$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa File: a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa (raw, json) Hash identifier: 9d/q6fO+A1QMeg9Nsj2u/Oo2Jz8D1eR9x0HZ8H8YUfU= Subject key identifier: FA:01:6C:75:26:42:BE:E8:E5:B8:91:F2:54:70:41:75:F0:F6:79:D0 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AC2E0E4198A3E568A7ADCF180 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 399629 IP address blocks: 168.100.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e4:19:8a:3e:56:8a:7a:dc:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=89dc6212-6b50-47fa-8393-d95294dd60c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:60:e4:a2:30:f3:f3:72:79:dd:bf:75:d1: e5:cc:2c:49:a4:c5:03:cd:05:dc:6a:8f:f4:02:2d: 45:18:f8:81:d9:9d:5b:65:85:28:06:ce:37:36:fd: 28:fe:00:1a:bf:1b:78:55:42:01:4e:c7:2a:be:1e: 8f:4b:35:14:93:4b:56:82:20:c6:69:d0:dd:a1:af: 86:49:02:22:e7:0c:73:b4:84:b0:17:b0:85:7b:b2: 20:d5:38:cf:a7:cd:02:05:f0:a9:48:04:d9:2b:86: 9e:95:a0:6b:26:50:69:56:03:ca:77:8a:36:f9:76: 8f:8e:73:8b:43:9f:b5:c9:87:0c:1d:1d:a5:77:c1: 4c:e7:8c:d7:04:f6:f7:5e:9a:f7:a0:d0:6a:64:48: e9:35:81:eb:ef:88:1d:ac:78:5c:1d:f3:35:db:f4: 11:ec:20:79:73:35:0a:71:3f:97:3a:8f:53:d3:67: 8e:1a:e5:74:74:a9:4a:79:55:ca:62:72:5c:89:81: 57:4f:61:e1:ee:98:a9:c4:7c:a9:0c:9b:8d:46:db: dc:07:83:16:f1:b0:ba:b4:f1:c6:5f:a3:c4:82:87: fa:0d:bf:b8:cf:f6:ae:fd:84:be:43:25:c2:a1:e4: 0a:c5:a2:e3:4a:2f:60:c6:5d:2e:ec:b0:ae:f5:64: 8e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:01:6C:75:26:42:BE:E8:E5:B8:91:F2:54:70:41:75:F0:F6:79:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 168.100.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:36:d2:c2:8e:4a:6e:c1:f1:f1:b8:67:76:4b:e4:bd:a3:77: 47:1e:79:10:23:47:10:4e:b4:af:c2:d4:2e:17:a0:60:01:5a: 3b:8b:15:ac:38:a1:e1:ef:af:ab:25:00:56:31:fb:5e:34:e2: 30:b3:60:84:30:30:b8:0c:10:98:5d:b1:20:a0:57:b1:1b:8b: ea:77:58:09:da:6e:40:40:55:1e:8c:11:87:f9:c3:70:a2:56: 9a:89:57:9b:38:d1:bb:c7:66:6a:ee:79:e6:d3:a5:9d:9c:a8: c4:5d:03:8f:bf:35:78:70:3b:d7:68:41:31:fa:30:fe:cc:55: ff:6f:b5:32:90:50:13:5e:0c:a1:4b:bc:cf:ac:74:72:f7:0a: 8b:82:39:80:dd:53:d0:fa:4f:59:e0:d9:2b:97:2d:e8:13:d8: 90:21:49:4c:a1:74:fa:96:1b:8e:29:f4:95:1b:6b:09:9e:8b: b3:11:26:d1:dd:93:a3:a2:0d:ff:0e:3f:14:5a:be:38:77:f2: 86:38:be:29:dd:3e:6a:29:85:e7:41:ff:ad:96:44:a4:78:f8: c1:a0:5b:22:79:7c:c4:39:7c:44:f7:9b:c4:18:73:98:52:08: 7a:fe:9d:72:82:08:e0:7d:73:2e:e6:e1:c4:db:78:1c:07:8a: 49:f4:a9:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OQZij5Winrc8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODlkYzYyMTItNmI1MC00N2ZhLTgzOTMtZDk1Mjk0ZGQ2MGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozVg5KIw8/Nyed2/ddHlzCxJpMUDzQXcao/0 Ai1FGPiB2Z1bZYUoBs43Nv0o/gAavxt4VUIBTscqvh6PSzUUk0tWgiDGadDdoa+G SQIi5wxztISwF7CFe7Ig1TjPp80CBfCpSATZK4aelaBrJlBpVgPKd4o2+XaPjnOL Q5+1yYcMHR2ld8FM54zXBPb3Xpr3oNBqZEjpNYHr74gdrHhcHfM12/QR7CB5czUK cT+XOo9T02eOGuV0dKlKeVXKYnJciYFXT2Hh7pipxHypDJuNRtvcB4MW8bC6tPHG X6PEgof6Db+4z/au/YS+QyXCoeQKxaLjSi9gxl0u7LCu9WSOUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoBbHUmQr7o5biR8lRwQXXw9nnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTNmODM3MzYtYTJmNC0z ZThiLWE2OTQtZTRlYjcyZDVjNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG020sKOSm7B8fG4Z3ZL5L2jd0ceeRAjRxBOtK/C1C4XoGABWjuLFaw4 oeHvr6slAFYx+1404jCzYIQwMLgMEJhdsSCgV7Ebi+p3WAnabkBAVR6MEYf5w3Ci VpqJV5s40bvHZmrueebTpZ2cqMRdA4+/NXhwO9doQTH6MP7MVf9vtTKQUBNeDKFL vM+sdHL3CouCOYDdU9D6T1ng2SuXLegT2JAhSUyhdPqWG44p9JUbawmei7MRJtHd k6OiDf8OPxRavjh38oY4vindPmophedB/62WRKR4+MGgWyJ5fMQ5fET3m8QYc5hS CHr+nXKCCOB9cy7m4cTbeBwHikn0qUI= -----END CERTIFICATE-----Generated at Thu Aug 21 10:24:26 2025 by rpki-client