$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/32abac25-28fa-3897-9ec5-0acf43f6c85a.roa File: 32abac25-28fa-3897-9ec5-0acf43f6c85a.roa (raw, json) Hash identifier: xEDtdiP6Gp1IV1parWC4uHYZLRV36/gyPlyG/Cu/OW4= Subject key identifier: 44:90:86:75:B5:80:CD:C8:B3:04:F0:28:34:61:0F:A2:25:AA:2F:56 Certificate issuer: /CN=9d186494-6006-4592-b81b-d4c764dc8430 Certificate serial: 010D0C9F4328584B12CDB5D8223D0D19CE48CF80 Authority key identifier: C6:4A:0C:0C:56:22:BE:C0:A1:E0:66:90:87:6D:2C:EB:50:ED:51:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/32abac25-28fa-3897-9ec5-0acf43f6c85a.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 216.117.248.0/23 maxlen: 23 216.117.248.0/24 maxlen: 24 216.117.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/9d186494-6006-4592-b81b-d4c764dc8430.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/9d186494-6006-4592-b81b-d4c764dc8430.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:cd:b5:d8:22:3d:0d:19:ce:48:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d186494-6006-4592-b81b-d4c764dc8430 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=fdcec7a7-f681-4f5b-99ad-b73e7ef757cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:41:e7:8b:94:84:b8:95:ea:93:b1:9b:25: f5:b3:4c:83:8e:90:fc:86:88:cf:db:72:1f:b1:eb: 05:d1:3a:64:dc:cd:ca:27:25:a7:2d:76:d8:84:3e: 5a:9d:9b:e3:b4:34:c8:e4:05:71:30:ca:75:98:8d: cf:8a:90:13:92:67:bc:b0:60:a7:48:8c:8e:b0:fe: 6b:30:9e:02:75:20:cc:d1:76:81:85:16:3e:62:5d: 38:fc:08:cf:33:dc:9c:6b:b4:fa:3f:7d:60:64:d6: aa:9c:a6:e3:bc:ab:2d:cd:73:fe:32:92:63:2e:ed: db:aa:3c:75:40:bb:13:34:c4:bb:99:a4:06:68:72: 08:3b:ec:a9:47:24:48:cd:8d:65:9d:51:bc:bd:da: 2a:38:8c:7c:9f:10:9b:e0:4c:7b:ee:64:4c:7f:b6: 25:16:b4:3d:e6:0b:da:d6:c1:b2:99:f0:5a:61:ce: 99:80:6c:d2:d2:3a:7c:5b:de:2a:5a:3f:3c:98:c7: b7:2a:5f:50:54:3b:0e:7d:3e:41:d9:16:b2:1c:45: 6b:d5:97:97:91:64:80:52:4b:b4:e2:c7:7f:72:17: 29:55:c7:04:e0:42:cd:31:ce:bf:8a:f1:f3:c1:dc: eb:b6:d7:f1:4b:ad:4a:7e:f0:78:ed:87:02:f3:9a: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:90:86:75:B5:80:CD:C8:B3:04:F0:28:34:61:0F:A2:25:AA:2F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/32abac25-28fa-3897-9ec5-0acf43f6c85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/9d186494-6006-4592-b81b-d4c764dc8430.crl X509v3 Authority Key Identifier: keyid:C6:4A:0C:0C:56:22:BE:C0:A1:E0:66:90:87:6D:2C:EB:50:ED:51:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430.cer sbgp-ipAddrBlock: critical IPv4: 216.117.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ec:bb:23:be:d8:eb:46:5d:c5:b4:67:37:82:aa:c0:96:61: 92:e2:81:98:07:b2:20:84:96:7c:16:be:f0:66:b7:ba:bb:c9: 3b:49:1e:4b:68:b8:1b:4c:86:25:e3:96:32:09:cd:1e:c1:11: c6:9a:80:b2:87:d6:82:61:29:07:54:f0:cf:67:11:fb:d4:1f: 8e:0d:55:61:70:b5:59:c5:8e:47:3d:29:43:49:1a:eb:42:f9: f9:57:07:63:ae:00:fe:fa:8c:26:0f:2e:99:22:57:ea:21:56: 85:a4:3f:c5:77:98:84:10:db:99:a6:5c:0b:48:d0:59:1e:95: a4:57:32:86:e9:57:0b:a3:6f:80:a7:5e:9e:54:68:23:87:58: 96:83:36:17:fa:47:fc:bc:03:21:bb:f5:a9:38:89:d6:f7:aa: 59:e7:da:54:31:ba:96:d0:16:a5:d9:d9:2f:2c:db:3c:c1:11: cc:0d:bd:17:e6:11:39:45:ed:04:a4:32:36:2d:ac:7c:2a:fe: d0:ff:e6:f1:26:e7:37:5e:7f:e7:76:d9:16:3d:13:36:33:a6: 4a:db:b9:aa:fd:64:ee:8b:ef:45:1b:55:c5:48:1c:c9:7f:b4: b1:41:7f:4c:59:9c:3f:3f:a6:fc:1b:fc:fe:d5:95:c1:2d:02: fa:0a:0f:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsSzbXYIj0NGc5Iz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQxODY0OTQtNjAwNi00NTkyLWI4MWItZDRjNzY0ZGM4 NDMwMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmRjZWM3YTctZjY4MS00ZjViLTk5YWQtYjczZTdlZjc1N2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIZB54uUhLiV6pOxmyX1s0yDjpD8hojP23If sesF0Tpk3M3KJyWnLXbYhD5anZvjtDTI5AVxMMp1mI3PipATkme8sGCnSIyOsP5r MJ4CdSDM0XaBhRY+Yl04/AjPM9yca7T6P31gZNaqnKbjvKstzXP+MpJjLu3bqjx1 QLsTNMS7maQGaHIIO+ypRyRIzY1lnVG8vdoqOIx8nxCb4Ex77mRMf7YlFrQ95gva 1sGymfBaYc6ZgGzS0jp8W94qWj88mMe3Kl9QVDsOfT5B2RayHEVr1ZeXkWSAUku0 4sd/chcpVccE4ELNMc6/ivHzwdzrttfxS61KfvB47YcC85qVywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESQhnW1gM3IswTwKDRhD6Ilqi9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85ZDE4 NjQ5NC02MDA2LTQ1OTItYjgxYi1kNGM3NjRkYzg0MzAvMzJhYmFjMjUtMjhmYS0z ODk3LTllYzUtMGFjZjQzZjZjODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWQxODY0OTQtNjAwNi00NTkyLWI4 MWItZDRjNzY0ZGM4NDMwLzlkMTg2NDk0LTYwMDYtNDU5Mi1iODFiLWQ0Yzc2NGRj ODQzMC5jcmwwHwYDVR0jBBgwFoAUxkoMDFYivsCh4GaQh20s61DtUQIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85ZDE4NjQ5NC02MDA2LTQ1OTItYjgxYi1kNGM3 NjRkYzg0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvsuyO+2OtGXcW0ZzeCqsCWYZLigZgHsiCElnwWvvBmt7q7yTtJHkto uBtMhiXjljIJzR7BEcaagLKH1oJhKQdU8M9nEfvUH44NVWFwtVnFjkc9KUNJGutC +flXB2OuAP76jCYPLpkiV+ohVoWkP8V3mIQQ25mmXAtI0FkelaRXMobpVwujb4Cn Xp5UaCOHWJaDNhf6R/y8AyG79ak4idb3qlnn2lQxupbQFqXZ2S8s2zzBEcwNvRfm ETlF7QSkMjYtrHwq/tD/5vEm5zdef+d22RY9EzYzpkrbuar9ZO6L70UbVcVIHMl/ tLFBf0xZnD8/pvwb/P7VlcEtAvoKD94= -----END CERTIFICATE-----Generated at Tue Oct 14 09:35:51 2025 by rpki-client