$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa File: ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa (raw, json) Hash identifier: Q9uat7hFoonRW2yziTuklUyn9KsJVBEgpYAaF4lgC4g= Subject key identifier: 56:9F:79:16:DA:29:F9:72:2F:FE:62:44:9E:67:D2:B5:15:A5:24:55 Certificate issuer: /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d Certificate serial: 010D0C9F4328584BC53B30014A71E89CFD8B7800 Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 16509 IP address blocks: 212.32.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:30:01:4a:71:e8:9c:fd:8b:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=df671876-468e-4421-a4ab-143b9445d641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ba:00:4c:48:c3:11:33:a8:9e:1e:2c:ef:21: dc:30:a1:22:42:b5:5c:f5:a1:4d:5e:2a:24:ec:df: bb:63:f8:ee:fe:65:ae:72:0b:78:9d:1a:bf:d1:8f: 9c:05:7c:29:78:c3:b4:0c:7a:18:0f:64:3c:27:43: 23:3b:4b:c9:6c:48:4f:7e:36:7c:86:05:d6:b4:d0: 6b:61:d0:da:54:d6:84:12:9b:30:88:e0:d9:6b:cb: 73:86:35:2d:6e:0f:0a:03:ca:b8:c5:56:7f:c6:36: 4c:11:37:2e:42:d6:c4:5a:6f:95:4f:82:c9:d9:38: e8:03:cc:9c:9c:62:7d:2f:0a:5b:5c:24:b8:91:5b: 5a:bb:c7:0a:ae:38:e2:f1:e5:50:10:69:61:fd:f7: cc:38:ca:fe:63:cd:5d:63:04:49:41:34:b3:d3:d4: 5d:8c:55:a9:ae:43:fc:ec:45:86:c4:ff:8f:bd:b2: 90:8c:41:0b:2d:42:fa:94:53:7e:80:f3:9b:06:8a: 2e:60:53:0a:64:ff:dc:ef:94:ee:77:d8:c6:2a:d3: 3e:ca:e6:f4:53:de:65:de:6e:6d:5f:44:d7:be:46: 24:f2:54:a3:0b:f5:5c:5b:7f:51:05:6b:1b:bd:da: ab:85:47:84:13:0b:d2:d6:f3:2c:57:a5:e9:b2:db: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9F:79:16:DA:29:F9:72:2F:FE:62:44:9E:67:D2:B5:15:A5:24:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl X509v3 Authority Key Identifier: keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer sbgp-ipAddrBlock: critical IPv4: 212.32.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ff:d6:de:27:53:89:d5:87:ab:71:a8:6b:b8:71:ce:c1:fb: 0b:a7:6d:55:e3:2a:50:3d:48:7c:c6:9c:4e:92:37:85:6e:ba: 31:04:33:e6:cf:3c:5e:82:99:13:8a:d4:15:e0:b2:b0:2e:ce: 7d:67:d8:72:3c:ee:df:43:0d:9b:24:c2:95:b3:5b:6e:c4:79: e1:36:bb:44:ef:4a:2a:1d:2a:46:89:e2:8a:7f:61:bd:5e:2e: 81:cc:a4:bd:0b:50:ce:6a:c9:11:4c:93:2b:fe:24:01:c3:39: f5:11:73:4b:24:ca:44:ab:50:39:8b:2d:82:95:8f:29:f6:7a: 64:80:0a:4c:41:40:5b:c2:2c:a1:6a:1c:97:5e:e2:9c:51:16: e3:ca:77:c0:d4:5a:23:f7:70:ac:bc:1d:55:ed:1d:de:81:72: b2:50:f0:7e:b7:c0:50:28:33:85:0f:24:53:95:12:e5:62:65: c1:33:4e:10:a8:8c:bd:64:a4:10:0c:79:f0:82:4d:dc:ef:d2: 53:a8:bb:66:e0:d1:e3:fc:d6:fa:61:71:ae:bd:ee:78:4c:dc: 8d:d8:6a:93:50:fb:a6:da:48:fe:85:8f:ee:5a:d2:a5:a6:e0: d4:a2:25:e8:91:b5:d2:bc:ba:70:71:3c:98:42:0d:ed:42:e1: 2d:9d:95:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOzABSnHonP2LeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4NTI2ZDUtMmFhMi00ZDJmLThjYjEtNWM0MTc3Mjhh OTdkMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGY2NzE4NzYtNDY4ZS00NDIxLWE0YWItMTQzYjk0NDVkNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7oATEjDETOonh4s7yHcMKEiQrVc9aFNXiok 7N+7Y/ju/mWucgt4nRq/0Y+cBXwpeMO0DHoYD2Q8J0MjO0vJbEhPfjZ8hgXWtNBr YdDaVNaEEpswiODZa8tzhjUtbg8KA8q4xVZ/xjZMETcuQtbEWm+VT4LJ2TjoA8yc nGJ9LwpbXCS4kVtau8cKrjji8eVQEGlh/ffMOMr+Y81dYwRJQTSz09RdjFWprkP8 7EWGxP+PvbKQjEELLUL6lFN+gPObBoouYFMKZP/c75Tud9jGKtM+yub0U95l3m5t X0TXvkYk8lSjC/VcW39RBWsbvdqrhUeEEwvS1vMsV6XpstsPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFafeRbaKflyL/5iRJ5n0rUVpSRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MTg1 MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQxNzcyOGE5N2QvY2E4Y2QyZjgtNzFmOC0z NTEwLWI5MGQtY2RhYmM5ZDhjYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDE4NTI2ZDUtMmFhMi00ZDJmLThj YjEtNWM0MTc3MjhhOTdkLzQxODUyNmQ1LTJhYTItNGQyZi04Y2IxLTVjNDE3NzI4 YTk3ZC5jcmwwHwYDVR0jBBgwFoAUiiN/rn53wAJd+TDx/Eb8Xh6ECRIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MTg1MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQx NzcyOGE5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1CAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ//1t4nU4nVh6txqGu4cc7B+wunbVXjKlA9SHzGnE6SN4VuujEEM+bP PF6CmROK1BXgsrAuzn1n2HI87t9DDZskwpWzW27EeeE2u0TvSiodKkaJ4op/Yb1e LoHMpL0LUM5qyRFMkyv+JAHDOfURc0skykSrUDmLLYKVjyn2emSACkxBQFvCLKFq HJde4pxRFuPKd8DUWiP3cKy8HVXtHd6BcrJQ8H63wFAoM4UPJFOVEuViZcEzThCo jL1kpBAMefCCTdzv0lOou2bg0eP81vphca697nhM3I3YapNQ+6baSP6Fj+5a0qWm 4NSiJeiRtdK8unBxPJhCDe1C4S2dlfo= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:39 2025 by rpki-client