$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa File: ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa (raw, json) Hash identifier: /OtjsuzGFGecuZA5RHVLvp830MoHAo7eEGrkV+bGCtA= Subject key identifier: 0E:7A:10:9E:EC:C8:C9:7C:D9:14:07:71:AC:10:E5:25:39:14:38:26 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BABFD00850353BF8186368B80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 399629 IP address blocks: 193.149.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:00:85:03:53:bf:81:86:36:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=8f553996-947b-4b9f-95ac-ceffc5532ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:a0:af:08:18:8e:3e:5a:4f:a5:61:dd:b6: d2:ab:5a:f0:fc:c9:f0:c9:0f:1d:a6:51:64:77:5b: ad:8f:b7:b8:b3:cc:ac:e5:4c:a3:6b:a5:d0:27:60: fc:d6:bf:fb:42:48:0f:28:e4:5b:71:19:fb:e6:d4: 68:a1:6e:7e:42:f5:6c:7b:13:11:d8:1f:7e:e2:39: fb:6c:95:3e:2d:b1:d9:dc:81:91:3a:e9:ac:50:56: ab:6b:57:aa:1c:b0:c0:e3:0a:bc:d2:1a:b2:4f:2a: f1:78:40:9d:2e:0d:1a:f8:3d:67:28:c4:b4:59:e9: e4:93:90:0d:4b:54:45:de:23:5a:f0:fe:4b:0d:7c: 86:b7:86:cc:b1:43:3f:28:bd:02:99:22:33:ac:9b: 07:d8:41:be:fe:96:ef:53:f7:d6:6b:fa:b2:4e:96: 24:a3:7e:07:56:76:a0:8b:0b:06:1b:3d:e2:49:9c: 90:8e:cc:f6:d7:34:f1:14:61:4f:c6:f5:69:e8:24: 69:75:7c:e7:db:47:c6:5d:38:2b:53:8d:35:20:f8: 39:7d:fc:fd:f5:04:19:c6:19:b0:80:e3:10:f5:3d: 7d:63:1f:08:e0:c1:3a:d1:e6:5c:cc:db:31:18:91: a0:a2:77:40:76:c7:7e:24:8c:3b:6d:1a:14:8b:a7: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7A:10:9E:EC:C8:C9:7C:D9:14:07:71:AC:10:E5:25:39:14:38:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ea90b4e2-3aaa-321f-b55e-9f41bb3771e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 193.149.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e9:a2:ef:db:5c:07:91:58:c0:53:1d:51:44:9e:0a:d8:d9: 1e:13:06:56:27:a8:ad:62:35:22:31:e7:6e:51:ae:bf:e5:10: b2:3f:32:3b:73:b8:f1:c5:d1:ad:2b:26:06:db:f2:11:30:24: 65:f5:02:4b:4b:d8:9f:b4:b0:cd:d3:f2:b8:fa:b8:7e:3b:03: 52:ba:f2:fc:93:ca:04:c5:c6:85:b5:e5:dc:c4:e9:e1:15:b2: 7b:9c:95:88:f0:56:f3:4b:30:cd:f6:c7:83:43:48:8a:7e:e8: 53:6e:62:35:33:06:f1:c3:04:a3:b0:2a:3f:e6:0a:ff:ed:0a: 2d:43:6e:5c:9f:f0:4f:ba:90:2b:e0:a4:38:02:39:26:27:3e: ad:44:56:7e:21:92:c9:68:02:1b:b0:58:1d:89:f1:df:c8:38: 2b:04:02:4a:c7:fe:86:37:97:ed:a7:4c:76:b6:13:1f:09:fa: d8:49:ba:f8:db:a7:91:1e:ca:95:fb:3b:c6:86:ba:9d:a0:f9: 22:c8:85:4f:9c:fe:04:b7:ee:0a:f0:1d:84:19:0a:d0:55:85: f2:b4:49:dc:b4:7d:d1:63:3c:dc:ae:60:44:35:e0:80:5c:77: 03:4a:c4:6d:cd:be:15:73:de:3a:50:84:8d:bf:4b:5c:e3:83: 98:c8:03:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QCFA1O/gYY2i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OGY1NTM5OTYtOTQ3Yi00YjlmLTk1YWMtY2VmZmM1NTMyY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4ygrwgYjj5aT6Vh3bbSq1rw/MnwyQ8dplFk d1utj7e4s8ys5Uyja6XQJ2D81r/7QkgPKORbcRn75tRooW5+QvVsexMR2B9+4jn7 bJU+LbHZ3IGROumsUFara1eqHLDA4wq80hqyTyrxeECdLg0a+D1nKMS0Wenkk5AN S1RF3iNa8P5LDXyGt4bMsUM/KL0CmSIzrJsH2EG+/pbvU/fWa/qyTpYko34HVnag iwsGGz3iSZyQjsz21zTxFGFPxvVp6CRpdXzn20fGXTgrU401IPg5ffz99QQZxhmw gOMQ9T19Yx8I4ME60eZczNsxGJGgondAdsd+JIw7bRoUi6d9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA56EJ7syMl82RQHcawQ5SU5FDgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZWE5MGI0ZTItM2FhYS0z MjFmLWI1NWUtOWY0MWJiMzc3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZW+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbpou/bXAeRWMBTHVFEngrY2R4TBlYnqK1iNSIx525Rrr/lELI/Mjtz uPHF0a0rJgbb8hEwJGX1AktL2J+0sM3T8rj6uH47A1K68vyTygTFxoW15dzE6eEV snuclYjwVvNLMM32x4NDSIp+6FNuYjUzBvHDBKOwKj/mCv/tCi1Dblyf8E+6kCvg pDgCOSYnPq1EVn4hksloAhuwWB2J8d/IOCsEAkrH/oY3l+2nTHa2Ex8J+thJuvjb p5EeypX7O8aGup2g+SLIhU+c/gS37grwHYQZCtBVhfK0Sdy0fdFjPNyuYEQ14IBc dwNKxG3NvhVz3jpQhI2/S1zjg5jIAzI= -----END CERTIFICATE-----Generated at Wed Nov 5 18:02:54 2025 by rpki-client