$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa File: 07a3338e-daba-38dd-af30-905208773fd9.roa (raw, json) Hash identifier: 6lmtA7OhRM5F5h3D/VoIp1ayvilmBSNlogzTVIWhcYg= Subject key identifier: 1A:73:35:58:49:6B:23:1F:0B:3A:1B:62:3D:D3:60:94:31:0F:C3:18 Certificate issuer: /CN=32a9337d-d761-426f-939a-0a770ad5bcce Certificate serial: 010D0C9F4328584B1806E1F269B36A8578A40CE0 Authority key identifier: 40:43:B0:38:F3:FC:0B:65:CB:09:AE:82:F3:8D:D3:40:38:C2:B5:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 376 IP address blocks: 132.208.0.0/16 maxlen: 16 199.202.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e1:f2:69:b3:6a:85:78:a4:0c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32a9337d-d761-426f-939a-0a770ad5bcce Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=fb4e5d4a-f4c4-44c2-ab6e-c33ca150a7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:58:98:6e:7a:52:b3:3b:4d:c8:38:64:0f:8e: d6:5d:9a:40:d5:c4:e1:92:7a:44:2c:bf:01:ca:9d: 15:5e:e6:b7:a5:5f:b8:8b:19:8e:db:a5:c9:81:2f: 80:40:2b:82:72:79:15:be:d0:be:23:8a:ce:2d:49: 9d:25:30:3e:3a:38:35:89:a3:e5:dc:7c:2e:42:14: a9:d6:90:80:c0:6e:f6:84:b8:a1:ae:da:52:5f:b8: e7:e9:ea:ea:4c:c4:12:2a:6a:83:3d:bc:c2:39:1b: c2:7a:d8:3f:e1:3e:b3:c9:78:8f:9d:a3:96:ba:70: 57:8a:ef:89:89:d4:ca:af:f1:02:8a:82:3d:31:bd: f3:e3:df:cf:d6:e5:05:e6:70:af:37:89:b2:da:94: c1:29:d1:c2:ac:9c:e3:a6:fd:92:8e:a5:2e:93:5c: da:8c:c5:06:20:b8:7c:75:17:26:4a:94:ca:59:12: ca:94:0c:08:d5:32:c7:f8:18:ec:09:0c:3c:67:47: 3a:b0:61:6a:46:56:f8:90:d7:a6:a5:2e:f7:eb:6f: b4:a9:38:5e:54:b1:fb:fd:23:c3:60:c1:65:20:f9: 06:64:7c:b9:5b:97:fe:e4:93:52:97:27:3b:d6:a3: e7:b7:47:71:4d:f4:e0:63:dd:b4:af:12:ca:52:96: ae:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:73:35:58:49:6B:23:1F:0B:3A:1B:62:3D:D3:60:94:31:0F:C3:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/07a3338e-daba-38dd-af30-905208773fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce/32a9337d-d761-426f-939a-0a770ad5bcce.crl X509v3 Authority Key Identifier: keyid:40:43:B0:38:F3:FC:0B:65:CB:09:AE:82:F3:8D:D3:40:38:C2:B5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/32a9337d-d761-426f-939a-0a770ad5bcce.cer sbgp-ipAddrBlock: critical IPv4: 132.208.0.0/16 199.202.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a5:95:87:14:72:e2:5c:b1:5e:61:5f:fa:76:95:2b:ce:1c: 51:ec:73:61:14:01:26:ce:32:83:65:5f:0c:fc:32:9c:b7:25: e8:a4:57:76:d7:91:ce:f7:c6:a3:f6:fb:88:c2:b4:ef:27:b7: 6f:44:30:98:07:8a:34:fb:7a:2c:85:4d:48:52:7f:4e:e8:c4: 7b:a2:d0:15:a8:c0:a7:d4:46:21:b1:35:b7:47:54:82:44:d4: 3b:9c:b1:63:73:2a:6e:31:3b:e5:0c:11:1f:6f:c1:d9:46:96: b7:24:a5:9b:f7:54:9a:f3:c2:a9:3a:66:0f:76:71:ed:cc:76: 27:f0:5a:1d:2a:47:ae:94:36:93:0e:d5:c3:c9:15:42:52:c7: 91:7f:ae:13:3a:f9:c8:d8:11:6e:6f:c3:e1:1a:2b:cf:73:e3: b3:b0:02:c1:b1:e6:14:eb:00:37:35:d3:57:3e:29:b3:74:f4: fe:6f:7d:37:16:79:13:3f:a6:30:0c:7f:ba:0a:97:3d:ef:79: 3f:58:31:61:2c:85:2b:b9:70:f4:5a:55:0a:ad:a1:78:9b:d4: 0d:9b:63:70:70:a0:2a:ab:7b:09:e9:76:53:a3:42:42:54:bb: e6:85:34:6b:f4:bd:63:a4:01:7b:bf:e6:b1:24:a5:c8:de:92: 4b:be:ec:c0 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEsYBuHyabNqhXikDOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJhOTMzN2QtZDc2MS00MjZmLTkzOWEtMGE3NzBhZDVi Y2NlMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmI0ZTVkNGEtZjRjNC00NGMyLWFiNmUtYzMzY2ExNTBhN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgliYbnpSsztNyDhkD47WXZpA1cThknpELL8B yp0VXua3pV+4ixmO26XJgS+AQCuCcnkVvtC+I4rOLUmdJTA+Ojg1iaPl3HwuQhSp 1pCAwG72hLihrtpSX7jn6erqTMQSKmqDPbzCORvCetg/4T6zyXiPnaOWunBXiu+J idTKr/ECioI9Mb3z49/P1uUF5nCvN4my2pTBKdHCrJzjpv2SjqUuk1zajMUGILh8 dRcmSpTKWRLKlAwI1TLH+BjsCQw8Z0c6sGFqRlb4kNempS7362+0qTheVLH7/SPD YMFlIPkGZHy5W5f+5JNSlyc71qPnt0dxTfTgY920rxLKUpaubwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFBpzNVhJayMfCzobYj3TYJQxD8MYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMmE5 MzM3ZC1kNzYxLTQyNmYtOTM5YS0wYTc3MGFkNWJjY2UvMDdhMzMzOGUtZGFiYS0z OGRkLWFmMzAtOTA1MjA4NzczZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzJhOTMzN2QtZDc2MS00MjZmLTkz OWEtMGE3NzBhZDViY2NlLzMyYTkzMzdkLWQ3NjEtNDI2Zi05MzlhLTBhNzcwYWQ1 YmNjZS5jcmwwHwYDVR0jBBgwFoAUQEOwOPP8C2XLCa6C843TQDjCtf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMmE5MzM3ZC1kNzYxLTQyNmYtOTM5YS0wYTc3 MGFkNWJjY2UuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAhNADBADH ykgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAh6WVhxRy4lyxXmFf+naVK84cUexzYRQBJs4yg2VfDPwynLcl 6KRXdteRzvfGo/b7iMK07ye3b0QwmAeKNPt6LIVNSFJ/TujEe6LQFajAp9RGIbE1 t0dUgkTUO5yxY3MqbjE75QwRH2/B2UaWtySlm/dUmvPCqTpmD3Zx7cx2J/BaHSpH rpQ2kw7Vw8kVQlLHkX+uEzr5yNgRbm/D4Rorz3Pjs7ACwbHmFOsANzXTVz4ps3T0 /m99NxZ5Ez+mMAx/ugqXPe95P1gxYSyFK7lw9FpVCq2heJvUDZtjcHCgKqt7Cel2 U6NCQlS75oU0a/S9Y6QBe7/msSSlyN6SS77swA== -----END CERTIFICATE-----Generated at Mon Sep 15 10:42:56 2025 by rpki-client