$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dc65559-b295-30ad-9154-e10da47c7540.roa File: 7dc65559-b295-30ad-9154-e10da47c7540.roa (raw, json) Hash identifier: e5YtLyDU7ikw3HNEYPM7HnJwa3cBE9n+xiCNVNHrONA= Subject key identifier: 94:8F:FD:EA:C9:34:99:46:B9:EE:82:D4:52:87:84:7E:12:14:34:DE Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BABFD003F9A1726B1360808A0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dc65559-b295-30ad-9154-e10da47c7540.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 399629 IP address blocks: 193.149.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:00:3f:9a:17:26:b1:36:08:08:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=af68f69b-01ba-4c53-91c8-19da836cd7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:70:3d:07:a2:d9:d0:a0:a4:45:4a:71:10:ed: a1:f7:17:a9:4f:f0:0e:b2:cc:61:8c:08:2e:69:79: 1f:92:53:ac:b8:03:67:65:48:bd:0e:11:67:82:13: ce:e8:ee:2e:41:cd:f4:53:6b:5f:88:39:d2:05:b1: 31:79:b4:85:fd:45:b0:64:c2:58:f2:8a:d1:03:f8: e1:61:49:63:6e:ce:a7:f8:dc:73:9f:6d:86:f8:5c: b3:21:50:a5:9f:51:c3:9c:dd:f4:8f:d6:70:cd:96: b2:2f:85:65:30:49:6a:55:86:d6:14:74:64:19:47: fa:da:82:e5:c6:b8:cb:96:cd:29:dd:67:b7:62:d1: 1a:7a:e3:f8:d6:0c:22:de:e9:3d:c6:96:51:91:2b: 8c:c2:22:d4:33:23:de:de:92:c6:44:b7:4a:6c:c8: 4e:98:30:1c:a2:54:53:3f:e1:cb:a2:c5:2e:6b:f3: 27:ce:10:35:43:b5:94:cd:a1:75:81:c9:37:1a:46: 34:bb:15:82:04:18:6a:d6:c5:df:9b:4b:8c:bc:c9: 0a:e2:20:cf:1b:78:65:ff:6a:08:73:ba:ee:54:63: 56:77:05:ce:9e:42:6e:94:ae:5b:bf:1f:b1:26:4c: 1e:aa:0a:e1:d0:d1:01:61:6a:e7:01:26:c4:24:90: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8F:FD:EA:C9:34:99:46:B9:EE:82:D4:52:87:84:7E:12:14:34:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dc65559-b295-30ad-9154-e10da47c7540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 193.149.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7b:da:a5:be:6d:f3:cf:50:1b:fd:94:4f:30:b4:ce:89:ce: e9:b4:e1:6f:9c:59:94:7e:41:f0:b6:80:0f:43:4c:72:b3:e5: 2c:95:d8:9b:21:f4:72:0a:43:e0:91:f9:49:b1:ab:f8:66:e0: 45:59:1e:34:2a:3d:31:3c:4d:8d:fa:a4:22:83:ff:db:5b:96: 87:7b:0a:7a:58:f8:ce:ec:72:fb:c9:d9:51:1b:0a:8a:17:fd: 7d:3f:e2:9f:e9:5d:3d:40:c3:f3:cf:26:7b:bc:80:6c:9d:1c: 30:f5:98:7e:11:31:84:ef:fb:d7:2f:db:bf:f9:dd:79:be:9d: f1:31:8d:7f:dc:8f:69:1d:64:e8:d6:96:43:09:06:1c:67:c5: e5:8a:ab:ed:86:bb:f0:ff:b5:c1:94:fe:2b:21:6f:c8:7b:88: 42:97:bc:aa:15:78:80:de:c2:69:d8:b5:c9:0f:1f:32:57:94: 76:48:58:ac:67:ee:03:45:41:6e:38:44:2c:4a:66:4f:f1:15: b6:5a:8d:5d:bd:0a:48:c6:87:8d:7c:1a:29:a7:2a:10:1c:10: 7b:0c:5f:9c:46:83:6c:11:00:26:68:30:f4:22:13:94:51:54: c0:68:23:93:1b:4e:b2:1b:64:88:26:c6:9d:9a:22:4e:83:90: 05:3d:28:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QA/mhcmsTYICKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YWY2OGY2OWItMDFiYS00YzUzLTkxYzgtMTlkYTgzNmNkN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3A9B6LZ0KCkRUpxEO2h9xepT/AOssxhjAgu aXkfklOsuANnZUi9DhFnghPO6O4uQc30U2tfiDnSBbExebSF/UWwZMJY8orRA/jh YUljbs6n+Nxzn22G+FyzIVCln1HDnN30j9ZwzZayL4VlMElqVYbWFHRkGUf62oLl xrjLls0p3We3YtEaeuP41gwi3uk9xpZRkSuMwiLUMyPe3pLGRLdKbMhOmDAcolRT P+HLosUua/MnzhA1Q7WUzaF1gck3GkY0uxWCBBhq1sXfm0uMvMkK4iDPG3hl/2oI c7ruVGNWdwXOnkJulK5bvx+xJkweqgrh0NEBYWrnASbEJJBJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSP/erJNJlGue6C1FKHhH4SFDTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvN2RjNjU1NTktYjI5NS0z MGFkLTkxNTQtZTEwZGE0N2M3NTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA972qW+bfPPUBv9lE8wtM6Jzum04W+cWZR+QfC2gA9DTHKz5SyV2Jsh 9HIKQ+CR+Umxq/hm4EVZHjQqPTE8TY36pCKD/9tblod7CnpY+M7scvvJ2VEbCooX /X0/4p/pXT1Aw/PPJnu8gGydHDD1mH4RMYTv+9cv27/53Xm+nfExjX/cj2kdZOjW lkMJBhxnxeWKq+2Gu/D/tcGU/ishb8h7iEKXvKoVeIDewmnYtckPHzJXlHZIWKxn 7gNFQW44RCxKZk/xFbZajV29CkjGh418GimnKhAcEHsMX5xGg2wRACZoMPQiE5RR VMBoI5MbTrIbZIgmxp2aIk6DkAU9KOk= -----END CERTIFICATE-----Generated at Wed Nov 5 20:48:12 2025 by rpki-client