$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa File: c3413d44-6361-3bcc-85d8-85eba7c9db70.roa (raw, json) Hash identifier: chCqJ89QZAe+XoLXunRHeENSwvhr5Ffon82vCzYy5d8= Subject key identifier: E5:C4:94:DE:E4:40:53:97:A0:62:49:89:5D:71:6D:4A:EC:D2:60:5E Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BA39D121E3F100A3405B78500 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 399629 IP address blocks: 206.166.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:12:1e:3f:10:0a:34:05:b7:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=25ba48a1-bb65-4c61-9ad8-c0c5df976bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:5e:4e:56:8e:be:0a:59:a0:61:aa:19:da: ed:4a:46:90:13:d3:84:9b:aa:f5:72:a1:e2:41:1c: ec:1a:1f:68:d2:8c:9e:df:1d:9c:e0:bc:fa:20:cd: 78:48:ec:ba:fa:45:72:30:f2:d6:bc:36:57:78:6b: d1:47:c2:66:8b:00:52:db:cb:7b:bf:2d:96:f7:75: a2:30:03:a2:e5:b2:69:96:50:90:3d:17:23:af:02: 09:74:90:d0:e2:29:94:d6:c9:f4:72:ba:c6:a1:83: e1:a3:cc:c8:0b:a9:06:f3:ba:e7:73:79:00:fd:d2: b4:52:8f:19:a6:f1:eb:fe:a4:06:83:10:d1:e2:cc: 15:3c:43:74:0a:0e:09:74:03:5d:ec:36:fc:32:5a: ec:7f:cf:81:74:20:22:c4:bd:a8:b2:70:43:aa:1a: 43:12:30:d7:dd:ab:f0:dd:03:62:bc:85:a0:e1:6d: 9a:ab:fa:23:f9:c4:c9:7f:7f:b2:e1:37:f5:95:44: 30:ab:bd:95:8f:2a:65:7e:74:77:26:9c:1f:08:b8: f9:9c:4a:89:9a:9d:f8:65:3b:1b:ac:c3:75:27:f9: 35:1e:58:db:69:33:f4:e5:ce:0f:12:58:66:06:76: 1b:d8:9d:d6:2b:31:95:aa:6a:c7:f4:e5:d1:d3:e1: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C4:94:DE:E4:40:53:97:A0:62:49:89:5D:71:6D:4A:EC:D2:60:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c3413d44-6361-3bcc-85d8-85eba7c9db70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 206.166.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:38:f4:bf:9b:05:17:44:c3:d4:1b:33:cb:47:12:cf:d3:c7: e6:9a:1d:04:be:98:16:4b:fc:21:6e:2e:13:2c:bc:b0:5d:78: 6b:32:73:d1:ef:fc:4c:0a:1f:3d:21:57:20:d2:c6:a3:53:8d: 89:67:69:c4:51:e6:c7:3a:18:3f:8d:35:5b:34:25:bb:7b:fb: c8:26:45:c8:f8:2a:d7:19:fc:00:ed:e6:b8:50:b8:fb:9f:b6: 03:89:04:f0:9b:77:4b:b4:f1:72:10:ac:56:5b:d6:b0:50:e2: e5:35:58:5c:66:47:88:6f:e4:64:39:81:40:17:4f:d8:0e:eb: 11:86:00:83:5e:9e:d3:53:5b:b8:6c:26:0b:78:e9:51:f4:76: 74:a7:7c:0f:81:9e:66:0f:66:71:22:69:81:d5:25:28:47:bc: 19:4e:89:00:67:14:ce:fa:a7:c0:d3:61:5d:eb:43:4f:5b:d0: a5:1f:3f:5a:ac:53:e6:f8:04:db:5e:29:89:8a:06:d0:9b:d9: 00:4d:36:19:6b:ac:84:8a:98:7a:48:b7:46:4b:b1:c5:71:5b: 76:66:5a:bd:0c:67:b8:35:9c:a4:84:b4:7a:c9:2d:29:f6:f8: 1b:b8:3b:dd:1d:ef:e7:a3:b1:00:a5:38:95:60:00:3f:7b:8f: 34:59:e5:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRIePxAKNAW3hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MjViYTQ4YTEtYmI2NS00YzYxLTlhZDgtYzBjNWRmOTc2YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV5eTlaOvgpZoGGqGdrtSkaQE9OEm6r1cqHi QRzsGh9o0oye3x2c4Lz6IM14SOy6+kVyMPLWvDZXeGvRR8JmiwBS28t7vy2W93Wi MAOi5bJpllCQPRcjrwIJdJDQ4imU1sn0crrGoYPho8zIC6kG87rnc3kA/dK0Uo8Z pvHr/qQGgxDR4swVPEN0Cg4JdANd7Db8Mlrsf8+BdCAixL2osnBDqhpDEjDX3avw 3QNivIWg4W2aq/oj+cTJf3+y4Tf1lUQwq72VjyplfnR3JpwfCLj5nEqJmp34ZTsb rMN1J/k1HljbaTP05c4PElhmBnYb2J3WKzGVqmrH9OXR0+HD+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXElN7kQFOXoGJJiV1xbUrs0mBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYzM0MTNkNDQtNjM2MS0z YmNjLTg1ZDgtODVlYmE3YzlkYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU49L+bBRdEw9QbM8tHEs/Tx+aaHQS+mBZL/CFuLhMsvLBdeGsyc9Hv /EwKHz0hVyDSxqNTjYlnacRR5sc6GD+NNVs0Jbt7+8gmRcj4KtcZ/ADt5rhQuPuf tgOJBPCbd0u08XIQrFZb1rBQ4uU1WFxmR4hv5GQ5gUAXT9gO6xGGAINentNTW7hs Jgt46VH0dnSnfA+BnmYPZnEiaYHVJShHvBlOiQBnFM76p8DTYV3rQ09b0KUfP1qs U+b4BNteKYmKBtCb2QBNNhlrrISKmHpIt0ZLscVxW3ZmWr0MZ7g1nKSEtHrJLSn2 +Bu4O90d7+ejsQClOJVgAD97jzRZ5cw= -----END CERTIFICATE-----Generated at Wed Nov 5 16:07:46 2025 by rpki-client