$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a44c2c1c-4691-354f-8ceb-657a4e2af913.roa File: a44c2c1c-4691-354f-8ceb-657a4e2af913.roa (raw, json) Hash identifier: l5r/Qdd/NP2EXW4Ec2h8MmYuNpWU0U4S9OiWm0356o4= Subject key identifier: 44:32:2E:CA:66:3D:28:EA:D6:3C:D3:B5:CC:54:F5:45:E3:4D:89:70 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BC21E58782CC073166637C1A0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a44c2c1c-4691-354f-8ceb-657a4e2af913.roa Signing time: Wed 05 Nov 2025 11:15:40 +0000 ROA not before: Wed 05 Nov 2025 11:15:40 +0000 ROA not after: Tue 03 Feb 2026 11:15:40 +0000 asID: 399629 IP address blocks: 64.111.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:1e:58:78:2c:c0:73:16:66:37:c1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Nov 5 11:15:40 2025 GMT Not After : Feb 3 11:15:40 2026 GMT Subject: CN=39eb1f9f-31b6-4eae-bd3f-29cb261881bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f1:4a:27:f8:e2:81:e3:17:d4:2d:a7:5a:70: 42:c8:de:d3:67:42:ed:da:cb:ab:9a:44:61:17:ee: 27:e8:1a:3f:6d:a1:1f:26:b2:96:7e:bc:ef:e6:b0: 07:23:3b:c3:a6:ef:88:0a:d5:a8:4f:89:b9:12:f1: e6:80:14:4f:4a:f4:58:4d:ef:7e:d1:0f:9f:07:aa: d7:15:4b:a2:17:69:b4:8a:bf:5b:49:da:c5:7e:94: 9d:06:60:0b:97:7a:97:8d:2d:9f:95:99:f6:6b:ba: fe:90:38:14:c8:13:c2:15:f4:77:3c:e8:82:e4:22: 39:94:bd:cb:91:ab:d7:48:63:72:9a:e3:eb:ba:e3: c7:2b:c8:55:70:15:2f:19:da:cf:28:af:00:c2:c4: 7f:04:ad:9c:03:73:85:26:10:55:b8:33:ab:34:c3: 8c:0c:4c:81:90:c1:76:83:4e:54:43:4b:56:62:39: b1:e3:15:39:84:59:a5:8b:f0:b9:87:ad:12:83:d5: ef:f1:70:47:63:4a:f4:83:a3:0a:8d:dc:ea:13:b1: 94:cd:24:2a:91:7a:6a:9f:3b:fa:fc:1a:21:54:10: 85:f0:41:48:cd:b6:5f:2f:79:4e:62:35:f9:0c:22: 31:24:a4:9f:c4:b7:89:7a:74:b2:1c:40:10:b7:83: 5f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:32:2E:CA:66:3D:28:EA:D6:3C:D3:B5:CC:54:F5:45:E3:4D:89:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a44c2c1c-4691-354f-8ceb-657a4e2af913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.111.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c9:50:d9:79:cb:7e:51:f6:24:b3:5e:8e:63:a6:e3:f5:6f: e9:a5:4c:e5:b7:ba:a5:59:5a:85:31:41:04:f9:1b:bd:c4:e4: fc:24:96:36:69:e7:23:2e:34:ba:68:de:44:15:7f:27:da:9b: 68:a3:f3:71:c8:73:57:46:1d:b2:cb:77:f3:38:c9:00:9e:53: a2:ec:7d:a8:c8:a1:d5:69:e4:b8:00:4d:fb:73:3a:f2:1e:e5: e9:29:a7:96:95:73:08:13:54:99:0c:7f:ed:d7:73:0a:c7:3a: cf:a0:91:4c:ae:c2:ef:66:24:23:15:56:25:22:da:49:90:5e: c8:fc:5a:21:82:63:9c:e2:3b:96:7e:d9:09:4b:b5:35:e1:91: 9a:49:26:7c:7e:1d:e0:fc:f2:b6:52:35:54:ef:93:c9:0a:ce: ee:d2:bf:d5:c6:a9:b3:11:37:a4:ed:a3:f6:da:55:bb:9d:b3: 94:97:a5:73:da:8d:22:ce:a0:d2:bc:b6:28:20:89:70:41:e7: cf:4f:50:be:78:d2:b1:fb:88:08:fd:02:cc:3c:c0:3f:9d:13: ce:a8:d4:da:8c:80:46:36:e7:c5:a9:69:52:8c:77:bd:d2:aa: a0:9a:97:54:fa:20:ca:4d:74:12:8f:d2:96:79:4b:69:1d:9f: 68:a4:44:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCHlh4LMBzFmY3waAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTEwNTExMTU0MFoXDTI2MDIwMzExMTU0MFowLzEtMCsGA1UEAxMk MzllYjFmOWYtMzFiNi00ZWFlLWJkM2YtMjljYjI2MTg4MWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/FKJ/jigeMX1C2nWnBCyN7TZ0Lt2surmkRh F+4n6Bo/baEfJrKWfrzv5rAHIzvDpu+ICtWoT4m5EvHmgBRPSvRYTe9+0Q+fB6rX FUuiF2m0ir9bSdrFfpSdBmALl3qXjS2flZn2a7r+kDgUyBPCFfR3POiC5CI5lL3L kavXSGNymuPruuPHK8hVcBUvGdrPKK8AwsR/BK2cA3OFJhBVuDOrNMOMDEyBkMF2 g05UQ0tWYjmx4xU5hFmli/C5h60Sg9Xv8XBHY0r0g6MKjdzqE7GUzSQqkXpqnzv6 /BohVBCF8EFIzbZfL3lOYjX5DCIxJKSfxLeJenSyHEAQt4NfHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQyLspmPSjq1jzTtcxU9UXjTYlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTQ0YzJjMWMtNDY5MS0z NTRmLThjZWItNjU3YTRlMmFmOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQG9cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbJUNl5y35R9iSzXo5jpuP1b+mlTOW3uqVZWoUxQQT5G73E5PwkljZp 5yMuNLpo3kQVfyfam2ij83HIc1dGHbLLd/M4yQCeU6LsfajIodVp5LgATftzOvIe 5ekpp5aVcwgTVJkMf+3XcwrHOs+gkUyuwu9mJCMVViUi2kmQXsj8WiGCY5ziO5Z+ 2QlLtTXhkZpJJnx+HeD88rZSNVTvk8kKzu7Sv9XGqbMRN6Tto/baVbuds5SXpXPa jSLOoNK8tiggiXBB589PUL540rH7iAj9Asw8wD+dE86o1NqMgEY258WpaVKMd73S qqCal1T6IMpNdBKP0pZ5S2kdn2ikRJo= -----END CERTIFICATE-----Generated at Wed Nov 5 20:42:43 2025 by rpki-client