$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa File: dd8ac448-7845-3707-82ae-e039ea217c8d.roa (raw, json) Hash identifier: cC5yv5R0bcYQhih/dDig3C95sWVd10goj6nsTtW4Rt0= Subject key identifier: 9E:35:28:81:63:93:B1:3C:CB:48:45:66:5B:33:74:DF:36:D8:25:2E Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AC5AB90BFD2AB28350F7773C0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 399629 IP address blocks: 65.38.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:90:bf:d2:ab:28:35:0f:77:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=ae5de0f5-a1cf-48ae-a331-7fa6df4fde34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:b1:20:4a:70:00:1a:76:5d:62:1e:ce:72: bd:a9:65:eb:0e:c2:b3:02:d2:16:8c:b0:1d:ce:ba: a4:d1:06:e7:4c:d1:28:d0:71:65:26:84:bd:29:49: 49:32:f2:c0:99:fc:d3:97:19:57:65:a9:08:ee:ba: 29:78:42:ae:dd:ac:3a:93:51:06:fe:48:7a:e5:f4: c5:d3:8a:21:12:8a:bf:f4:eb:02:ed:48:aa:bb:d7: 8f:f9:e0:1c:01:c3:cb:73:22:d4:2d:e9:85:2b:5b: 29:e7:6b:b3:e5:dd:49:f1:09:a5:20:58:3a:3f:9c: 46:b1:13:dd:6f:f8:e5:2e:1a:a9:55:21:1b:a8:17: 97:9d:a1:5c:04:5c:5d:91:78:b0:a7:81:ea:4c:90: 20:ea:b9:a8:bd:23:80:35:65:e3:d2:72:7a:0c:94: 8c:90:e0:10:f9:2c:7f:76:2f:ee:57:14:e5:e7:35: 9e:ed:ae:81:0b:57:09:72:d2:6d:fe:e7:29:b7:e1: 63:3e:6c:f1:86:72:18:54:a3:cb:cc:07:07:1b:3d: e4:13:c0:94:c1:56:e4:cb:d5:9d:86:5b:52:5b:68: b4:88:41:ac:dc:8e:6f:f2:32:00:a8:c9:d5:9c:8d: 23:00:09:46:d9:c0:70:6a:92:65:40:2a:d2:44:3f: 72:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:28:81:63:93:B1:3C:CB:48:45:66:5B:33:74:DF:36:D8:25:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 65.38.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8e:5a:7f:54:44:46:21:47:53:8d:f4:26:7a:30:fa:5d:8b: e2:92:3b:d7:27:0f:8b:15:06:28:6e:0e:7e:0c:ac:49:68:ed: a2:b3:fa:ec:dd:fc:d1:db:97:f8:4e:63:e3:91:a0:e8:3c:01: 0b:4d:e8:11:02:5a:40:54:a8:02:66:b6:e9:7a:95:8d:8c:e8: 4f:dc:9e:70:1a:40:f8:d4:f9:a8:67:ad:fa:17:f3:20:d8:d2: 2f:a0:79:3e:36:3c:ce:e0:92:67:90:3c:74:a1:70:d1:38:86: 31:0d:83:c1:73:5a:e4:61:5a:4d:b4:c4:e7:ca:60:dc:00:85: a3:27:9b:eb:bf:c6:d9:1f:5f:4b:f2:9c:e2:3a:d8:1e:89:da: 11:cb:42:81:29:d3:d4:8c:0a:3a:b2:b3:c1:e8:9c:82:14:69: fc:3f:9a:7e:5c:56:5b:d3:95:d8:12:22:3b:1f:1f:ef:58:4e: a6:c1:bd:12:cb:d9:68:cb:97:b1:bc:b7:1b:f9:41:73:ce:89: ab:25:dc:07:dc:a3:a4:ff:ff:6f:01:f1:97:b4:2d:38:76:1e: 7a:82:38:1b:22:79:c1:9e:97:31:a5:56:ad:b4:15:38:17:87: 96:31:83:d8:27:24:ac:3e:44:2c:49:17:3b:bb:5e:e8:52:e4: 44:c8:bb:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5C/0qsoNQ93c8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YWU1ZGUwZjUtYTFjZi00OGFlLWEzMzEtN2ZhNmRmNGZkZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiaxIEpwABp2XWIeznK9qWXrDsKzAtIWjLAd zrqk0QbnTNEo0HFlJoS9KUlJMvLAmfzTlxlXZakI7ropeEKu3aw6k1EG/kh65fTF 04ohEoq/9OsC7Uiqu9eP+eAcAcPLcyLULemFK1sp52uz5d1J8QmlIFg6P5xGsRPd b/jlLhqpVSEbqBeXnaFcBFxdkXiwp4HqTJAg6rmovSOANWXj0nJ6DJSMkOAQ+Sx/ di/uVxTl5zWe7a6BC1cJctJt/ucpt+FjPmzxhnIYVKPLzAcHGz3kE8CUwVbky9Wd hltSW2i0iEGs3I5v8jIAqMnVnI0jAAlG2cBwapJlQCrSRD9ycwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ41KIFjk7E8y0hFZlszdN822CUuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZGQ4YWM0NDgtNzg0NS0z NzA3LTgyYWUtZTAzOWVhMjE3YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQSZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+OWn9UREYhR1ON9CZ6MPpdi+KSO9cnD4sVBihuDn4MrElo7aKz+uzd /NHbl/hOY+ORoOg8AQtN6BECWkBUqAJmtul6lY2M6E/cnnAaQPjU+ahnrfoX8yDY 0i+geT42PM7gkmeQPHShcNE4hjENg8FzWuRhWk20xOfKYNwAhaMnm+u/xtkfX0vy nOI62B6J2hHLQoEp09SMCjqys8HonIIUafw/mn5cVlvTldgSIjsfH+9YTqbBvRLL 2WjLl7G8txv5QXPOiasl3Afco6T//28B8Ze0LTh2HnqCOBsiecGelzGlVq20FTgX h5Yxg9gnJKw+RCxJFzu7XuhS5ETIuzA= -----END CERTIFICATE-----Generated at Thu Aug 21 10:27:36 2025 by rpki-client