$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa File: e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa (raw, json) Hash identifier: LS+uwfxgTTauxIr2Df1MYEcTAhq4DSZ/aNZdxvfaqJo= Subject key identifier: 9F:53:F4:20:DB:3E:9E:85:D3:27:9B:48:C4:43:4F:18:1D:D9:AE:4E Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AC2E0F58A479744966D276E40 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 399629 IP address blocks: 206.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f5:8a:47:97:44:96:6d:27:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=6441e2b1-18bd-4d8f-bacf-b3abc7445821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fb:0a:a4:cc:d4:e4:13:89:47:6a:91:44:38: 98:2b:b8:e4:e7:e2:ad:4a:35:8d:ae:67:55:77:eb: c6:c5:f5:4f:72:79:82:89:1c:fa:fc:8b:38:9e:44: 64:09:a2:20:14:0d:78:6f:21:c9:f8:22:dd:65:e4: cd:24:83:09:06:f2:c1:36:1b:d1:41:e3:7a:c1:74: a6:fe:0f:d2:5e:11:ee:9d:02:60:6f:95:af:95:3d: 82:f1:a4:52:c8:3c:61:ab:a6:f4:5d:ac:cc:3b:22: 4a:00:3c:41:c3:04:77:3e:ee:88:16:39:51:d7:92: 3d:6d:9d:37:3c:54:9d:78:bd:80:41:f0:cd:89:b8: 40:a3:c3:bb:ac:7b:48:1d:c0:7c:04:c2:5b:57:e2: fc:45:2e:98:c5:9d:d3:6c:af:94:cd:23:1b:78:d9: 29:9f:b1:90:b0:09:c2:a0:8e:b9:8e:f2:38:53:5f: 4f:d3:6b:69:66:09:24:77:3a:bb:28:63:d0:89:67: 87:92:8c:13:da:d5:f7:c8:bc:06:73:09:cd:ef:48: 86:29:f8:b0:08:60:23:81:c3:a2:cb:84:c2:4a:1b: 68:ef:80:94:f9:a6:82:6b:7b:af:15:1b:e6:e0:33: 3d:20:41:ba:73:14:6f:bc:63:fc:19:54:eb:13:67: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:53:F4:20:DB:3E:9E:85:D3:27:9B:48:C4:43:4F:18:1D:D9:AE:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 206.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:32:ae:58:c7:5e:fa:74:fe:d9:e3:84:d4:3b:2b:23:86:88: 6f:3f:0f:2a:d0:68:52:af:57:ac:2a:56:79:6d:c1:7d:ae:9a: 5b:2d:ec:54:30:ce:6a:c3:4b:8b:50:b9:f1:75:f5:e3:ab:32: 86:b7:2d:6a:0c:f1:03:22:91:53:79:fb:2d:4f:4b:36:12:92: da:13:50:35:cb:24:69:32:e8:f5:b1:25:cb:50:2c:53:5f:6e: 97:ec:7e:41:62:1a:77:6b:85:97:4b:6b:c6:c1:c6:f7:65:39: 51:95:63:34:09:b3:f4:7c:a6:4b:55:43:4b:9d:5d:26:0d:4c: 64:b9:27:65:54:37:d4:26:f6:42:33:e2:bd:36:20:7d:02:19: 72:5b:25:85:0c:c1:37:aa:d8:b9:90:6b:2e:dd:a2:38:f8:d3: 05:89:0e:1b:d6:9f:95:5c:3e:49:56:db:df:5c:6d:23:12:c7: 26:f0:1f:2d:e9:7b:ce:2f:ff:11:41:cc:30:bf:25:26:e7:e2: 2e:6c:8e:9b:1d:28:1d:f8:95:35:dd:bc:b4:f2:f1:ea:57:c5: 90:c4:5e:7f:16:8a:ac:29:4b:a9:6c:18:96:01:44:d7:22:04: 03:57:5a:71:dc:75:91:90:9b:41:23:9c:36:0a:c5:10:3a:a7: b0:f1:df:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PWKR5dElm0nbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NjQ0MWUyYjEtMThiZC00ZDhmLWJhY2YtYjNhYmM3NDQ1ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPsKpMzU5BOJR2qRRDiYK7jk5+KtSjWNrmdV d+vGxfVPcnmCiRz6/Is4nkRkCaIgFA14byHJ+CLdZeTNJIMJBvLBNhvRQeN6wXSm /g/SXhHunQJgb5WvlT2C8aRSyDxhq6b0XazMOyJKADxBwwR3Pu6IFjlR15I9bZ03 PFSdeL2AQfDNibhAo8O7rHtIHcB8BMJbV+L8RS6YxZ3TbK+UzSMbeNkpn7GQsAnC oI65jvI4U19P02tpZgkkdzq7KGPQiWeHkowT2tX3yLwGcwnN70iGKfiwCGAjgcOi y4TCShto74CU+aaCa3uvFRvm4DM9IEG6cxRvvGP8GVTrE2eI/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9T9CDbPp6F0yebSMRDTxgd2a5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZTM0NjljMzItNjljNi0z MzlhLTliOTEtMGUxZTJhYjIyZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzrzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQyrljHXvp0/tnjhNQ7KyOGiG8/DyrQaFKvV6wqVnltwX2umlst7FQw zmrDS4tQufF19eOrMoa3LWoM8QMikVN5+y1PSzYSktoTUDXLJGky6PWxJctQLFNf bpfsfkFiGndrhZdLa8bBxvdlOVGVYzQJs/R8pktVQ0udXSYNTGS5J2VUN9Qm9kIz 4r02IH0CGXJbJYUMwTeq2LmQay7dojj40wWJDhvWn5VcPklW299cbSMSxybwHy3p e84v/xFBzDC/JSbn4i5sjpsdKB34lTXdvLTy8epXxZDEXn8WiqwpS6lsGJYBRNci BANXWnHcdZGQm0EjnDYKxRA6p7Dx360= -----END CERTIFICATE-----Generated at Wed Aug 6 04:09:21 2025 by rpki-client