$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa File: c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa (raw, json) Hash identifier: 0G97b686MKdOfzLICrsDhztQw/Mv3d3NKkf/K664J5Q= Subject key identifier: A0:EF:46:D0:D4:B4:10:42:20:7C:67:FB:26:7D:D0:9E:FF:67:B4:7E Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BA0D25CAB0198C8159D84A080 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 399629 IP address blocks: 72.5.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5c:ab:01:98:c8:15:9d:84:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=a8910e43-81c8-42fe-b9a8-c3f5417a02d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d3:03:a2:bc:12:3e:b4:32:ac:9b:30:be:b2: ca:b8:08:ed:ed:50:df:3d:bb:b6:29:06:df:f5:22: 51:e0:d7:f2:02:45:40:60:9f:6d:53:06:15:8c:b3: 1c:ca:77:dd:9b:ad:0a:00:05:b9:9e:5e:f1:50:02: 11:d2:0b:51:fd:cf:ed:20:a8:99:0f:df:b1:50:2d: a7:fa:67:6b:a2:ef:6a:70:f6:bb:5a:a9:3a:c7:91: fa:37:36:e2:fd:92:c7:7a:68:e2:3c:a8:7a:48:73: d6:1b:70:ab:70:c2:47:0b:d8:a3:3f:9d:4c:2a:f1: 3c:66:62:16:c2:d4:14:4a:dc:bf:9f:08:ae:d1:f8: c7:0b:b6:56:5c:4b:0d:40:b4:fe:b4:00:14:5f:99: de:7a:2d:b3:7d:32:71:44:8a:61:88:84:44:a1:6d: c6:c1:fa:d4:07:86:59:9d:06:78:42:66:70:3b:cc: d7:bd:05:58:c6:c2:7b:f7:79:dd:8e:0e:0f:4e:df: 8d:a1:50:b6:da:78:24:fb:84:57:97:bc:16:0a:5c: 56:e8:31:90:de:ef:f7:38:a4:35:4d:83:03:a8:bb: 2a:0d:ed:13:91:a9:4a:d2:af:71:c8:13:3e:16:42: 4b:9f:5d:de:7d:66:96:25:f9:12:d4:ca:ef:47:d8: 31:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EF:46:D0:D4:B4:10:42:20:7C:67:FB:26:7D:D0:9E:FF:67:B4:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 72.5.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ce:e1:7e:5a:a1:69:5b:cd:78:2a:5e:99:cf:6f:e5:ed:94: 48:4d:42:a5:e9:c4:9d:d7:9c:e5:83:76:82:0f:81:97:82:7c: 6c:f3:67:47:ae:80:3b:e6:b3:9a:e9:20:cf:8a:dd:ef:ed:28: 38:49:42:5b:4e:1c:7f:70:2e:2d:01:16:db:c7:fe:c1:0c:60: 1c:12:72:05:e7:92:42:86:10:78:84:8a:19:67:36:24:f4:25: f2:04:6e:c7:8b:2d:9d:0a:06:e9:e8:fe:62:cc:3d:f9:99:37: 15:63:9e:fd:e6:d4:11:6e:04:ed:9b:81:fd:3b:b8:99:3f:fc: 3b:b0:e7:e5:ca:ca:af:b1:7e:a4:61:69:88:a5:8a:67:d0:29: 6a:b1:cc:7d:79:17:1c:50:09:ca:6e:9b:c4:f2:fc:c4:52:25: 00:2f:d9:20:c4:19:4b:14:6a:80:61:3c:a8:1b:c3:a6:b1:15: 87:57:4d:16:f6:1c:60:05:7e:9c:ed:73:15:f7:4d:c1:49:4c: c2:54:dd:9f:3e:81:ae:f9:a1:f1:7f:ce:63:c9:7f:05:2c:1f: a3:f0:13:0f:94:e3:57:86:7c:8c:03:ff:64:c3:ae:e4:d5:1a: 30:bc:1e:12:b9:9d:94:15:6f:f0:e7:37:30:07:f5:a5:dd:d3: 3a:78:94:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lyrAZjIFZ2EoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YTg5MTBlNDMtODFjOC00MmZlLWI5YTgtYzNmNTQxN2EwMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtMDorwSPrQyrJswvrLKuAjt7VDfPbu2KQbf 9SJR4NfyAkVAYJ9tUwYVjLMcynfdm60KAAW5nl7xUAIR0gtR/c/tIKiZD9+xUC2n +mdrou9qcPa7Wqk6x5H6Nzbi/ZLHemjiPKh6SHPWG3CrcMJHC9ijP51MKvE8ZmIW wtQUSty/nwiu0fjHC7ZWXEsNQLT+tAAUX5neei2zfTJxRIphiIREoW3GwfrUB4ZZ nQZ4QmZwO8zXvQVYxsJ793ndjg4PTt+NoVC22ngk+4RXl7wWClxW6DGQ3u/3OKQ1 TYMDqLsqDe0TkalK0q9xyBM+FkJLn13efWaWJfkS1MrvR9gxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDvRtDUtBBCIHxn+yZ90J7/Z7R+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYzFjYWI3YjQtNTcyYy0z NWIwLWI2YjYtZmIyYTg2ZmVlY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSAUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDO4X5aoWlbzXgqXpnPb+XtlEhNQqXpxJ3XnOWDdoIPgZeCfGzzZ0eu gDvms5rpIM+K3e/tKDhJQltOHH9wLi0BFtvH/sEMYBwScgXnkkKGEHiEihlnNiT0 JfIEbseLLZ0KBuno/mLMPfmZNxVjnv3m1BFuBO2bgf07uJk//Duw5+XKyq+xfqRh aYilimfQKWqxzH15FxxQCcpum8Ty/MRSJQAv2SDEGUsUaoBhPKgbw6axFYdXTRb2 HGAFfpztcxX3TcFJTMJU3Z8+ga75ofF/zmPJfwUsH6PwEw+U41eGfIwD/2TDruTV GjC8HhK5nZQVb/DnNzAH9aXd0zp4lJo= -----END CERTIFICATE-----Generated at Wed Nov 5 16:07:43 2025 by rpki-client