$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa File: 0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa (raw, json) Hash identifier: tcg9AfwOb/0l5HWr3USVTAbvOka/OBojnLep8eo3pGc= Subject key identifier: A6:A2:4D:8F:A5:72:82:70:48:CC:F1:3D:F0:C6:4B:75:D7:77:90:08 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AFEE6AA5F1ABDEC0CE9B28880 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 399629 IP address blocks: 149.248.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:aa:5f:1a:bd:ec:0c:e9:b2:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=358fffce-1564-45a3-8b31-70e83cfce6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:83:db:ba:23:a0:97:68:e7:6b:2d:a3:5d:60: 7e:60:92:54:9f:83:ca:ee:e8:d9:a1:ad:ac:72:fb: af:a5:05:2e:ae:25:41:54:94:43:1a:a6:30:d4:67: b6:14:d7:68:d0:41:30:5c:a6:98:70:bb:fe:ca:5d: eb:dd:9a:2e:27:22:04:3b:14:63:03:e9:ba:20:0f: e5:e1:a6:84:77:63:f2:d4:af:18:3e:6f:63:12:1a: 03:b7:5f:00:95:09:99:2e:7e:6d:23:eb:f8:ee:54: 6e:fc:af:4d:62:73:85:b1:a3:f2:bc:24:7f:40:9f: ae:1f:93:13:99:85:26:39:f7:07:db:0f:ec:93:ec: 8c:b2:5c:6c:77:ed:18:d3:cd:b5:ce:5c:65:a2:c8: 8b:e2:13:77:2c:4b:85:76:3d:42:60:49:26:04:a8: ac:4a:06:b5:52:6f:f0:d1:55:0a:63:ba:10:01:10: e7:52:25:7a:33:26:42:89:63:e3:26:15:80:7d:0e: e2:87:19:fb:62:9d:63:0e:d7:ce:f7:b9:1a:b8:c9: 39:8b:91:d8:6f:6a:20:a4:46:c6:1e:5d:f6:7a:87: b1:27:25:a5:1e:0a:2a:0e:cd:eb:f1:08:cc:a7:e2: fd:9d:2f:ae:85:ed:b3:35:4d:77:f9:ae:83:be:06: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A2:4D:8F:A5:72:82:70:48:CC:F1:3D:F0:C6:4B:75:D7:77:90:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/0a8029f0-bcdb-3d4b-996d-d8cb94c8711d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 149.248.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3a:2f:38:de:dd:28:b2:f9:d1:ca:1e:78:74:14:1a:c5:d5: 0c:7d:98:5e:ab:50:2d:5b:de:aa:60:aa:b0:57:d0:8c:61:74: 92:ae:e4:65:e1:72:b8:da:70:d0:c1:10:a1:2b:48:ec:36:e2: 42:cc:c8:4e:23:89:06:46:f3:c6:44:e6:0a:f5:ba:3d:3a:23: ff:81:bb:5b:9b:73:d0:eb:52:8f:29:e8:2d:c8:05:7c:af:d1: 36:a4:b4:39:73:36:1c:56:1a:a8:54:43:e6:9b:47:a2:92:d6: 76:3d:a8:17:9f:26:c0:f4:b8:72:03:2a:a5:a5:b7:eb:ba:18: 65:4e:f7:aa:42:67:75:43:d7:8c:39:b0:ff:b3:39:d3:d0:27: 89:32:4f:b7:a0:e9:5e:b1:be:d0:d0:d0:d8:c8:d4:8e:2d:25: 49:9f:a6:03:47:a9:42:21:ff:7e:b0:c2:bf:0a:d9:0d:2b:ff: c9:57:d5:25:40:46:82:7d:f4:5e:47:98:d6:6e:f7:34:76:8e: a0:fc:e7:d6:f3:62:8a:3f:d7:53:fe:a1:bf:eb:18:eb:34:7d: 0f:32:7f:d4:25:3d:26:d5:da:d1:9d:1b:5d:3c:fd:41:da:d7: 4c:76:63:40:d2:3c:b4:84:1c:15:b9:ba:3b:fd:f8:6f:20:fe: 77:d5:70:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qpfGr3sDOmyiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MzU4ZmZmY2UtMTU2NC00NWEzLThiMzEtNzBlODNjZmNlNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIPbuiOgl2jnay2jXWB+YJJUn4PK7ujZoa2s cvuvpQUuriVBVJRDGqYw1Ge2FNdo0EEwXKaYcLv+yl3r3ZouJyIEOxRjA+m6IA/l 4aaEd2Py1K8YPm9jEhoDt18AlQmZLn5tI+v47lRu/K9NYnOFsaPyvCR/QJ+uH5MT mYUmOfcH2w/sk+yMslxsd+0Y0821zlxlosiL4hN3LEuFdj1CYEkmBKisSga1Um/w 0VUKY7oQARDnUiV6MyZCiWPjJhWAfQ7ihxn7Yp1jDtfO97kauMk5i5HYb2ogpEbG Hl32eoexJyWlHgoqDs3r8QjMp+L9nS+uhe2zNU13+a6DvgZ3+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaiTY+lcoJwSMzxPfDGS3XXd5AIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMGE4MDI5ZjAtYmNkYi0z ZDRiLTk5NmQtZDhjYjk0Yzg3MTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY6Lzje3Siy+dHKHnh0FBrF1Qx9mF6rUC1b3qpgqrBX0IxhdJKu5GXh crjacNDBEKErSOw24kLMyE4jiQZG88ZE5gr1uj06I/+Bu1ubc9DrUo8p6C3IBXyv 0TaktDlzNhxWGqhUQ+abR6KS1nY9qBefJsD0uHIDKqWlt+u6GGVO96pCZ3VD14w5 sP+zOdPQJ4kyT7eg6V6xvtDQ0NjI1I4tJUmfpgNHqUIh/36wwr8K2Q0r/8lX1SVA RoJ99F5HmNZu9zR2jqD859bzYoo/11P+ob/rGOs0fQ8yf9QlPSbV2tGdG108/UHa 10x2Y0DSPLSEHBW5ujv9+G8g/nfVcEs= -----END CERTIFICATE-----Generated at Sat Oct 18 18:04:55 2025 by rpki-client