$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa File: 8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa (raw, json) Hash identifier: 4zNiyqwZ3Icmsk9PrYTvJoEQCgkl3pdqjxWHctj54Hw= Subject key identifier: 45:0E:7C:5D:6B:30:90:12:73:EE:AC:53:FF:67:5A:EC:CC:22:37:1F Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BB88D178EC147E6B092F64300 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 399629 IP address blocks: 64.190.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:17:8e:c1:47:e6:b0:92:f6:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=96ba7248-0c0e-4e03-b49f-0ebcb5183972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:76:34:a7:29:06:a0:9e:1b:7e:e7:f1:a4:66: 63:2a:ab:3c:9c:ae:44:07:05:b9:b7:f8:a4:7f:3d: 20:b7:28:dc:e4:6c:ae:9f:cc:66:cd:b4:77:6b:78: fb:06:11:b3:07:25:85:b3:d9:8d:7c:c7:c2:86:4a: 61:c7:4c:7b:10:3e:8a:54:0b:0d:69:8b:97:84:1b: 81:19:bf:82:90:de:f6:61:f7:c6:cf:79:26:12:7e: c1:e1:59:c2:ab:2d:6b:de:85:74:5d:65:12:58:b2: 88:17:91:eb:d6:95:b0:a5:88:61:5c:f9:ce:e4:c3: 9d:b3:b7:48:bc:1f:37:7d:6a:88:0f:51:06:17:33: 54:dc:06:66:bb:c2:00:70:d6:b1:7e:61:51:34:0f: 57:10:8f:0c:17:b1:0a:92:af:10:dd:10:ce:22:fb: b4:cd:96:1b:5e:4a:3a:e1:a6:c3:41:44:6a:d2:c8: 58:d8:3a:af:39:72:6a:6e:f0:72:26:76:d0:2f:05: 77:9d:e6:06:41:7f:35:12:87:d8:d3:49:9f:46:85: a8:3b:6a:ba:2d:8c:49:4b:98:8a:18:3b:ff:a9:92: cf:89:d8:10:38:3c:34:bb:93:7f:db:ca:f0:41:5c: 33:2f:55:9a:6e:6f:c6:79:d5:5f:34:b3:6f:02:26: 6d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0E:7C:5D:6B:30:90:12:73:EE:AC:53:FF:67:5A:EC:CC:22:37:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.190.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6d:60:9c:82:b5:41:df:75:e8:fb:16:32:6e:e9:8d:ab:35: 64:30:29:27:c0:2a:d5:17:b6:86:d5:95:aa:da:f3:ba:8c:12: b4:57:c8:04:ab:56:6b:c3:66:69:eb:7d:94:20:69:55:ee:5c: 1e:a0:dc:8c:2e:de:60:bc:9d:f0:01:5c:a5:12:fa:89:33:49: 20:43:88:98:94:87:00:26:60:86:27:07:10:64:8d:4f:be:14: 2f:a6:36:74:21:c2:d4:fe:91:2c:a0:28:6d:af:68:e3:e7:a7: a1:f0:fa:03:b1:72:a1:34:9a:40:bf:a3:8a:00:be:ef:47:b8: 6b:f2:2c:26:be:39:c3:9c:09:af:04:40:ce:a0:a7:88:11:d0: 9b:d9:26:51:9c:4d:3c:b4:fc:de:0f:a9:73:a5:ae:6e:b0:62: e7:30:14:8b:27:5c:5b:2f:92:a6:84:c1:3d:f1:bd:c7:5b:c6: 85:7d:d5:c1:de:28:94:9f:e1:6f:d5:f5:a4:2f:77:20:79:78: 9c:86:fd:3e:6c:a7:6d:89:a9:4b:20:07:4f:12:16:5d:9d:da: df:e7:8d:a8:ce:b2:47:1c:87:c4:81:dd:6f:58:32:7e:aa:9d: 1a:79:86:26:6b:77:5e:53:36:eb:31:6d:5d:d8:ca:dc:29:2f: 8e:4c:73:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jReOwUfmsJL2QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTZiYTcyNDgtMGMwZS00ZTAzLWI0OWYtMGViY2I1MTgzOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHY0pykGoJ4bfufxpGZjKqs8nK5EBwW5t/ik fz0gtyjc5Gyun8xmzbR3a3j7BhGzByWFs9mNfMfChkphx0x7ED6KVAsNaYuXhBuB Gb+CkN72YffGz3kmEn7B4VnCqy1r3oV0XWUSWLKIF5Hr1pWwpYhhXPnO5MOds7dI vB83fWqID1EGFzNU3AZmu8IAcNaxfmFRNA9XEI8MF7EKkq8Q3RDOIvu0zZYbXko6 4abDQURq0shY2DqvOXJqbvByJnbQLwV3neYGQX81EofY00mfRoWoO2q6LYxJS5iK GDv/qZLPidgQODw0u5N/28rwQVwzL1Wabm/GedVfNLNvAiZtiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUOfF1rMJASc+6sU/9nWuzMIjcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvOGVmM2M4ZTItOTY3YS0z MWRlLTg4Y2QtNmNiZGY1YjVjNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL5xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhtYJyCtUHfdej7FjJu6Y2rNWQwKSfAKtUXtobVlara87qMErRXyASr VmvDZmnrfZQgaVXuXB6g3Iwu3mC8nfABXKUS+okzSSBDiJiUhwAmYIYnBxBkjU++ FC+mNnQhwtT+kSygKG2vaOPnp6Hw+gOxcqE0mkC/o4oAvu9HuGvyLCa+OcOcCa8E QM6gp4gR0JvZJlGcTTy0/N4PqXOlrm6wYucwFIsnXFsvkqaEwT3xvcdbxoV91cHe KJSf4W/V9aQvdyB5eJyG/T5sp22JqUsgB08SFl2d2t/njajOskcch8SB3W9YMn6q nRp5hiZrd15TNusxbV3YytwpL45Mczw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:57:35 2025 by rpki-client