$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa File: dd8ac448-7845-3707-82ae-e039ea217c8d.roa (raw, json) Hash identifier: yYvEc0bPgWwghnXzymixdHxHeXsDyU6FQ6lqLNUggQM= Subject key identifier: 6D:3F:08:99:DA:31:9D:39:80:E0:2A:D8:AF:E2:4C:36:B7:C7:04:00 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BA667ABE5EC22E0561313AE00 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 399629 IP address blocks: 65.38.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ab:e5:ec:22:e0:56:13:13:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=ea37c421-bf1d-490b-9b6b-00c341436235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7b:1b:8c:a8:80:65:99:a7:59:ba:b3:6b:44: 74:04:e7:0e:ef:15:eb:0d:1e:67:d9:d1:32:9a:0a: f0:a8:6a:a2:a4:13:05:3d:0d:c8:1a:20:6e:57:2b: 8f:05:06:07:8b:9b:96:fc:e3:ff:5c:fd:cf:33:2a: 72:f1:dc:e3:a7:6e:07:43:41:26:e0:5f:92:da:14: ee:38:12:bc:cb:47:3f:22:42:47:a9:ec:65:21:0d: 6c:a7:59:3c:9c:37:aa:15:aa:f5:9a:1d:fe:df:9c: 6b:46:9f:f9:cc:9f:62:f7:b8:71:66:45:be:33:c1: 08:be:4b:3f:63:ce:e5:a8:9c:7f:01:df:06:9c:83: 20:42:86:d2:a3:20:4f:1f:6c:31:8a:eb:12:e6:cc: 60:2a:fe:e1:14:ae:10:b3:e7:f8:9b:75:18:ab:db: 4d:a8:4c:64:16:ed:d9:0b:e2:a1:d7:53:61:08:b6: 9c:d7:b1:25:ba:bb:a4:eb:ed:9c:fd:95:69:35:53: 7b:0d:de:dc:9a:83:65:06:a9:8d:fd:c5:9c:6c:57: 33:5e:ba:99:47:4c:b6:24:81:6a:56:23:c0:07:64: 18:1a:21:89:bb:58:73:7b:3f:5c:f1:14:23:51:84: fe:47:d0:3e:ad:31:5f:d0:c4:ec:45:a4:aa:4a:e8: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3F:08:99:DA:31:9D:39:80:E0:2A:D8:AF:E2:4C:36:B7:C7:04:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 65.38.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:60:69:c1:7f:66:35:24:0f:97:fc:df:17:e4:af:84:78:71: 3f:df:e0:c0:38:3d:6d:73:4b:71:dd:b9:3f:7a:0a:4c:3a:05: 22:41:65:c0:80:06:12:46:d8:66:ff:56:74:36:29:39:9c:82: cb:5f:50:6b:0d:75:c9:72:fc:7f:ce:46:1a:08:d3:8e:73:0f: 77:64:7d:91:0e:bc:88:fb:ba:34:a2:29:e8:9e:1e:17:22:bf: a2:60:d7:11:66:7f:60:52:47:fc:2d:e3:27:9a:1d:cb:62:20: 51:76:92:4c:7e:67:3b:45:15:27:ac:84:2a:3c:ad:af:63:2b: 5a:35:ee:3a:44:d8:9b:8f:c4:b9:e6:ee:f1:7e:ff:b1:09:e6: 54:45:cd:f1:29:af:77:b7:a2:2c:0e:c3:80:9f:fc:fe:69:67: af:51:d2:a1:82:3b:c8:53:f2:c2:f8:d4:b5:ec:9b:7d:84:56: 22:9c:33:df:42:d3:b3:0f:12:c7:32:ea:0a:3c:79:47:f5:01: 79:a1:a7:a2:ce:51:9a:3e:17:6d:07:81:5b:bf:31:5c:96:7d: 1e:8a:5f:b0:b5:fd:32:1e:ff:4b:99:d5:cf:b7:00:ba:08:d5: d5:80:7e:c2:8e:cc:08:3b:6a:0b:49:b8:db:b0:61:2e:ae:d1: 53:66:16:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6vl7CLgVhMTrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZWEzN2M0MjEtYmYxZC00OTBiLTliNmItMDBjMzQxNDM2MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HsbjKiAZZmnWbqza0R0BOcO7xXrDR5n2dEy mgrwqGqipBMFPQ3IGiBuVyuPBQYHi5uW/OP/XP3PMypy8dzjp24HQ0Em4F+S2hTu OBK8y0c/IkJHqexlIQ1sp1k8nDeqFar1mh3+35xrRp/5zJ9i97hxZkW+M8EIvks/ Y87lqJx/Ad8GnIMgQobSoyBPH2wxiusS5sxgKv7hFK4Qs+f4m3UYq9tNqExkFu3Z C+Kh11NhCLac17Eluruk6+2c/ZVpNVN7Dd7cmoNlBqmN/cWcbFczXrqZR0y2JIFq ViPAB2QYGiGJu1hzez9c8RQjUYT+R9A+rTFf0MTsRaSqSugSqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0/CJnaMZ05gOAq2K/iTDa3xwQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZGQ4YWM0NDgtNzg0NS0z NzA3LTgyYWUtZTAzOWVhMjE3YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQSZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItgacF/ZjUkD5f83xfkr4R4cT/f4MA4PW1zS3HduT96Ckw6BSJBZcCA BhJG2Gb/VnQ2KTmcgstfUGsNdcly/H/ORhoI045zD3dkfZEOvIj7ujSiKeieHhci v6Jg1xFmf2BSR/wt4yeaHctiIFF2kkx+ZztFFSeshCo8ra9jK1o17jpE2JuPxLnm 7vF+/7EJ5lRFzfEpr3e3oiwOw4Cf/P5pZ69R0qGCO8hT8sL41LXsm32EViKcM99C 07MPEscy6go8eUf1AXmhp6LOUZo+F20HgVu/MVyWfR6KX7C1/TIe/0uZ1c+3ALoI 1dWAfsKOzAg7agtJuNuwYS6u0VNmFuY= -----END CERTIFICATE-----Generated at Mon Oct 27 20:31:59 2025 by rpki-client