$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa File: ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa (raw, json) Hash identifier: qGSjwBAj0RCqruUiKwWrh8eP0Qfhtgntmi55tScFJBg= Subject key identifier: 98:C8:8A:02:A6:FB:1A:6F:02:01:22:F9:72:61:9F:1B:F7:83:35:44 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BA667ABCE9D05F05F481B5580 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 399629 IP address blocks: 216.245.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ab:ce:9d:05:f0:5f:48:1b:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=009de7e7-4931-48f2-a801-3252ced02a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:d0:07:50:fa:ba:9e:90:28:d5:32:21:38: 2a:7b:dc:f5:40:ee:db:97:3a:54:01:45:8d:6e:7b: 47:1c:43:42:56:3b:0e:73:cb:b7:46:2a:92:10:18: 1e:6c:12:02:44:c8:8e:34:db:b4:b6:19:ed:37:bd: ae:e9:2a:cc:29:c6:d6:6d:96:d1:7d:8d:48:be:00: 90:67:7f:5a:be:28:f8:e0:92:87:03:96:37:39:1b: e9:9c:d6:8e:c0:03:0f:82:24:94:ef:7a:4b:29:2e: 1f:d1:5e:70:48:f5:a1:56:d2:37:d0:59:8a:d2:2a: 64:aa:4d:11:a8:5a:68:15:ef:0b:d5:d2:bd:97:95: 7b:43:ab:a0:bd:f6:2e:9f:be:fa:f2:2f:f5:45:7b: f4:28:04:5c:2a:33:71:c7:79:31:a7:3d:26:7b:d2: c7:da:72:6b:1a:68:7b:9c:eb:75:95:7d:81:08:4a: 19:7b:c9:85:5f:2f:98:c3:cc:f6:7e:70:e2:88:a6: 7d:7e:8b:65:0b:dc:e9:28:2e:6c:99:2e:ce:41:00: 0a:48:92:93:0f:c0:40:56:90:aa:bc:ef:55:a6:31: b2:7d:8b:76:5c:76:a8:50:f4:28:0d:24:ac:4d:aa: 70:6a:e3:d2:83:51:02:72:b1:d9:f3:69:e6:bd:46: ad:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C8:8A:02:A6:FB:1A:6F:02:01:22:F9:72:61:9F:1B:F7:83:35:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ad8b08da-a33e-3663-b80b-ba5eeaa40bfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 216.245.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:dd:01:90:ba:84:f1:f6:9a:35:42:9f:42:03:97:3c:83:4f: e1:f5:65:44:c0:b7:ed:ca:24:17:d9:80:4d:7f:32:ec:c3:fc: 4c:3a:53:67:97:5d:40:b9:3a:29:66:89:2d:d8:31:53:8d:7d: 61:2f:71:56:8a:70:10:19:90:b3:f4:a5:15:e3:71:50:83:9d: 9a:21:fd:b1:a8:9d:06:e3:47:7b:04:75:a8:40:18:dd:7e:f9: 7f:d8:f2:1a:9f:a5:cb:ba:c9:e0:13:6d:9b:85:cf:21:0f:d0: fc:f7:1d:d7:2d:ab:2b:f5:92:d8:1d:45:35:7a:de:d4:d8:b1: 70:6f:26:e8:86:61:90:ea:ad:e2:b2:f6:1f:be:fa:b0:ca:f3: ea:a8:ba:8c:c9:cc:d7:dd:7e:70:b5:b0:05:e1:1f:e9:ee:67: 18:bb:bc:80:28:4b:4f:ab:d4:2a:40:6f:34:1b:27:f9:71:f1: d2:94:12:ca:7a:a5:d6:f6:4e:67:1d:b9:c8:34:ea:3c:c2:a3: 80:87:96:e2:9d:e5:73:85:ec:dd:1c:a4:87:70:7f:51:aa:eb: 54:0b:ba:ea:b4:da:95:7f:be:ae:ac:2f:65:2e:79:dd:6e:46: 29:94:2a:34:ec:7c:19:26:60:57:36:97:b8:d0:15:c7:fd:df: 53:ce:d1:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6vOnQXwX0gbVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MDA5ZGU3ZTctNDkzMS00OGYyLWE4MDEtMzI1MmNlZDAyYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHHQB1D6up6QKNUyITgqe9z1QO7blzpUAUWN bntHHENCVjsOc8u3RiqSEBgebBICRMiONNu0thntN72u6SrMKcbWbZbRfY1IvgCQ Z39avij44JKHA5Y3ORvpnNaOwAMPgiSU73pLKS4f0V5wSPWhVtI30FmK0ipkqk0R qFpoFe8L1dK9l5V7Q6ugvfYun7768i/1RXv0KARcKjNxx3kxpz0me9LH2nJrGmh7 nOt1lX2BCEoZe8mFXy+Yw8z2fnDiiKZ9fotlC9zpKC5smS7OQQAKSJKTD8BAVpCq vO9VpjGyfYt2XHaoUPQoDSSsTapwauPSg1ECcrHZ82nmvUataQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjIigKm+xpvAgEi+XJhnxv3gzVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYWQ4YjA4ZGEtYTMzZS0z NjYzLWI4MGItYmE1ZWVhYTQwYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACndAZC6hPH2mjVCn0IDlzyDT+H1ZUTAt+3KJBfZgE1/MuzD/Ew6U2eX XUC5OilmiS3YMVONfWEvcVaKcBAZkLP0pRXjcVCDnZoh/bGonQbjR3sEdahAGN1+ +X/Y8hqfpcu6yeATbZuFzyEP0Pz3Hdctqyv1ktgdRTV63tTYsXBvJuiGYZDqreKy 9h+++rDK8+qouozJzNfdfnC1sAXhH+nuZxi7vIAoS0+r1CpAbzQbJ/lx8dKUEsp6 pdb2Tmcducg06jzCo4CHluKd5XOF7N0cpIdwf1Gq61QLuuq02pV/vq6sL2Uued1u RimUKjTsfBkmYFc2l7jQFcf931PO0Tc= -----END CERTIFICATE-----Generated at Wed Nov 5 19:13:41 2025 by rpki-client