$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa File: 02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa (raw, json) Hash identifier: WqoASE+r14iq+xeKSUTcPzz6pUhkiIMd+g/u/gqLfxI= Subject key identifier: 96:52:FA:5D:BE:0F:43:42:57:5D:50:91:7D:1B:D3:A0:3A:AE:D2:03 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AE9F66764985DA5903AE11C40 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 399629 IP address blocks: 64.95.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:67:64:98:5d:a5:90:3a:e1:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=a21ba76d-d5a5-42ab-891f-3e08e68cbbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:1e:9b:1a:22:d9:8a:cc:40:ad:10:b6:6c: 7c:1b:af:8a:0a:89:3c:ec:d3:d9:de:10:71:7d:7e: 33:5e:c8:57:c3:7d:1a:5c:d1:43:00:b6:18:09:9e: d5:af:76:d6:0e:18:4f:ac:f0:3c:e6:07:62:29:ca: 45:a2:42:06:af:72:27:27:19:d5:bc:af:f0:38:74: a2:26:ea:e8:3a:08:09:e4:32:e3:c8:0c:f4:ad:52: df:e8:0a:9a:f0:69:53:c3:17:d4:0f:da:92:e8:a7: e6:88:79:85:26:41:06:5c:4a:97:b6:9c:48:0f:b3: 8b:ef:82:2d:26:50:1a:2d:d7:30:40:e2:94:e2:a1: c4:cb:9f:08:cd:36:6b:fa:eb:1c:93:96:d7:71:93: 34:29:17:bc:94:b8:d8:45:ec:df:16:ca:64:63:32: ef:1e:94:a9:3f:b2:16:03:45:d9:cc:97:33:15:f6: 56:ab:a7:b5:ac:12:ec:f6:64:ab:5c:c5:8c:c9:d8: 6e:9d:a3:70:29:ac:1b:df:cf:44:38:4b:0e:2a:91: a2:bf:2e:44:8f:c3:95:0e:70:23:18:2e:36:cc:81: 46:a0:a6:81:48:09:e4:38:62:a9:2f:4f:4c:13:41: ad:83:a7:b2:f8:37:ea:40:c8:3e:50:31:e1:bb:63: 27:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:52:FA:5D:BE:0F:43:42:57:5D:50:91:7D:1B:D3:A0:3A:AE:D2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.95.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d3:25:38:bb:7b:1f:f7:0d:50:e9:c1:8d:91:3c:d3:f8:b5: 71:e2:14:72:36:00:d3:48:01:fb:d3:14:63:0e:10:ec:0f:4b: 40:c7:8b:a6:8c:09:df:61:51:5d:e3:bb:e9:84:3c:71:70:cb: b7:15:6d:ba:b8:8d:d7:38:a1:86:ae:de:0f:e7:f9:bb:05:f7: 43:ee:6d:8b:49:14:1d:7e:4a:59:a5:7b:e5:ee:76:c3:cf:7e: 36:4c:fe:08:26:3d:32:60:c4:68:cb:65:d3:a4:88:6d:6a:3d: 03:ce:e3:47:c1:f7:a0:84:eb:24:46:69:98:a7:b9:ae:f4:42: a5:e8:48:d5:14:18:94:c7:c8:55:1f:3f:8a:af:ed:17:6e:d0: 27:e8:74:79:e5:5a:20:3b:42:23:8b:93:c8:70:4c:6a:24:75: fd:fd:54:03:40:d3:2f:a8:53:2b:6e:a9:f0:8d:64:20:09:25: 2c:03:48:97:6b:3a:0d:d2:eb:ed:51:da:2d:d7:e5:c8:4b:f5: d3:34:c3:49:15:16:3f:06:a5:0b:43:a1:a7:e6:f4:e7:67:0e: f6:cb:b6:38:0d:82:e8:34:2f:e2:c3:7c:7b:af:00:7b:91:20: 8f:98:83:a7:fa:a7:5d:12:5b:09:97:4a:f2:12:ed:5e:67:a1: d6:8e:b2:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mdkmF2lkDrhHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk YTIxYmE3NmQtZDVhNS00MmFiLTg5MWYtM2UwOGU2OGNiYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1wemxoi2YrMQK0Qtmx8G6+KCok87NPZ3hBx fX4zXshXw30aXNFDALYYCZ7Vr3bWDhhPrPA85gdiKcpFokIGr3InJxnVvK/wOHSi JuroOggJ5DLjyAz0rVLf6Aqa8GlTwxfUD9qS6KfmiHmFJkEGXEqXtpxID7OL74It JlAaLdcwQOKU4qHEy58IzTZr+usck5bXcZM0KRe8lLjYRezfFspkYzLvHpSpP7IW A0XZzJczFfZWq6e1rBLs9mSrXMWMydhunaNwKawb389EOEsOKpGivy5Ej8OVDnAj GC42zIFGoKaBSAnkOGKpL09ME0Gtg6ey+DfqQMg+UDHhu2MnGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZS+l2+D0NCV11QkX0b06A6rtIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMDJlNWI1ZTgtZDUyNy0z YmRmLTljOWMtNmRlNjNhMDgyZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF8KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHTJTi7ex/3DVDpwY2RPNP4tXHiFHI2ANNIAfvTFGMOEOwPS0DHi6aM Cd9hUV3ju+mEPHFwy7cVbbq4jdc4oYau3g/n+bsF90PubYtJFB1+Slmle+XudsPP fjZM/ggmPTJgxGjLZdOkiG1qPQPO40fB96CE6yRGaZinua70QqXoSNUUGJTHyFUf P4qv7Rdu0CfodHnlWiA7QiOLk8hwTGokdf39VANA0y+oUytuqfCNZCAJJSwDSJdr Og3S6+1R2i3X5chL9dM0w0kVFj8GpQtDoafm9OdnDvbLtjgNgug0L+LDfHuvAHuR II+Yg6f6p10SWwmXSvIS7V5nodaOsqk= -----END CERTIFICATE-----Generated at Thu Aug 21 10:24:30 2025 by rpki-client