$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/38ce2567-b60f-375f-9033-a23b9b107dff.roa File: 38ce2567-b60f-375f-9033-a23b9b107dff.roa (raw, json) Hash identifier: KYGvdpoRnmOA4rruJqcRmrXHE26w2IegX4FvPQOz490= Subject key identifier: C0:20:11:28:8C:58:32:66:C7:21:8A:E5:1E:3F:7F:5D:B8:F7:61:16 Certificate issuer: /CN=32bd304f-79c6-4794-b428-4ea9987e033b Certificate serial: 010D0C9F4328584B047C1BDC1D8E732E001B8F40 Authority key identifier: B0:6F:A1:65:36:BE:13:17:11:AA:54:10:E4:BB:4D:52:DE:79:91:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/38ce2567-b60f-375f-9033-a23b9b107dff.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 53891 IP address blocks: 216.25.44.0/22 maxlen: 24 216.25.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1b:dc:1d:8e:73:2e:00:1b:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bd304f-79c6-4794-b428-4ea9987e033b Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=9c3b23a8-7e43-479c-8984-a07944a0fbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:83:82:29:e9:80:f5:ec:1d:0d:cb:c3:d6: b8:65:fe:be:f4:d8:2d:08:26:98:ee:6d:7d:06:1e: 79:e5:03:2f:c9:1a:17:55:59:93:9f:24:ba:6f:d1: 6b:33:a0:23:8e:53:f5:23:b5:e1:08:09:57:db:a8: 53:cf:ec:b8:af:f2:ea:f8:5b:3a:20:11:3e:ad:8c: 74:d0:d5:4c:07:fe:2e:a6:26:37:3d:16:ac:c8:1e: b7:d8:cb:18:07:25:c0:bf:dd:8a:40:61:5e:03:10: 57:a7:62:46:84:1f:35:83:b8:a6:99:4f:fc:6d:c3: 6a:ae:06:13:c6:51:5c:7a:ee:f5:76:1f:c7:47:3f: 03:87:e6:3d:4c:57:d2:98:4b:44:ed:92:d2:47:3d: 32:78:d1:fe:a4:3f:8a:51:99:e6:1c:6d:fb:f0:bd: 6a:f8:d9:d8:ff:8c:64:6e:4f:22:6d:63:c7:46:46: 58:33:51:e1:d7:0c:6f:dc:d1:2d:d4:72:19:c8:86: 92:1b:7e:b6:fb:f2:2c:83:1c:1b:a9:10:98:c6:21: 2e:9d:98:06:24:5b:98:29:7f:3e:12:d0:56:4d:04: 8b:bd:34:2a:d4:dc:65:e0:e7:f5:0f:94:f0:91:d1: e6:93:6a:df:a7:c5:11:c0:78:37:0c:90:36:56:d9: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:20:11:28:8C:58:32:66:C7:21:8A:E5:1E:3F:7F:5D:B8:F7:61:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/38ce2567-b60f-375f-9033-a23b9b107dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b/32bd304f-79c6-4794-b428-4ea9987e033b.crl X509v3 Authority Key Identifier: keyid:B0:6F:A1:65:36:BE:13:17:11:AA:54:10:E4:BB:4D:52:DE:79:91:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32bd304f-79c6-4794-b428-4ea9987e033b.cer sbgp-ipAddrBlock: critical IPv4: 216.25.44.0/22 216.25.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c7:ea:e8:9e:ea:e1:50:81:78:31:43:b8:5f:cd:5f:63:2c: 77:c1:9e:a4:7a:85:f6:2b:74:03:07:43:2d:be:fb:fb:1d:5d: 7a:d7:d8:19:d9:ad:12:81:e8:38:6d:83:16:cc:da:62:5d:3f: d5:17:e7:d2:f6:17:6c:ff:fe:38:59:79:cb:c9:1e:44:13:1e: bd:eb:7b:ed:e9:80:ec:70:22:e9:a6:4f:da:a7:8d:72:39:99: 62:53:dd:4e:78:8b:fb:31:0d:87:3f:6a:5f:1b:74:35:b1:d4: 9a:28:ba:25:d9:0e:52:b8:4a:36:8c:6b:3a:c7:b9:04:c1:e4: f5:10:70:0d:60:e8:b8:20:63:54:eb:52:ac:63:b0:5e:3b:d5: ba:a7:8d:52:8f:6b:a9:16:2b:35:df:5e:55:fd:78:96:2d:d8: f9:42:52:87:98:01:61:40:3d:99:19:1c:ff:96:7e:e3:d6:63: de:01:42:72:7a:3e:ac:d0:d9:32:31:d4:a5:4a:ef:4a:ea:70: 36:e4:26:65:06:eb:c4:b6:cf:69:62:08:ce:be:71:a4:f8:eb: ae:aa:3e:70:aa:74:f1:e3:a1:5f:45:1c:75:2a:c5:ee:b1:84: 83:4e:f8:4e:d1:48:3e:8b:bb:d1:6c:32:3a:92:d8:27:bd:b5: 77:9d:63:ec -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsEfBvcHY5zLgAbj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiZDMwNGYtNzljNi00Nzk0LWI0MjgtNGVhOTk4N2Uw MzNiMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk OWMzYjIzYTgtN2U0My00NzljLTg5ODQtYTA3OTQ0YTBmYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN6DginpgPXsHQ3Lw9a4Zf6+9NgtCCaY7m19 Bh555QMvyRoXVVmTnyS6b9FrM6AjjlP1I7XhCAlX26hTz+y4r/Lq+Fs6IBE+rYx0 0NVMB/4upiY3PRasyB632MsYByXAv92KQGFeAxBXp2JGhB81g7immU/8bcNqrgYT xlFceu71dh/HRz8Dh+Y9TFfSmEtE7ZLSRz0yeNH+pD+KUZnmHG378L1q+NnY/4xk bk8ibWPHRkZYM1Hh1wxv3NEt1HIZyIaSG362+/IsgxwbqRCYxiEunZgGJFuYKX8+ EtBWTQSLvTQq1Nxl4Of1D5TwkdHmk2rfp8URwHg3DJA2VtlhlwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMAgESiMWDJmxyGK5R4/f12492EWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmJk MzA0Zi03OWM2LTQ3OTQtYjQyOC00ZWE5OTg3ZTAzM2IvMzhjZTI1NjctYjYwZi0z NzVmLTkwMzMtYTIzYjliMTA3ZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJiZDMwNGYtNzljNi00Nzk0LWI0 MjgtNGVhOTk4N2UwMzNiLzMyYmQzMDRmLTc5YzYtNDc5NC1iNDI4LTRlYTk5ODdl MDMzYi5jcmwwHwYDVR0jBBgwFoAUsG+hZTa+ExcRqlQQ5LtNUt55kaEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmJkMzA0Zi03OWM2LTQ3OTQtYjQyOC00ZWE5 OTg3ZTAzM2IuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC2BksAwQC 2BlAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEHH6uie6uFQgXgxQ7hfzV9jLHfBnqR6hfYrdAMHQy2++/sd XXrX2BnZrRKB6DhtgxbM2mJdP9UX59L2F2z//jhZecvJHkQTHr3re+3pgOxwIumm T9qnjXI5mWJT3U54i/sxDYc/al8bdDWx1JoouiXZDlK4SjaMazrHuQTB5PUQcA1g 6LggY1TrUqxjsF471bqnjVKPa6kWKzXfXlX9eJYt2PlCUoeYAWFAPZkZHP+WfuPW Y94BQnJ6PqzQ2TIx1KVK70rqcDbkJmUG68S2z2liCM6+caT4666qPnCqdPHjoV9F HHUqxe6xhINO+E7RSD6Lu9FsMjqS2Ce9tXedY+w= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:22 2025 by rpki-client