$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa File: 59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa (raw, json) Hash identifier: Ds3EiZDU6Vh2Z39ycHfpBueadkYJeKV6sf/Tt+SOD0g= Subject key identifier: 46:0A:25:10:ED:73:15:21:18:C8:EC:34:F8:13:57:39:E0:6C:F6:2A Certificate issuer: /CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Certificate serial: 010D0C9F4328584BAD625099C9B3E35AFE99C780 Authority key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 209242 IP address blocks: 199.33.230.0/24 maxlen: 24 199.33.231.0/24 maxlen: 24 199.33.232.0/24 maxlen: 24 199.33.233.0/24 maxlen: 24 2001:503:ff40::/48 maxlen: 48 2001:503:ff41::/48 maxlen: 48 2001:503:ff42::/48 maxlen: 48 2001:503:ff43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:50:99:c9:b3:e3:5a:fe:99:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=900befc7-d894-4d79-af9f-91f6ef57fd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:50:cf:7e:27:79:67:75:29:6f:aa:62:a5:ea: f3:99:7c:01:c9:97:34:c8:6d:25:7b:5e:96:8e:a6: a3:81:95:37:be:16:d3:cd:e2:00:88:f8:50:f8:0a: d4:52:85:41:45:c3:57:fc:02:e5:e8:61:4d:80:24: 04:dd:13:89:99:14:83:99:76:14:f4:15:05:62:5a: cc:66:8d:9f:8d:26:ee:df:3c:c7:c3:83:87:8a:e3: 83:4c:89:7a:08:89:c7:b7:50:91:f6:04:b6:24:30: 24:61:76:51:83:67:20:4a:cb:f8:a4:d5:2e:2d:8b: 16:ed:25:a6:92:ed:cc:65:31:73:18:25:04:27:dd: 5e:a3:c2:86:ef:77:53:50:35:84:4b:c4:c6:79:66: 89:93:1d:f5:80:f6:10:7e:02:89:b5:4d:d2:64:b0: 59:1f:a8:31:e0:d0:e3:af:6b:a9:6b:3e:f7:0f:70: de:06:ae:76:d2:ab:7b:c9:c7:b1:49:cf:21:fb:6a: 31:4f:5b:0b:0f:a6:84:53:1a:b5:5f:bb:73:88:be: 30:05:bc:65:cc:22:b0:6f:e9:af:58:e2:af:e2:3f: 3a:0a:d7:dd:d5:0d:44:3d:22:3f:8c:d4:bc:04:ef: a3:63:f2:1c:99:67:1c:a8:bd:f3:04:16:d8:b3:eb: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0A:25:10:ED:73:15:21:18:C8:EC:34:F8:13:57:39:E0:6C:F6:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl X509v3 Authority Key Identifier: keyid:3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer sbgp-ipAddrBlock: critical IPv4: 199.33.230.0-199.33.233.255 IPv6: 2001:503:ff40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3d:8f:b3:46:35:a9:63:56:2a:4b:e3:0c:fa:cd:31:4b:4e: 45:11:97:6e:7c:fb:9f:fd:e8:72:64:bc:e7:97:00:33:cb:41: af:94:5d:e0:1b:c9:54:5a:58:5f:36:08:21:f2:ff:a6:d2:2d: 2b:45:b5:5d:ba:59:07:28:d0:a0:70:76:c3:2b:92:a5:99:19: 46:af:6e:41:1b:b6:a2:d4:3a:1f:64:3b:92:3a:44:e1:20:d7: 52:e8:cc:bf:ab:7e:92:37:9e:fb:e0:d2:d5:f5:52:b8:88:cf: b1:14:e4:72:3e:0c:30:fc:f7:9b:67:17:f7:f1:80:7c:b6:e4: af:b6:09:87:84:60:c6:56:a0:ad:dc:3a:f5:91:77:27:30:42: 87:64:27:83:2c:4a:54:ec:4d:60:b1:c6:32:22:3d:7d:3c:5c: 0f:56:78:67:50:7d:82:e9:a2:cf:81:4c:75:51:3a:28:3e:36: 22:41:69:7c:64:5d:57:66:3f:08:8e:c1:3e:b8:fc:ca:58:16: 63:40:6b:97:40:c6:9d:a2:69:3e:84:f3:9d:84:7c:05:8e:d7: f3:9f:7c:4d:e6:49:98:26:4a:fe:f4:88:3c:9e:d5:05:48:52: 30:fb:8b:e4:14:e2:ad:86:4d:54:38:36:58:2f:ed:80:dc:96: a0:ec:ec:d7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEutYlCZybPjWv6Zx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJkOWI2YTctMmVkNS00NDhiLTliY2ItOGQyNjJhY2Mz Zjc2MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OTAwYmVmYzctZDg5NC00ZDc5LWFmOWYtOTFmNmVmNTdmZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1DPfid5Z3Upb6piperzmXwByZc0yG0le16W jqajgZU3vhbTzeIAiPhQ+ArUUoVBRcNX/ALl6GFNgCQE3ROJmRSDmXYU9BUFYlrM Zo2fjSbu3zzHw4OHiuODTIl6CInHt1CR9gS2JDAkYXZRg2cgSsv4pNUuLYsW7SWm ku3MZTFzGCUEJ91eo8KG73dTUDWES8TGeWaJkx31gPYQfgKJtU3SZLBZH6gx4NDj r2upaz73D3DeBq520qt7ycexSc8h+2oxT1sLD6aEUxq1X7tziL4wBbxlzCKwb+mv WOKv4j86Ctfd1Q1EPSI/jNS8BO+jY/IcmWccqL3zBBbYs+uf2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEYKJRDtcxUhGMjsNPgTVzngbPYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMmQ5 YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFjYzNmNzYvNTljMTRkZWItNTc5NC0z ZDU1LWEzM2EtZGQ1MGRjN2U2YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzJkOWI2YTctMmVkNS00NDhiLTli Y2ItOGQyNjJhY2MzZjc2LzMyZDliNmE3LTJlZDUtNDQ4Yi05YmNiLThkMjYyYWNj M2Y3Ni5jcmwwHwYDVR0jBBgwFoAUP3+qd7+v5ysqs8rSHqxMEAEdpCowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2 MmFjYzNmNzYuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAHHIeYD BAHHIegwDwQCAAIwCQMHAiABBQP/QDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjPY+zRjWpY1YqS+MM+s0x S05FEZdufPuf/ehyZLznlwAzy0GvlF3gG8lUWlhfNggh8v+m0i0rRbVdulkHKNCg cHbDK5KlmRlGr25BG7ai1DofZDuSOkThINdS6My/q36SN5774NLV9VK4iM+xFORy Pgww/PebZxf38YB8tuSvtgmHhGDGVqCt3Dr1kXcnMEKHZCeDLEpU7E1gscYyIj19 PFwPVnhnUH2C6aLPgUx1UTooPjYiQWl8ZF1XZj8IjsE+uPzKWBZjQGuXQMadomk+ hPOdhHwFjtfzn3xN5kmYJkr+9Ig8ntUFSFIw+4vkFOKthk1UODZYL+2A3Jag7OzX -----END CERTIFICATE-----Generated at Tue Nov 4 17:19:23 2025 by rpki-client