$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa File: a32b5942-107e-3e4d-88ed-01a410959f3e.roa (raw, json) Hash identifier: K9Y6wYtNTQ7EU0NKIRgZpjvCu8ZqPiFo+vYwUf4KA/M= Subject key identifier: 07:D3:7F:64:8B:EC:21:5F:A1:70:DD:5B:F0:85:56:B7:22:78:74:06 Certificate issuer: /CN=7ede7b70-d745-425d-975b-bb0eb6368430 Certificate serial: 010D0C9F4328584BA39D060E72DFB6D40110D940 Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 22697 IP address blocks: 128.116.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:06:0e:72:df:b6:d4:01:10:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=c988177e-50d0-4029-8357-ea36e71bfcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:ef:20:6e:ec:e7:2f:83:97:87:b8:2d:ef: c2:1b:a5:1a:f5:2f:d5:ed:84:10:d9:95:00:82:5b: 38:8a:c0:ff:29:8f:05:34:13:e3:fb:51:72:9c:8c: 4c:0f:af:a1:74:89:3a:2e:04:3a:9a:eb:4e:83:d7: f4:6e:cb:c5:50:50:f1:7a:37:da:c5:1c:62:fc:1e: 60:0d:12:a8:73:40:f6:00:76:7a:3c:5f:6f:93:9c: 83:90:16:eb:df:be:16:ef:54:be:e9:de:7c:38:12: 0a:f3:a9:cd:98:0b:83:9c:98:ac:0f:e5:e2:f4:78: 50:ec:38:57:3d:6b:b4:19:cb:e4:f3:da:a5:1c:d9: b2:f6:51:48:fd:68:83:1a:1b:1b:75:73:cf:09:f3: 24:95:9f:94:ff:18:57:dd:88:73:cc:b0:35:09:c8: 9a:e5:0a:14:1c:65:64:ed:3c:2b:eb:cf:22:82:52: 80:2c:f4:79:b1:1b:34:f7:c8:eb:11:58:6f:4a:5a: 79:e0:7e:e1:58:68:71:f6:8a:a9:59:44:f2:ff:7c: 02:16:73:04:0b:b9:39:9f:4f:e7:54:68:4b:3b:0c: ac:ec:bf:ac:6b:16:75:76:29:6b:1a:d7:22:2a:97: d6:99:7f:97:0f:64:dc:a5:bf:43:9a:a5:3a:da:af: 0d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D3:7F:64:8B:EC:21:5F:A1:70:DD:5B:F0:85:56:B7:22:78:74:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a32b5942-107e-3e4d-88ed-01a410959f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl X509v3 Authority Key Identifier: keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer sbgp-ipAddrBlock: critical IPv4: 128.116.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a2:d8:09:09:d6:c2:de:99:ad:90:7e:1e:d7:85:e1:04:f0: 17:0b:40:f5:1d:d2:0f:ed:7c:28:4f:67:aa:de:f5:0b:8c:75: 2e:d2:95:02:19:92:a1:83:49:49:30:b3:c6:b9:3f:44:6e:c0: ed:6a:fa:cb:2a:32:b7:eb:af:d5:c3:f0:51:44:91:9c:58:d3: eb:af:54:03:4a:27:aa:66:8c:38:c8:3b:06:69:e6:7e:61:5e: 79:6f:5e:60:d9:1d:56:90:01:08:6c:c1:b6:0c:1a:ed:7b:0c: 3b:06:98:be:84:09:bb:ef:bd:94:bb:83:c2:2b:a8:a3:c3:8a: 43:58:07:e9:a1:6c:bb:20:ef:72:40:b8:8d:e1:36:15:31:6f: 6c:fa:d4:cb:93:72:5d:89:b2:2e:c6:77:c9:73:8f:a7:25:f5: 54:19:25:ac:ce:b0:54:94:03:89:f6:e5:59:b7:9b:31:42:79: 08:60:e0:0a:89:d1:6f:be:5d:92:32:0e:9f:01:32:eb:a5:4a: 9c:f2:b2:dc:1d:08:d8:4c:3d:b5:b1:ee:c5:a5:c8:95:11:cf: 16:23:37:b1:02:17:0f:b3:e3:1e:ba:8d:fc:4d:26:56:a6:ce: 1c:42:db:4f:1f:b9:03:6b:9a:13:32:7d:05:e3:7b:8e:13:07: 0f:23:66:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQYOct+21AEQ2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4 NDMwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Yzk4ODE3N2UtNTBkMC00MDI5LTgzNTctZWEzNmU3MWJmY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWDvIG7s5y+Dl4e4Le/CG6Ua9S/V7YQQ2ZUA gls4isD/KY8FNBPj+1FynIxMD6+hdIk6LgQ6mutOg9f0bsvFUFDxejfaxRxi/B5g DRKoc0D2AHZ6PF9vk5yDkBbr374W71S+6d58OBIK86nNmAuDnJisD+Xi9HhQ7DhX PWu0Gcvk89qlHNmy9lFI/WiDGhsbdXPPCfMklZ+U/xhX3YhzzLA1Ccia5QoUHGVk 7Twr688iglKALPR5sRs098jrEVhvSlp54H7hWGhx9oqpWUTy/3wCFnMEC7k5n0/n VGhLOwys7L+saxZ1dilrGtciKpfWmX+XD2Tcpb9DmqU62q8N8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfTf2SL7CFfoXDdW/CFVrcieHQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRl N2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvYTMyYjU5NDItMTA3ZS0z ZTRkLTg4ZWQtMDFhNDEwOTU5ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2VkZTdiNzAtZDc0NS00MjVkLTk3 NWItYmIwZWI2MzY4NDMwLzdlZGU3YjcwLWQ3NDUtNDI1ZC05NzViLWJiMGViNjM2 ODQzMC5jcmwwHwYDVR0jBBgwFoAUQm/5Jh3Xg3bHmZYIdEhEiRGXyggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBl YjYzNjg0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgHQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGui2AkJ1sLema2Qfh7XheEE8BcLQPUd0g/tfChPZ6re9QuMdS7SlQIZ kqGDSUkws8a5P0RuwO1q+ssqMrfrr9XD8FFEkZxY0+uvVANKJ6pmjDjIOwZp5n5h XnlvXmDZHVaQAQhswbYMGu17DDsGmL6ECbvvvZS7g8IrqKPDikNYB+mhbLsg73JA uI3hNhUxb2z61MuTcl2Jsi7Gd8lzj6cl9VQZJazOsFSUA4n25Vm3mzFCeQhg4AqJ 0W++XZIyDp8BMuulSpzystwdCNhMPbWx7sWlyJURzxYjN7ECFw+z4x66jfxNJlam zhxC208fuQNrmhMyfQXje44TBw8jZlg= -----END CERTIFICATE-----Generated at Wed Nov 5 18:05:13 2025 by rpki-client