$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/220e7b39-75ae-3367-8d1f-c52011aa7b40.roa File: 220e7b39-75ae-3367-8d1f-c52011aa7b40.roa (raw, json) Hash identifier: u0WLmjmWOuCSPrVhieFaB6IjKeHuCCWn+Zg3zdPbNnQ= Subject key identifier: AC:DF:3E:AC:F6:16:D9:00:CB:39:E2:2E:5A:8A:A5:B7:09:B7:C5:95 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AC2E0E407A53C7E7A9A28F9C0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/220e7b39-75ae-3367-8d1f-c52011aa7b40.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 399629 IP address blocks: 162.33.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e4:07:a5:3c:7e:7a:9a:28:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=e7213d6c-4cc8-458e-a131-d7494f62eab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b1:7a:2f:c4:b6:a0:30:8c:45:d5:a7:5c:7e: ae:e0:8d:dd:7f:b2:10:f5:d8:85:04:dc:ad:85:59: 90:71:ba:23:00:60:20:a9:ef:44:1a:55:44:ca:a5: ec:1d:af:cd:82:79:90:6f:66:42:93:e2:8b:0b:d4: 0d:31:b7:9a:a1:b0:50:c4:28:87:b1:1d:8a:c9:3f: be:d5:0a:dc:04:0e:b8:00:ae:9a:d8:cb:01:b2:89: a3:fb:c6:1b:58:16:48:0d:cc:01:c5:b2:e7:c7:85: 62:02:cc:0b:ec:45:ea:8a:42:e1:09:b7:23:11:59: 5d:f2:a6:31:de:bb:5f:3a:77:b6:00:07:10:a8:17: 04:57:76:ab:2c:08:af:c7:dc:eb:f3:46:80:73:d0: 3f:dd:47:77:08:e7:d6:b8:87:0b:78:de:f4:61:8d: 5a:8c:b9:47:2b:60:91:c5:9f:86:1a:22:b2:1e:21: 8a:b7:09:41:b6:d2:d0:fb:16:76:86:a9:17:c0:32: cf:8f:90:3e:3f:c5:28:68:7d:d5:87:99:6f:67:54: 8f:20:ce:8c:f9:e7:ba:a1:ae:32:49:7a:8e:46:70: e0:8e:22:7e:e0:a1:c5:b8:13:d2:a3:0d:8e:75:67: fc:bf:3f:6a:b5:57:e1:10:39:f3:5c:79:f4:4f:66: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DF:3E:AC:F6:16:D9:00:CB:39:E2:2E:5A:8A:A5:B7:09:B7:C5:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/220e7b39-75ae-3367-8d1f-c52011aa7b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 162.33.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:cf:40:88:55:c1:8e:79:5c:cf:81:c1:1a:99:f4:4b:14:9e: 6c:ba:06:1d:57:de:91:68:18:5d:00:6a:3b:8c:e5:46:b1:25: 98:54:bb:3f:cb:b3:bb:70:02:f3:5d:04:1a:71:a3:97:44:68: 38:05:b4:d3:0b:96:e1:1f:0e:c9:63:9a:ee:dc:c8:b9:6a:34: 3c:ba:14:02:76:92:85:d2:ec:ff:33:44:68:95:61:05:b5:ff: 30:b3:82:ec:b5:d0:fa:1e:ae:d7:b7:5e:46:c9:46:c6:68:27: d5:c9:62:de:5f:c4:67:62:35:a1:20:52:22:a7:ea:ec:07:38: db:82:61:a6:81:97:fa:75:a8:59:ff:15:02:cb:3b:ba:b8:a3: 46:c2:33:d8:0e:b0:e5:d0:f3:91:37:81:51:12:66:83:c8:22: 1a:be:55:54:ce:5a:ad:03:42:23:22:4d:12:8a:66:8c:bd:3f: ba:6c:a8:82:bf:88:19:d0:90:98:58:38:a4:fb:47:6c:55:2e: 0e:25:79:0d:38:6f:71:40:f1:4a:b7:bc:55:00:27:c5:0b:42: 33:85:7b:a0:ba:33:50:11:60:32:51:64:69:16:6b:b4:30:e6: 4a:74:09:50:cb:2e:a4:17:89:77:40:8c:df:32:e6:fe:a5:43: 69:4b:81:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OQHpTx+epoo+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTcyMTNkNmMtNGNjOC00NThlLWExMzEtZDc0OTRmNjJlYWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibF6L8S2oDCMRdWnXH6u4I3df7IQ9diFBNyt hVmQcbojAGAgqe9EGlVEyqXsHa/NgnmQb2ZCk+KLC9QNMbeaobBQxCiHsR2KyT++ 1QrcBA64AK6a2MsBsomj+8YbWBZIDcwBxbLnx4ViAswL7EXqikLhCbcjEVld8qYx 3rtfOne2AAcQqBcEV3arLAivx9zr80aAc9A/3Ud3COfWuIcLeN70YY1ajLlHK2CR xZ+GGiKyHiGKtwlBttLQ+xZ2hqkXwDLPj5A+P8UoaH3Vh5lvZ1SPIM6M+ee6oa4y SXqORnDgjiJ+4KHFuBPSow2OdWf8vz9qtVfhEDnzXHn0T2aY3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzfPqz2FtkAyzniLlqKpbcJt8WVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMjIwZTdiMzktNzVhZS0z MzY3LThkMWYtYzUyMDExYWE3YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoiGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/PQIhVwY55XM+BwRqZ9EsUnmy6Bh1X3pFoGF0AajuM5UaxJZhUuz/L s7twAvNdBBpxo5dEaDgFtNMLluEfDsljmu7cyLlqNDy6FAJ2koXS7P8zRGiVYQW1 /zCzguy10Poerte3XkbJRsZoJ9XJYt5fxGdiNaEgUiKn6uwHONuCYaaBl/p1qFn/ FQLLO7q4o0bCM9gOsOXQ85E3gVESZoPIIhq+VVTOWq0DQiMiTRKKZoy9P7psqIK/ iBnQkJhYOKT7R2xVLg4leQ04b3FA8Uq3vFUAJ8ULQjOFe6C6M1ARYDJRZGkWa7Qw 5kp0CVDLLqQXiXdAjN8y5v6lQ2lLgRY= -----END CERTIFICATE-----Generated at Thu Aug 21 10:25:48 2025 by rpki-client