:49:7e:9d:d4:da:5b:1e:28: fe:16:c1:ed:6d:c2:6d:8c:57:63:90:ca:18:0b:80: 78:f0:55:17:71:5e:e0:08:5c:4e:d4:81:52:c1:62: 31:6b:9c:ba:92:41:e7:ad:05:f2:d5:8e:7c:f5:eb: ed:ec:6b:90:e3:91:d5:c1:09:cd:81:ea:df:8c:58: bd:f1:2b:6f:e6:6c:f0:b1:5c:44:57:78:2a:a1:97: d1:3c:f0:2d:e8:56:f8:c8:9d:75:71:2a:7c:24:2e: 91:fd:60:d3:32:18:dd:2b:d6:0a:6d:85:c6:e2:7e: e6:e3:c7:e6:2c:d3:63:f3:2c:74:68:e2:0b:61:dc: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D4:83:BA:59:D8:70:49:07:13:F8:2E:7F:9A:79:E9:AE:FA:1E:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4687eb35-ec35-3007-bacb-6e57bd51c87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.7.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:77:ce:c4:0e:2e:75:6a:02:93:e3:71:3f:c7:c6:11:a3:d1: 45:35:9b:c2:af:dc:e6:53:6a:5f:ba:1d:d5:24:b0:19:da:8e: b7:a6:eb:db:d4:85:1c:f5:c4:84:0c:7c:aa:4e:49:f4:44:c2: b5:75:37:09:34:50:fd:f2:29:9b:7b:4d:cc:cb:81:59:89:0c: 77:55:f5:c2:1a:cf:45:03:95:a0:d9:ee:c6:47:26:93:47:e6: c3:8a:0d:80:de:11:fe:9f:d3:b5:0f:b2:f6:69:ea:c8:55:54: bf:2d:cd:48:bc:04:9b:68:d5:b0:1d:27:38:df:3c:11:83:a3: 80:52:33:8a:a8:17:96:cd:78:ff:fb:56:d3:3e:59:57:a4:68: ab:a2:f6:00:ee:b6:93:10:b5:55:5a:03:09:97:28:2d:2e:5c: b5:fc:bc:53:ee:11:1e:7f:e8:95:4d:60:32:ad:ab:c0:45:e7: 55:59:27:af:a8:ca:f1:f7:79:24:ec:7f:3d:5b:57:af:81:7c: 65:21:f1:71:1d:d1:80:bb:be:a7:ec:bd:00:72:4c:00:bd:91: c4:d5:b9:67:a2:50:28:88:b1:bc:d7:ee:fa:60:62:02:1a:72: 2e:96:c4:4f:3d:b2:c8:89:26:85:c0:30:64:99:38:0e:62:ac: 4f:7f:78:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9meMvrXqgRLgC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MDM2YmQ2MTktYzAzMC00YmIxLWIzYmUtZDI2ZTk4YmI5OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0RIQGHh00uaaVa9eUvdScFUqE88xlx1IbiJ wPCbMMPemWDRYc4CyuUH6ePwvB8VPvqBfzAoOeVSmmbfbpLSVv+ng4RT8Bf0E2kn uBvmDRro4o5itCSUzcm5dWUP3aXBzSzTAsrX3drK88fhebWt9PwhVJG++PJDt5CH 8pC5SX6d1NpbHij+FsHtbcJtjFdjkMoYC4B48FUXcV7gCFxO1IFSwWIxa5y6kkHn rQXy1Y589evt7GuQ45HVwQnNgerfjFi98Stv5mzwsVxEV3gqoZfRPPAt6Fb4yJ11 cSp8JC6R/WDTMhjdK9YKbYXG4n7m48fmLNNj8yx0aOILYdxATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzUg7pZ2HBJBxP4Ln+aeemu+h4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDY4N2ViMzUtZWMzNS0z MDA3LWJhY2ItNmU1N2JkNTFjODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN3zsQOLnVqApPjcT/HxhGj0UU1m8Kv3OZTal+6HdUksBnajrem69vU hRz1xIQMfKpOSfREwrV1Nwk0UP3yKZt7TczLgVmJDHdV9cIaz0UDlaDZ7sZHJpNH 5sOKDYDeEf6f07UPsvZp6shVVL8tzUi8BJto1bAdJzjfPBGDo4BSM4qoF5bNeP/7 VtM+WVekaKui9gDutpMQtVVaAwmXKC0uXLX8vFPuER5/6JVNYDKtq8BF51VZJ6+o yvH3eSTsfz1bV6+BfGUh8XEd0YC7vqfsvQByTAC9kcTVuWeiUCiIsbzX7vpgYgIa ci6WxE89ssiJJoXAMGSZOA5irE9/eMI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:20 2025 by rpki-client