$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32cf6b02-9900-3229-8f16-396f98988223.roa File: 32cf6b02-9900-3229-8f16-396f98988223.roa (raw, json) Hash identifier: gVVp89Mmy3HdRWsKxP13mcV8IaGFNvyif5wXZVEu/Oc= Subject key identifier: D3:69:DE:88:2B:93:F3:84:08:60:06:7A:84:8E:45:35:7B:1D:27:4F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C829343BDCCD73561BEF80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32cf6b02-9900-3229-8f16-396f98988223.roa Signing time: Mon 25 Aug 2025 17:00:20 +0000 ROA not before: Mon 25 Aug 2025 17:00:20 +0000 ROA not after: Sun 23 Nov 2025 18:00:20 +0000 asID: 31898 IP address blocks: 131.186.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:29:34:3b:dc:cd:73:56:1b:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:20 2025 GMT Not After : Nov 23 18:00:20 2025 GMT Subject: CN=2bcf8a9e-23df-4c5b-acc3-89ad60d1d9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:fa:69:19:39:28:05:6a:e0:5b:7a:9d:33: 82:9a:a7:5a:00:ff:78:5e:0c:e5:32:46:63:4e:83: e4:6f:8b:ba:da:a6:ae:ac:bc:03:c2:5e:ec:c8:51: 9c:94:26:71:e9:a7:90:90:f4:f2:05:f8:93:d5:61: 5a:44:7f:39:a4:34:80:b5:13:7f:3e:11:9a:21:e2: ab:80:df:47:af:89:f6:3e:08:0f:e5:27:05:d0:f2: 3f:aa:02:e8:8e:73:dc:c1:18:38:9d:a2:00:06:57: 13:b0:c2:7d:a1:3b:77:a9:a5:49:c8:32:71:93:00: d0:27:d2:ba:a8:3c:6b:13:88:c5:e2:43:4b:ee:3b: b1:6a:4c:12:17:53:b9:ca:90:61:95:98:fe:4d:2a: 73:37:e1:6b:a2:10:45:33:d3:7f:9f:84:d4:f0:f2: ed:7e:9f:6e:f0:4d:b3:ef:4b:87:ba:9c:27:2e:0e: 76:7f:88:c3:c5:6d:c6:a9:e5:23:c9:a5:dd:4f:77: cd:e8:4d:40:96:e9:08:da:0b:3b:b4:d1:bd:39:5a: fb:99:8c:5d:19:4e:62:df:d7:d7:84:88:a5:bd:82: 24:b1:f5:1c:dc:27:af:e5:09:97:fb:a0:aa:7e:4e: 5e:f4:a1:b8:f0:22:c5:3e:93:df:e5:ec:cf:5f:9f: 80:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:69:DE:88:2B:93:F3:84:08:60:06:7A:84:8E:45:35:7B:1D:27:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32cf6b02-9900-3229-8f16-396f98988223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fe:ed:95:68:d3:78:f7:28:d4:24:6b:18:7d:cb:02:8d:63: 46:16:b7:d6:0e:3a:4a:6f:e1:18:93:3a:f2:25:ca:3a:17:3c: a0:d9:ec:dd:fc:83:5e:25:6e:af:63:d1:c1:55:31:65:4b:9e: be:ea:f2:6e:18:d4:20:da:b2:8c:1d:6b:2d:3d:04:2d:00:ef: f6:4e:e0:88:b7:6a:26:03:88:3d:a1:f2:b4:7f:74:d6:42:cf: 97:d8:cf:c9:b6:ea:ea:6f:fd:4c:d4:af:0d:3d:33:a3:de:b0: 04:2b:57:9a:73:79:73:91:c9:82:97:c2:56:65:80:f1:95:85: 50:04:62:2e:87:9c:a5:b3:b9:ce:b1:19:01:da:21:f6:d3:0b: 1f:c0:da:e1:7e:87:67:41:8f:cf:6e:2f:66:58:4e:6a:c2:5a: d1:e2:8a:93:4e:f6:69:5b:69:66:e8:c2:7a:fd:84:30:66:09: bd:3c:2d:b1:f4:b0:17:66:49:df:33:82:4e:b5:c8:e5:98:b5: e4:7c:a9:cb:a2:a8:1b:0d:3d:6f:49:f3:64:64:45:5a:c9:ef: 61:36:ac:7a:0e:13:49:77:55:41:96:4a:10:46:10:20:b9:98: 4f:4d:8e:68:1f:26:63:22:23:7d:ed:34:de:bd:6a:a0:88:2f: f6:f1:99:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yCk0O9zNc1Yb74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAyMFoXDTI1MTEyMzE4MDAyMFowLzEtMCsGA1UEAxMk MmJjZjhhOWUtMjNkZi00YzViLWFjYzMtODlhZDYwZDFkOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFX6aRk5KAVq4Ft6nTOCmqdaAP94XgzlMkZj ToPkb4u62qaurLwDwl7syFGclCZx6aeQkPTyBfiT1WFaRH85pDSAtRN/PhGaIeKr gN9Hr4n2PggP5ScF0PI/qgLojnPcwRg4naIABlcTsMJ9oTt3qaVJyDJxkwDQJ9K6 qDxrE4jF4kNL7juxakwSF1O5ypBhlZj+TSpzN+FrohBFM9N/n4TU8PLtfp9u8E2z 70uHupwnLg52f4jDxW3GqeUjyaXdT3fN6E1AlukI2gs7tNG9OVr7mYxdGU5i39fX hIilvYIksfUc3Cev5QmX+6Cqfk5e9KG48CLFPpPf5ezPX5+ACQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNp3ogrk/OECGAGeoSORTV7HSdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzJjZjZiMDItOTkwMC0z MjI5LThmMTYtMzk2Zjk4OTg4MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg7oIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz+7ZVo03j3KNQkaxh9ywKNY0YWt9YOOkpv4RiTOvIlyjoXPKDZ7N38 g14lbq9j0cFVMWVLnr7q8m4Y1CDasowday09BC0A7/ZO4Ii3aiYDiD2h8rR/dNZC z5fYz8m26upv/UzUrw09M6PesAQrV5pzeXORyYKXwlZlgPGVhVAEYi6HnKWzuc6x GQHaIfbTCx/A2uF+h2dBj89uL2ZYTmrCWtHiipNO9mlbaWbownr9hDBmCb08LbH0 sBdmSd8zgk61yOWYteR8qcuiqBsNPW9J82RkRVrJ72E2rHoOE0l3VUGWShBGECC5 mE9NjmgfJmMiI33tNN69aqCIL/bxmWk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:10 2025 by rpki-client