$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa File: dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa (raw, json) Hash identifier: geR358+jd1J/980aC3uvSLmHWPSncFOAcpKt3YOO1UI= Subject key identifier: C2:1B:68:34:4C:E8:DC:EF:5D:AC:A8:27:5A:BB:8F:AB:62:35:B4:74 Certificate issuer: /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Certificate serial: 010D0C9F4328584BBFA5A9126641420614E26080 Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 7018 IP address blocks: 192.31.9.0/24 maxlen: 24 198.17.99.0/24 maxlen: 24 198.22.152.0/24 maxlen: 24 198.137.234.0/23 maxlen: 23 199.74.244.0/24 maxlen: 24 199.79.216.0/24 maxlen: 24 199.89.132.0/23 maxlen: 23 199.89.158.0/23 maxlen: 23 199.89.160.0/24 maxlen: 24 204.89.153.0/24 maxlen: 24 204.89.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a9:12:66:41:42:06:14:e2:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=71d5faeb-b3f2-4191-88d1-32387b3bf094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:47:17:2c:9d:da:14:37:bb:fb:85:65:bb:d2: b4:38:e3:80:41:4d:d8:e1:bd:5c:ef:0d:b6:66:8e: d6:37:37:8e:e4:2a:27:a3:3f:44:43:eb:25:1b:d6: b4:bf:aa:d4:53:4b:dd:5a:bc:b6:e8:ff:27:82:73: 71:eb:eb:26:3a:36:55:27:2c:1d:75:61:46:72:68: a7:b9:44:8b:b8:d2:37:25:40:59:69:13:50:73:26: 03:41:95:e2:9e:08:84:02:5e:9e:96:c9:4a:c6:6e: 41:0c:69:6c:69:ae:51:13:fe:54:ff:18:8c:6f:a3: 25:85:46:98:99:d9:94:fe:5e:f0:0e:de:45:00:d8: d6:c1:25:1d:29:bd:50:6d:e9:55:07:6b:45:e4:cc: 6d:1f:0f:a6:de:fd:dc:28:d1:fd:85:8b:84:2c:f2: ee:b1:31:6c:e3:5f:e9:b1:cf:44:e5:1b:ad:dc:29: 4d:fc:6c:aa:24:d0:8b:a4:e3:69:94:b7:e6:ec:60: cb:52:76:e3:c8:18:03:49:a6:06:8a:a8:a9:1d:c9: 96:70:7f:37:29:71:78:73:63:99:b4:9f:f4:69:74: a8:b2:2f:b7:11:d9:fd:f3:8d:ab:0c:5e:fa:db:f5: 67:b8:35:a9:9d:fb:e6:e9:d7:31:0f:54:f0:cf:c2: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1B:68:34:4C:E8:DC:EF:5D:AC:A8:27:5A:BB:8F:AB:62:35:B4:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl X509v3 Authority Key Identifier: keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer sbgp-ipAddrBlock: critical IPv4: 192.31.9.0/24 198.17.99.0/24 198.22.152.0/24 198.137.234.0/23 199.74.244.0/24 199.79.216.0/24 199.89.132.0/23 199.89.158.0-199.89.160.255 204.89.153.0-204.89.154.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:be:eb:a1:3b:44:08:50:7a:0a:2a:57:1f:8f:9b:0f:ee:6a: c0:d8:7c:5f:45:ca:2c:5b:48:de:d2:7b:ed:a4:9a:98:3e:ad: ac:70:59:9c:0c:12:d1:37:76:76:cc:3d:a8:e7:16:9f:66:4d: c1:e6:8c:c9:32:77:51:1e:5f:00:2c:87:e8:67:7c:6c:7b:eb: 03:6f:aa:f8:70:0a:4b:36:0f:09:a4:78:38:3b:5b:b8:6a:92: 36:18:7c:b1:fd:bf:bd:6b:b4:dd:8d:14:fd:2c:8f:a9:57:17: 86:45:10:dc:83:bb:69:4e:54:be:97:f0:f0:37:12:e3:13:1a: 49:a1:4c:71:72:a7:c6:e5:cb:26:d8:31:ad:cf:4d:dd:3e:1f: 9c:66:07:89:08:9b:9c:09:24:e6:4b:89:4a:9a:2e:14:5f:ae: 94:a5:d9:66:5b:ee:f3:cf:d6:f3:7c:ae:31:7c:f8:f2:be:af: 43:4d:cb:34:b0:60:dd:15:67:41:ce:d9:23:31:0d:5f:00:2b: 8c:59:9d:d4:9b:92:de:a9:12:fb:e9:b3:ab:59:1d:3b:06:a9: db:58:4c:75:0a:b6:aa:f0:38:53:c5:84:03:5d:e9:eb:42:f0: b2:df:c9:30:dc:e2:92:95:39:98:13:6a:42:cf:44:21:b5:5a: 2c:32:10:4e -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEu/pakSZkFCBhTiYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiY2YzOGItYzQ2ZC00YmYxLTg3MDUtODhhZWVjMTlh YmYxMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NzFkNWZhZWItYjNmMi00MTkxLTg4ZDEtMzIzODdiM2JmMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEcXLJ3aFDe7+4Vlu9K0OOOAQU3Y4b1c7w22 Zo7WNzeO5Conoz9EQ+slG9a0v6rUU0vdWry26P8ngnNx6+smOjZVJywddWFGcmin uUSLuNI3JUBZaRNQcyYDQZXingiEAl6elslKxm5BDGlsaa5RE/5U/xiMb6MlhUaY mdmU/l7wDt5FANjWwSUdKb1QbelVB2tF5MxtHw+m3v3cKNH9hYuELPLusTFs41/p sc9E5Rut3ClN/GyqJNCLpONplLfm7GDLUnbjyBgDSaYGiqipHcmWcH83KXF4c2OZ tJ/0aXSosi+3Edn9842rDF762/VnuDWpnfvm6dcxD1Twz8Ko3QIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFMIbaDRM6NzvXayoJ1q7j6tiNbR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJj ZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFlZWMxOWFiZjEvZGM5ZTNiOTAtYmViOS0z YTExLWE0YmQtODM4ZmMyNjk1NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzJiY2YzOGItYzQ2ZC00YmYxLTg3 MDUtODhhZWVjMTlhYmYxLzMyYmNmMzhiLWM0NmQtNGJmMS04NzA1LTg4YWVlYzE5 YWJmMS5jcmwwHwYDVR0jBBgwFoAUZ4kEXXo/RjGOHDz4F8NW8uOG+JswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJjZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFl ZWMxOWFiZjEuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAwB8JAwQA xhFjAwQAxhaYAwQBxonqAwQAx0r0AwQAx0/YAwQBx1mEMAwDBAHHWZ4DBADHWaAw DAMEAMxZmQMEAMxZmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBvuuhO0QIUHoKKlcfj5sP7mrA2HxfRcos W0je0nvtpJqYPq2scFmcDBLRN3Z2zD2o5xafZk3B5ozJMndRHl8ALIfoZ3xse+sD b6r4cApLNg8JpHg4O1u4apI2GHyx/b+9a7TdjRT9LI+pVxeGRRDcg7tpTlS+l/Dw NxLjExpJoUxxcqfG5csm2DGtz03dPh+cZgeJCJucCSTmS4lKmi4UX66UpdlmW+7z z9bzfK4xfPjyvq9DTcs0sGDdFWdBztkjMQ1fACuMWZ3Um5LeqRL76bOrWR07Bqnb WEx1Craq8DhTxYQDXenrQvCy38kw3OKSlTmYE2pCz0QhtVosMhBO -----END CERTIFICATE-----Generated at Wed Nov 5 15:20:29 2025 by rpki-client