$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa File: 8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa (raw, json) Hash identifier: E5FSPX+zBHUPpFsDuUn2IR3xClgcH3cSjhzj7nDbPAg= Subject key identifier: F5:AA:2F:92:BF:19:BE:3B:74:EA:72:C2:9C:A1:68:55:F4:03:FA:F1 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AD7D114BC57C877C634245300 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 399629 IP address blocks: 64.190.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:14:bc:57:c8:77:c6:34:24:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=db88cbdd-3044-4045-88fc-48a58e3948f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:8d:df:f6:4e:e0:c0:4b:dd:92:35:90:ae: 8d:be:68:47:c7:8e:ec:e7:24:e0:47:29:0e:01:15: 6e:61:32:f9:eb:db:05:da:b5:b1:05:e0:0f:86:4c: ac:85:8d:61:3b:67:da:41:c0:ec:9c:60:14:57:ed: c6:d4:5c:66:26:92:53:cb:a6:7b:fd:a3:93:8a:7d: 34:eb:3e:63:73:a4:c8:fa:6a:25:63:21:58:90:cf: 9c:95:d4:1e:bb:30:b0:6a:01:7a:19:2c:97:e7:71: 7f:94:63:21:ef:d0:b9:b4:2e:34:f8:bc:46:11:be: 12:ab:66:b9:35:58:5a:98:3c:a9:78:22:8f:f9:b3: b3:d9:9b:1e:4e:37:b7:6a:61:36:be:13:6b:98:ff: 92:fb:11:ae:f7:e0:3c:5a:24:a0:fb:51:a2:55:40: 12:2c:ad:ce:d2:02:7e:fc:2a:71:c6:fd:4a:56:c6: 61:60:5f:2c:bd:b6:4b:af:b3:99:39:61:a1:c4:83: 7c:a9:bb:58:d7:92:44:46:12:67:9c:d4:7b:f9:d4: e6:9b:af:38:4c:94:74:74:b8:c3:c1:a6:14:e7:61: f6:e0:46:4c:c4:a7:5c:aa:04:90:2a:3a:05:b1:43: cf:e6:a7:9c:ed:b9:a7:7e:33:04:8d:78:a1:a2:de: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AA:2F:92:BF:19:BE:3B:74:EA:72:C2:9C:A1:68:55:F4:03:FA:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.190.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:44:a8:ca:61:a3:58:1b:16:9d:83:b7:76:bd:7d:8f:96:7e: a1:09:2a:5f:6c:9f:b0:cc:4d:5e:2d:28:08:51:fe:dd:f7:5d: 5e:c1:b3:70:67:ce:23:d5:43:b2:1b:16:8d:80:25:9d:db:09: e1:86:53:56:78:77:2b:41:83:9e:67:b3:96:88:f3:e6:1f:b3: 86:f2:e6:a7:a8:2b:b1:ba:b9:c8:cc:ca:78:b7:64:d4:ff:be: 62:4d:5f:18:25:bb:cb:1d:02:e6:7f:df:aa:90:10:ee:86:c2: fa:1d:0a:2e:b0:33:80:15:37:4a:ab:d7:dd:03:71:a6:8a:94: a1:df:f1:bb:fa:c9:fa:60:33:dc:d0:7e:53:29:f2:ab:fa:c7: c4:00:07:fa:93:4e:8f:cd:f0:3b:e2:dd:47:75:c7:79:80:5a: 92:9f:e0:0c:dc:d3:2c:f7:0b:10:1b:cc:5e:85:a6:a1:f9:37: c2:8a:36:a6:39:7a:88:9f:3a:af:b6:ef:36:8d:ba:6b:03:a1: 80:4c:da:eb:72:79:e5:05:b6:bc:74:4f:a9:0d:a8:82:9a:12: 7e:cd:07:97:e5:74:aa:d7:ad:3f:2e:9f:20:45:b5:6c:41:89: c7:23:c0:d3:21:22:a0:8e:d6:c7:05:fe:95:18:ae:f0:3e:13: 87:58:8f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RS8V8h3xjQkUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZGI4OGNiZGQtMzA0NC00MDQ1LTg4ZmMtNDhhNThlMzk0OGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFqN3/ZO4MBL3ZI1kK6NvmhHx47s5yTgRykO ARVuYTL569sF2rWxBeAPhkyshY1hO2faQcDsnGAUV+3G1FxmJpJTy6Z7/aOTin00 6z5jc6TI+molYyFYkM+cldQeuzCwagF6GSyX53F/lGMh79C5tC40+LxGEb4Sq2a5 NVhamDypeCKP+bOz2ZseTje3amE2vhNrmP+S+xGu9+A8WiSg+1GiVUASLK3O0gJ+ /Cpxxv1KVsZhYF8svbZLr7OZOWGhxIN8qbtY15JERhJnnNR7+dTmm684TJR0dLjD waYU52H24EZMxKdcqgSQKjoFsUPP5qec7bmnfjMEjXihot5kBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWqL5K/Gb47dOpywpyhaFX0A/rxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvOGVmM2M4ZTItOTY3YS0z MWRlLTg4Y2QtNmNiZGY1YjVjNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL5xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5EqMpho1gbFp2Dt3a9fY+WfqEJKl9sn7DMTV4tKAhR/t33XV7Bs3Bn ziPVQ7IbFo2AJZ3bCeGGU1Z4dytBg55ns5aI8+Yfs4by5qeoK7G6ucjMyni3ZNT/ vmJNXxglu8sdAuZ/36qQEO6GwvodCi6wM4AVN0qr190DcaaKlKHf8bv6yfpgM9zQ flMp8qv6x8QAB/qTTo/N8Dvi3Ud1x3mAWpKf4Azc0yz3CxAbzF6FpqH5N8KKNqY5 eoifOq+27zaNumsDoYBM2utyeeUFtrx0T6kNqIKaEn7NB5fldKrXrT8unyBFtWxB iccjwNMhIqCO1scF/pUYrvA+E4dYj5s= -----END CERTIFICATE-----Generated at Thu Aug 21 10:25:48 2025 by rpki-client