$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa File: 9afff874-6a4f-331a-93da-b870000569c0.roa (raw, json) Hash identifier: ky50r24gAuopacWmekIXewQGf0xx8nmHUDY5z+5OXAA= Subject key identifier: 19:C0:92:97:A3:E6:69:45:B7:D8:8F:E1:BE:9F:37:D2:E5:1E:76:0D Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F4328584A9E96204F155F7AD963D727C0 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 398191 IP address blocks: 216.225.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:20:4f:15:5f:7a:d9:63:d7:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=19baa939-15cf-4ba4-adb2-65530e25b03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:c3:0c:0b:7c:d8:60:32:20:26:b7:5d:4c: fc:a2:9e:fd:b2:fc:d0:ba:ae:02:3e:da:a3:0a:f0: 54:ad:b3:3e:de:08:4e:2b:09:25:ac:cf:06:41:fa: 08:18:db:41:48:01:8e:1a:5d:01:25:7f:3e:2c:f1: 1b:6b:bf:d9:67:0e:0b:0d:03:e9:4f:50:fe:78:5d: c4:79:57:e0:48:5a:ed:cf:9a:b5:94:19:01:45:87: f8:2d:4e:45:9d:f9:24:d3:97:30:4c:3f:f0:f8:a3: b2:01:f9:58:ba:71:9b:4b:dc:e7:a7:85:16:95:2f: 81:d6:c0:bd:2b:f4:22:7c:94:66:d5:51:4f:e3:92: 9d:2d:2e:1c:22:74:8d:e1:e7:80:5b:60:37:dd:ad: 2a:67:fa:66:9f:f8:f9:21:19:eb:60:95:f4:82:eb: 0b:eb:30:26:f4:b1:fa:24:f4:82:a7:b4:8c:69:cc: a0:cd:e4:9f:8b:a4:87:c2:3d:f4:20:e6:ec:ab:5c: 03:54:46:53:ee:ab:06:b2:75:6c:ee:02:41:df:a8: a6:ed:b6:39:c1:16:90:a7:e8:d2:dd:58:62:ab:d3: 5e:b7:cb:2b:c7:78:ae:49:df:65:0d:c8:99:73:0e: b9:e5:0a:62:0f:fb:ed:20:fa:a4:06:1e:a1:e1:98: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C0:92:97:A3:E6:69:45:B7:D8:8F:E1:BE:9F:37:D2:E5:1E:76:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv4: 216.225.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:26:ff:cf:bf:4e:67:cd:32:3f:e8:59:79:5a:2a:36:e2:61: 49:5d:f8:3a:4f:47:96:a0:59:3e:d5:48:0d:e2:dd:0a:de:82: 32:86:c5:d7:0d:8b:18:4c:55:05:2f:bb:83:b1:b0:22:b3:7c: 22:85:b7:79:1b:c2:ae:02:2a:ca:75:f7:1e:07:08:bd:ec:40: d7:5c:76:1d:15:9a:01:c1:76:62:3c:58:00:d4:f3:fa:63:68: f0:10:f5:96:27:1e:aa:4f:3c:f5:37:94:18:08:44:62:1c:a4: 4c:43:d8:b8:9f:e4:81:1b:c7:a9:22:c6:30:0c:d3:8b:66:1c: a0:18:54:21:ce:03:3b:fc:83:40:7e:b0:e7:54:04:3d:e3:f4: e4:79:e5:11:f6:13:72:82:b2:82:b2:dd:55:72:b7:53:b2:d7: 68:98:37:48:a5:d4:f1:b3:56:28:3d:33:a6:b1:de:f4:19:02: 93:78:e1:6f:ff:b0:a5:71:72:86:c4:32:6d:48:13:23:82:7e: f7:56:cb:32:90:35:92:33:db:ed:ab:a6:ed:a9:02:7d:0e:90: 54:91:cd:05:e9:91:d2:25:9c:0a:18:2d:12:07:66:df:17:45: a8:a6:14:70:de:0f:f5:4f:57:c1:d5:47:62:de:be:22:7b:a6: 9e:0c:3a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeliBPFV962WPXJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MTliYWE5MzktMTVjZi00YmE0LWFkYjItNjU1MzBlMjViMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7jDDAt82GAyICa3XUz8op79svzQuq4CPtqj CvBUrbM+3ghOKwklrM8GQfoIGNtBSAGOGl0BJX8+LPEba7/ZZw4LDQPpT1D+eF3E eVfgSFrtz5q1lBkBRYf4LU5Fnfkk05cwTD/w+KOyAflYunGbS9znp4UWlS+B1sC9 K/QifJRm1VFP45KdLS4cInSN4eeAW2A33a0qZ/pmn/j5IRnrYJX0gusL6zAm9LH6 JPSCp7SMacygzeSfi6SHwj30IObsq1wDVEZT7qsGsnVs7gJB36im7bY5wRaQp+jS 3Vhiq9Net8srx3iuSd9lDciZcw655QpiD/vtIPqkBh6h4ZipcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnAkpej5mlFt9iP4b6fN9LlHnYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvOWFmZmY4NzQtNmE0Zi0z MzFhLTkzZGEtYjg3MDAwMDU2OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4m/8+/TmfNMj/oWXlaKjbiYUld+DpPR5agWT7VSA3i3QregjKGxdcN ixhMVQUvu4OxsCKzfCKFt3kbwq4CKsp19x4HCL3sQNdcdh0VmgHBdmI8WADU8/pj aPAQ9ZYnHqpPPPU3lBgIRGIcpExD2Lif5IEbx6kixjAM04tmHKAYVCHOAzv8g0B+ sOdUBD3j9OR55RH2E3KCsoKy3VVyt1Oy12iYN0il1PGzVig9M6ax3vQZApN44W// sKVxcobEMm1IEyOCfvdWyzKQNZIz2+2rpu2pAn0OkFSRzQXpkdIlnAoYLRIHZt8X RaimFHDeD/VPV8HVR2LeviJ7pp4MOgs= -----END CERTIFICATE-----Generated at Thu Aug 7 01:59:29 2025 by rpki-client