$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/32bc9adc-0c3d-3d0e-85c9-cd1f9bdab998.roa File: 32bc9adc-0c3d-3d0e-85c9-cd1f9bdab998.roa (raw, json) Hash identifier: LxEEavt+LJBK5rZFxO5GmBnV43vpeQMMey8iUcL9OBc= Subject key identifier: 89:33:1B:B1:5A:14:2A:BD:43:4B:A5:BA:11:1B:8B:E3:A8:B8:99:71 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BABFD01DB0F06C84BE2613100 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/32bc9adc-0c3d-3d0e-85c9-cd1f9bdab998.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 20454 IP address blocks: 108.170.0.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:01:db:0f:06:c8:4b:e2:61:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=dc885e7b-fc41-42cd-a1cb-16e9fd0dd9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:9f:84:1a:ff:47:6e:c8:16:ed:d6:79:03: 30:2d:8d:1f:04:61:e4:11:58:4c:a9:86:f1:7e:a3: 45:0c:be:32:12:01:bb:19:b4:ae:ce:38:e2:95:1d: 50:52:4a:f4:fa:b3:b8:ca:cb:f3:14:07:3c:ba:9c: f3:e3:41:76:54:4f:ca:9a:99:4c:1e:05:25:65:36: ae:97:dd:e2:9e:12:98:21:91:bf:56:43:5a:2b:a2: 3f:d4:27:2d:1b:46:26:2e:dc:34:df:81:52:92:80: 03:f5:d7:3c:41:07:f0:f8:af:52:d8:07:62:0d:2d: f8:4e:68:8e:c6:8b:f6:a6:bb:8b:65:7c:3b:9d:00: 8d:9a:a3:65:fd:42:66:96:53:ce:bc:88:0d:60:89: 67:fe:70:98:37:58:9f:25:d0:52:9b:07:2e:0a:e3: 5b:e1:91:4d:07:bd:c3:49:1b:db:04:70:dc:33:bc: c1:96:d0:4d:9d:c5:86:32:04:39:e6:36:e0:33:31: 5f:07:c7:6f:db:cc:31:03:ab:c0:0d:ff:26:27:22: df:50:af:1f:e0:bd:42:fa:c5:65:e8:b0:4a:69:43: ed:89:cd:f8:b7:b3:a6:f7:2f:96:53:39:e9:50:80: 2b:55:6c:75:b6:27:b2:51:f2:30:3d:e4:87:15:ef: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:33:1B:B1:5A:14:2A:BD:43:4B:A5:BA:11:1B:8B:E3:A8:B8:99:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/32bc9adc-0c3d-3d0e-85c9-cd1f9bdab998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e2:80:06:f4:aa:ea:2e:ea:4f:62:52:62:b8:c6:0c:70:f2: 60:61:b9:84:2a:0d:c7:0c:46:40:25:80:8e:d7:f1:88:dd:68: c5:7d:9f:d4:bd:20:57:90:53:41:b9:62:04:bb:27:63:bf:20: 93:bc:8f:f1:f0:fe:c5:34:ec:73:98:ba:4d:86:ba:a5:03:a3: be:00:aa:66:22:0d:d2:3b:89:c5:be:c5:ba:8c:22:7b:96:3f: ec:56:4d:42:61:53:be:7f:6e:d7:e6:15:ac:4a:7e:81:4c:f3: 77:68:62:ef:66:7e:e3:5e:39:dd:b3:8a:02:cf:a8:72:94:4a: a4:13:9b:df:c5:82:a3:cd:24:f7:46:a5:7b:99:ad:e0:77:3e: b3:2b:14:a8:df:aa:9f:1e:3e:03:0a:95:62:96:57:3f:95:af: f7:ac:bb:05:bf:80:73:c3:a7:30:1d:66:2b:95:bd:dd:42:9d: 72:92:f1:10:a2:5c:ba:0f:63:c3:9c:5d:9c:74:7d:c2:55:47: 06:26:fb:ed:64:81:66:65:46:ae:b6:cc:d2:6e:7a:c0:42:05: c2:e8:6d:34:a7:6c:d3:e9:69:17:f2:0f:af:45:21:ab:a0:e3: 42:f6:ec:d0:b3:b5:f8:7f:9e:6f:d0:77:09:65:79:4d:f3:05: 62:fd:98:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QHbDwbIS+JhMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZGM4ODVlN2ItZmM0MS00MmNkLWExY2ItMTZlOWZkMGRkOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOmfhBr/R27IFu3WeQMwLY0fBGHkEVhMqYbx fqNFDL4yEgG7GbSuzjjilR1QUkr0+rO4ysvzFAc8upzz40F2VE/KmplMHgUlZTau l93inhKYIZG/VkNaK6I/1CctG0YmLtw034FSkoAD9dc8QQfw+K9S2AdiDS34TmiO xov2pruLZXw7nQCNmqNl/UJmllPOvIgNYIln/nCYN1ifJdBSmwcuCuNb4ZFNB73D SRvbBHDcM7zBltBNncWGMgQ55jbgMzFfB8dv28wxA6vADf8mJyLfUK8f4L1C+sVl 6LBKaUPtic34t7Om9y+WUznpUIArVWx1tieyUfIwPeSHFe8inwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkzG7FaFCq9Q0uluhEbi+OouJlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzJiYzlhZGMtMGMzZC0z ZDBlLTg1YzktY2QxZjliZGFiOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTigAb0quou6k9iUmK4xgxw8mBhuYQqDccMRkAlgI7X8YjdaMV9n9S9 IFeQU0G5YgS7J2O/IJO8j/Hw/sU07HOYuk2GuqUDo74AqmYiDdI7icW+xbqMInuW P+xWTUJhU75/btfmFaxKfoFM83doYu9mfuNeOd2zigLPqHKUSqQTm9/FgqPNJPdG pXuZreB3PrMrFKjfqp8ePgMKlWKWVz+Vr/esuwW/gHPDpzAdZiuVvd1CnXKS8RCi XLoPY8OcXZx0fcJVRwYm++1kgWZlRq62zNJuesBCBcLobTSnbNPpaRfyD69FIaug 40L27NCztfh/nm/QdwlleU3zBWL9mEc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:15:21 2025 by rpki-client