$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa File: 32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa (raw, json) Hash identifier: bxXqsn44U1Cd7Pz547D4IjGQhYZ3IwJ6SHneIk5eqCI= Subject key identifier: 2C:88:F5:4B:49:2B:3D:E2:D3:E6:C0:CF:2F:F9:54:46:47:3E:CF:32 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584ADECBAA77024BD89F59FF2E80 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 199.187.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:aa:77:02:4b:d8:9f:59:ff:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=7b72ef31-747e-4ace-bc56-64ec8bcf2310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:fd:f7:09:c0:b1:3d:4b:80:57:c1:ea:ff: 53:ee:52:95:2f:21:23:ee:c5:5b:f9:ae:a3:97:c2: cf:bc:46:d7:61:e0:79:1e:c0:6c:0b:71:c3:ee:09: 61:d0:98:53:eb:70:4e:d9:e9:88:ff:55:0d:ee:e4: 8f:a1:ab:ef:e2:c8:f3:b3:74:b9:6c:97:9a:25:9f: f3:9e:45:50:18:1a:9f:91:e5:0c:0d:8f:c1:bf:68: 96:26:8e:31:dc:97:7e:37:e2:b7:af:46:84:01:db: 6e:3a:9d:92:a3:26:a5:e9:8c:6d:b4:94:d4:89:ca: 28:f6:88:c6:20:9e:f6:09:31:2e:16:3f:22:45:24: 9e:7b:40:18:6e:55:a2:1a:53:98:5d:b5:7a:b5:e4: f2:f3:37:29:81:81:92:1b:1c:4d:1c:9d:7b:4c:46: 7c:17:79:1e:f2:06:0b:54:20:74:55:b3:80:ba:12: db:3b:e3:07:ae:8b:d3:0b:a3:60:e1:cb:a9:4d:93: 15:85:6b:e4:3d:43:9d:09:e8:ac:f9:1a:9a:94:2c: a6:eb:73:b5:12:f3:40:c9:ea:aa:5f:e8:06:e2:85: 4d:4f:6a:b9:5d:8d:a5:d1:15:bd:8b:0f:eb:f2:63: 34:df:35:5e:3f:bf:16:6a:df:af:aa:e6:15:e0:26: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:F5:4B:49:2B:3D:E2:D3:E6:C0:CF:2F:F9:54:46:47:3E:CF:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:34:b8:3a:c4:71:54:20:93:34:15:92:57:26:66:a6:73:6d: 02:54:6a:54:b6:ad:74:fa:21:7d:01:25:45:8d:bf:8d:1c:75: 0e:de:b2:0b:f0:1b:d5:8c:33:27:e4:35:a9:61:31:78:90:91: 08:2b:00:b4:1c:04:aa:db:72:80:a5:10:00:d5:23:c5:29:56: 08:9a:35:2f:2e:b9:58:30:49:dc:f3:51:61:1f:79:6e:34:02: 8b:d2:6d:a9:20:c6:35:81:8c:7e:55:39:cc:7a:a1:4d:10:6d: 8a:52:21:cc:d8:ab:bf:66:d4:34:c1:38:58:2b:41:97:fa:65: aa:c7:e6:60:95:11:c4:0f:14:2b:47:6e:b2:25:16:8f:17:d0: c8:5c:17:d0:7a:5e:c7:a4:47:5a:81:ad:5d:72:31:e4:7c:4d: 7d:f7:2b:a1:4c:87:87:c2:f6:ef:af:d7:30:8a:b0:95:ba:03: 0a:3e:7f:72:1b:e6:dc:31:29:24:4f:00:ab:80:5f:7f:c7:cf: 13:f4:5d:48:b1:82:73:e2:0f:bb:ae:3e:73:a0:4e:d5:00:a1: 98:7f:dd:2f:b7:d8:03:11:e2:1c:77:ed:bb:f6:5e:6f:b5:69: d3:9f:15:70:83:a6:4f:8e:70:43:63:61:2f:57:37:cd:0f:b7: c9:55:a5:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey6p3AkvYn1n/LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk N2I3MmVmMzEtNzQ3ZS00YWNlLWJjNTYtNjRlYzhiY2YyMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIn99wnAsT1LgFfB6v9T7lKVLyEj7sVb+a6j l8LPvEbXYeB5HsBsC3HD7glh0JhT63BO2emI/1UN7uSPoavv4sjzs3S5bJeaJZ/z nkVQGBqfkeUMDY/Bv2iWJo4x3Jd+N+K3r0aEAdtuOp2Soyal6YxttJTUicoo9ojG IJ72CTEuFj8iRSSee0AYblWiGlOYXbV6teTy8zcpgYGSGxxNHJ17TEZ8F3ke8gYL VCB0VbOAuhLbO+MHrovTC6Ng4cupTZMVhWvkPUOdCeis+RqalCym63O1EvNAyeqq X+gG4oVNT2q5XY2l0RW9iw/r8mM03zVeP78Wat+vquYV4CZiXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyI9UtJKz3i0+bAzy/5VEZHPs8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvMzJlOGQ0ODItNTBkMC0z NWNhLTg1YmYtNDZiY2Q4NWRkZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7urMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc0uDrEcVQgkzQVklcmZqZzbQJUalS2rXT6IX0BJUWNv40cdQ7esgvw G9WMMyfkNalhMXiQkQgrALQcBKrbcoClEADVI8UpVgiaNS8uuVgwSdzzUWEfeW40 AovSbakgxjWBjH5VOcx6oU0QbYpSIczYq79m1DTBOFgrQZf6ZarH5mCVEcQPFCtH brIlFo8X0MhcF9B6XsekR1qBrV1yMeR8TX33K6FMh4fC9u+v1zCKsJW6Awo+f3Ib 5twxKSRPAKuAX3/HzxP0XUixgnPiD7uuPnOgTtUAoZh/3S+32AMR4hx37bv2Xm+1 adOfFXCDpk+OcENjYS9XN80Pt8lVpSU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:10 2025 by rpki-client