$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/32dd9e0d-a1c6-3e45-b5e4-db8f25c33484.roa File: 32dd9e0d-a1c6-3e45-b5e4-db8f25c33484.roa (raw, json) Hash identifier: EGkUgdVViZl9a549YAP0/aHpnAjn2V5ecQfhtxCIwx8= Subject key identifier: 80:FC:0A:6F:81:EE:36:74:13:9D:48:83:17:33:56:A2:F4:35:71:68 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584B3663F5CA29E84D6307F69C00 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/32dd9e0d-a1c6-3e45-b5e4-db8f25c33484.roa Signing time: Tue 16 Sep 2025 10:02:45 +0000 ROA not before: Tue 16 Sep 2025 10:02:45 +0000 ROA not after: Mon 15 Dec 2025 11:02:45 +0000 asID: 21433 IP address blocks: 170.248.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:63:f5:ca:29:e8:4d:63:07:f6:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Sep 16 10:02:45 2025 GMT Not After : Dec 15 11:02:45 2025 GMT Subject: CN=eab81cf1-7355-483c-9762-e3275e892e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:c6:f7:0f:ab:cc:b1:8d:61:3c:f5:ca:4c: 88:64:5d:2a:9d:65:3d:b6:03:53:3f:13:12:31:0b: 9c:4d:45:06:0e:62:9a:d2:02:9a:1d:b1:0e:f2:16: ee:42:eb:dc:ad:34:ad:ad:99:95:3d:6e:d8:d5:cd: 87:4e:41:b0:ad:75:c0:8f:22:86:07:fe:76:53:4f: 0d:3e:9b:0e:91:a5:7a:a2:9b:c7:f5:1e:c7:f1:c7: 9b:5f:5d:f4:81:08:ca:90:38:a2:a3:55:61:e3:c4: 59:79:ce:b8:03:5a:a6:53:0c:00:ef:08:73:2a:a1: 7f:7e:e4:3a:03:22:4b:9a:42:5a:2f:2a:46:94:ff: e7:ce:4e:70:db:ba:3a:ca:d7:07:4e:16:25:69:98: c1:fd:cb:e8:cb:a7:da:c1:4b:71:88:e5:f3:20:73: 63:b8:65:07:fe:53:0d:85:53:ef:4b:84:5f:04:e2: f9:83:aa:bb:42:c3:6a:63:c9:0b:f2:da:ea:3f:28: b2:70:b1:bf:5f:de:c9:63:c2:06:69:21:8d:7c:c6: 00:9e:88:c6:7d:39:e9:df:f6:c3:25:89:1d:8b:21: 35:0a:f4:06:15:d8:74:6b:61:8e:71:d0:20:12:99: ff:8e:46:a7:52:57:56:e7:a3:3a:48:a2:23:01:fd: ff:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FC:0A:6F:81:EE:36:74:13:9D:48:83:17:33:56:A2:F4:35:71:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/32dd9e0d-a1c6-3e45-b5e4-db8f25c33484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9d:8e:98:5c:60:5a:3e:95:a2:5e:43:3f:82:a3:c6:8a:ed: ce:b9:cb:e2:b1:69:d1:a7:f8:a3:d8:c1:d8:5a:05:76:16:35: dd:c5:bb:b0:a2:0d:23:b5:13:48:b4:14:1d:13:37:64:c2:e1: f5:3b:2c:df:fe:5e:bd:7a:13:0b:f2:40:db:45:90:54:5e:ee: c1:44:75:5b:64:61:a9:13:38:9f:a4:22:63:f0:bb:24:dd:93: c9:56:1a:c9:6c:e8:93:fc:69:b2:e9:38:1b:55:5b:24:ad:e5: 52:64:2c:1c:6d:d8:c2:e3:4a:60:bf:b4:58:f2:7d:0e:b3:50: 45:46:c1:9f:2f:79:93:f0:49:d5:e6:d5:7e:39:bf:f9:b5:51: 04:d9:fe:50:46:f9:d3:bd:9c:30:19:a9:19:86:03:1c:a6:99: a4:e0:cd:9d:da:d8:50:f9:82:77:a9:22:38:43:2e:88:64:20: 4e:06:11:d7:bf:e2:ca:ce:b6:ab:3b:1a:67:a9:b1:3c:91:d7: 12:32:e5:bf:b5:d1:2c:22:8f:34:d3:6d:57:78:6c:a2:b7:be: a4:7d:75:9a:17:17:22:96:4d:e4:0c:29:5e:28:e1:0d:d0:28: ba:ad:46:65:31:ff:0a:9f:45:dc:80:e0:65:14:19:38:72:1b: 45:91:25:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2Y/XKKehNYwf2nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MDkxNjEwMDI0NVoXDTI1MTIxNTExMDI0NVowLzEtMCsGA1UEAxMk ZWFiODFjZjEtNzM1NS00ODNjLTk3NjItZTMyNzVlODkyZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19jG9w+rzLGNYTz1ykyIZF0qnWU9tgNTPxMS MQucTUUGDmKa0gKaHbEO8hbuQuvcrTStrZmVPW7Y1c2HTkGwrXXAjyKGB/52U08N PpsOkaV6opvH9R7H8cebX130gQjKkDiio1Vh48RZec64A1qmUwwA7whzKqF/fuQ6 AyJLmkJaLypGlP/nzk5w27o6ytcHThYlaZjB/cvoy6fawUtxiOXzIHNjuGUH/lMN hVPvS4RfBOL5g6q7QsNqY8kL8trqPyiycLG/X97JY8IGaSGNfMYAnojGfTnp3/bD JYkdiyE1CvQGFdh0a2GOcdAgEpn/jkanUldW56M6SKIjAf3/WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFID8Cm+B7jZ0E51IgxczVqL0NXFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMzJkZDllMGQtYTFjNi0z ZTQ1LWI1ZTQtZGI4ZjI1YzMzNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqviAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGdjphcYFo+laJeQz+Co8aK7c65y+KxadGn+KPYwdhaBXYWNd3Fu7Ci DSO1E0i0FB0TN2TC4fU7LN/+Xr16EwvyQNtFkFRe7sFEdVtkYakTOJ+kImPwuyTd k8lWGsls6JP8abLpOBtVWySt5VJkLBxt2MLjSmC/tFjyfQ6zUEVGwZ8veZPwSdXm 1X45v/m1UQTZ/lBG+dO9nDAZqRmGAxymmaTgzZ3a2FD5gnepIjhDLohkIE4GEde/ 4srOtqs7GmepsTyR1xIy5b+10SwijzTTbVd4bKK3vqR9dZoXFyKWTeQMKV4o4Q3Q KLqtRmUx/wqfRdyA4GUUGThyG0WRJTU= -----END CERTIFICATE-----Generated at Tue Oct 21 01:07:27 2025 by rpki-client