$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa File: f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa (raw, json) Hash identifier: kLFtsdYB5NiNtlH/qfpgW1PQyfaXzFgHvPZ6LsLJ18I= Subject key identifier: F0:7B:50:C1:4E:60:FA:2D:C9:2A:B9:63:94:B2:F1:52:28:FE:84:0A Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BA0D25CBB37E1CF10F843C0D0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 399629 IP address blocks: 64.94.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5c:bb:37:e1:cf:10:f8:43:c0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=48a67d79-aff0-4d65-a306-331f14a69c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:76:56:44:42:0e:d0:f1:22:cd:4a:41:ec: 4b:78:e7:aa:6d:2b:0b:87:70:3a:53:6b:39:9e:c2: ab:54:4c:c8:e9:14:05:ce:ce:31:d5:03:98:4e:30: 37:68:bb:5c:3d:a7:35:c4:fb:50:bc:37:3e:47:b3: 0c:e8:12:5e:28:dc:c1:82:de:1f:dd:8a:2d:df:95: 16:93:9f:56:92:38:ec:08:d5:6a:2d:f7:a0:fa:b1: dc:fb:82:c8:38:57:e3:d1:c3:9d:16:b9:81:d1:91: 40:0d:1d:a9:8b:f2:29:ea:96:39:e9:c2:26:db:9c: 02:54:0e:d4:ad:05:fb:61:db:c1:12:e2:0c:d9:68: 7e:62:00:f1:b1:80:bf:75:9c:a5:29:2c:71:18:9a: aa:b2:d7:1c:b2:78:95:31:23:b9:ac:6f:e2:38:73: 8e:6b:6c:65:04:74:22:e9:01:0e:50:02:02:2d:f7: 56:0b:7b:cd:00:b7:25:78:f7:0c:f5:01:a9:b3:30: c5:cb:41:00:04:05:6b:c6:c7:9e:a7:f8:36:ac:de: 08:9b:fb:83:97:53:48:29:93:00:a3:f5:f9:27:8b: d8:9b:7d:30:c7:ba:54:96:02:f6:9a:f2:d4:00:8a: 14:db:4e:a1:b8:2c:d7:cd:7a:16:8d:96:c0:e1:b1: fb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7B:50:C1:4E:60:FA:2D:C9:2A:B9:63:94:B2:F1:52:28:FE:84:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.94.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:23:de:3d:60:6f:78:c8:25:29:ed:89:0c:7c:71:3b:44:32: 0d:31:9f:a6:be:16:44:2c:e5:ae:1f:02:ea:10:b7:49:4e:bd: 3a:39:63:80:68:04:57:3e:c9:05:36:c7:50:85:a8:17:6d:f6: 5b:80:fa:ac:e9:86:34:b9:c2:ba:fc:27:18:61:c4:29:fe:8f: 87:28:69:3c:d1:c8:e3:ca:6d:05:7e:14:eb:1a:3d:14:47:34: a1:83:34:1f:f5:17:89:5b:1a:71:ff:ee:8d:e3:41:03:a0:46: b1:df:b0:e2:82:a2:bf:ec:49:12:ba:87:bf:77:e8:4a:8f:ce: 94:af:87:04:b9:48:67:d8:d5:43:87:3c:31:bc:26:33:7e:81: fa:14:b0:0d:0e:f5:7e:fe:bd:8f:08:8d:65:5b:77:a4:9e:a9: 13:cd:75:78:33:e4:b5:34:e9:2a:2e:13:49:c9:a1:fd:44:89: cf:c9:de:24:0f:0b:2b:b2:ef:bf:6b:82:85:94:cd:f9:82:63: 80:d5:df:66:dd:7d:4c:89:c9:a6:84:7c:d6:20:f3:29:34:5c: 39:8d:24:88:6f:20:e2:15:df:41:71:1a:c3:d3:46:fb:0f:06: 74:60:4e:c6:25:1a:07:d9:28:a7:8f:8d:ec:21:ef:45:21:78: 6d:1f:e2:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0ly7N+HPEPhDwNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NDhhNjdkNzktYWZmMC00ZDY1LWEzMDYtMzMxZjE0YTY5YzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb92VkRCDtDxIs1KQexLeOeqbSsLh3A6U2s5 nsKrVEzI6RQFzs4x1QOYTjA3aLtcPac1xPtQvDc+R7MM6BJeKNzBgt4f3Yot35UW k59WkjjsCNVqLfeg+rHc+4LIOFfj0cOdFrmB0ZFADR2pi/Ip6pY56cIm25wCVA7U rQX7YdvBEuIM2Wh+YgDxsYC/dZylKSxxGJqqstccsniVMSO5rG/iOHOOa2xlBHQi 6QEOUAICLfdWC3vNALclePcM9QGpszDFy0EABAVrxseep/g2rN4Im/uDl1NIKZMA o/X5J4vYm30wx7pUlgL2mvLUAIoU206huCzXzXoWjZbA4bH7zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPB7UMFOYPotySq5Y5Sy8VIo/oQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZjhiN2MzMWItMzQzYS0z YzlmLTg4ZDMtNTdlY2E0MmU5YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUj3j1gb3jIJSntiQx8cTtEMg0xn6a+FkQs5a4fAuoQt0lOvTo5Y4Bo BFc+yQU2x1CFqBdt9luA+qzphjS5wrr8JxhhxCn+j4coaTzRyOPKbQV+FOsaPRRH NKGDNB/1F4lbGnH/7o3jQQOgRrHfsOKCor/sSRK6h7936EqPzpSvhwS5SGfY1UOH PDG8JjN+gfoUsA0O9X7+vY8IjWVbd6SeqRPNdXgz5LU06SouE0nJof1Eic/J3iQP Cyuy779rgoWUzfmCY4DV32bdfUyJyaaEfNYg8yk0XDmNJIhvIOIV30FxGsPTRvsP BnRgTsYlGgfZKKePjewh70UheG0f4t8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:07:58 2025 by rpki-client