$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa File: e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa (raw, json) Hash identifier: U6DxpC0jBn4aCXxpOi5FFXjXIjosM0vuKu9iT3u00ag= Subject key identifier: BA:45:F4:BC:B1:B9:93:E4:93:DD:A6:A5:FD:5C:1C:8C:2A:D8:A6:08 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BA39D1230B270966A1DF0D980 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 399629 IP address blocks: 206.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:12:30:b2:70:96:6a:1d:f0:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=39ec894b-1d31-4c82-a161-789795826f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3f:a1:ac:f8:bd:32:39:aa:8d:66:cd:1d:eb: 35:95:5d:31:9c:0c:4f:b8:10:11:23:6b:bc:38:2c: 86:15:61:50:b2:f4:8b:fa:aa:08:93:fe:c0:e4:b3: e3:79:b4:0c:26:c7:86:11:a5:43:3c:48:b8:02:1c: a1:f9:9e:f1:cf:74:76:04:45:60:81:99:25:f4:c3: 46:f8:e6:96:1d:70:e6:ec:f1:aa:ef:4e:fc:30:7a: 76:d6:24:bf:54:7f:d2:1a:35:e7:cf:fd:48:43:d1: 9e:c7:43:65:7c:24:ec:6c:76:80:3c:68:6c:27:12: 76:0e:5f:47:3c:38:ba:dd:12:1c:31:36:9d:1b:c4: 2a:73:eb:51:0e:05:ad:cf:b6:3b:e2:b2:96:fe:a5: 50:04:23:5b:69:d3:40:3e:51:8a:27:19:74:d8:4d: 73:7d:bd:12:93:22:bd:cf:df:13:bc:90:be:56:8d: 62:13:91:88:23:db:ad:55:2c:0e:c0:bb:cd:36:38: af:73:50:5e:22:18:3d:8b:71:c0:71:cd:ad:e3:f1: d7:7e:55:14:69:2e:15:b2:30:34:54:b7:34:12:22: 8f:aa:25:7c:67:0e:b6:d9:46:28:02:ac:36:f7:bf: e5:fb:73:a8:55:e8:f8:c9:10:b1:2c:8e:5b:c3:6f: d0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:45:F4:BC:B1:B9:93:E4:93:DD:A6:A5:FD:5C:1C:8C:2A:D8:A6:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/e3469c32-69c6-339a-9b91-0e1e2ab22f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 206.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:89:33:98:90:1e:3c:ee:d9:94:fc:18:e8:1d:a9:91:b2:4c: 1e:45:5d:99:3b:30:51:c3:46:18:2d:96:5c:9d:03:74:02:7e: 0d:55:eb:21:5d:f5:1b:39:2f:54:61:23:2d:1c:ff:1e:42:d2: 99:bc:33:f8:ae:13:46:1b:cf:d0:28:5f:22:e6:31:2c:04:bd: f1:b2:42:30:e4:df:6f:f1:f3:66:ab:1a:a6:74:9f:37:40:d2: e0:72:85:9c:7d:89:b8:35:24:db:fe:79:c4:99:c6:85:1a:a5: ae:29:e8:96:8a:fe:ed:3d:9b:02:6c:3b:a6:07:17:f0:17:3f: 70:6f:98:0d:f7:7e:94:43:c0:bc:26:f9:a6:8b:97:dd:a1:4a: 09:91:cd:98:56:9a:fc:d6:96:9b:15:39:2f:bb:8e:91:4c:99: 91:ac:e6:95:2b:1e:93:2a:3c:c3:dc:9e:0d:04:4a:e0:98:9d: 97:23:ab:73:07:59:75:58:49:0d:f7:56:ad:97:02:23:ad:77: 27:af:c2:52:a3:3b:41:1f:ed:58:84:79:67:77:08:2d:ad:fc: 4c:99:13:a6:00:6b:26:e9:35:40:d2:e9:16:3e:34:6d:ea:e4: c5:d5:81:dd:31:15:c6:78:92:73:f5:b3:72:9e:72:f6:fa:20: fa:e6:ed:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRIwsnCWah3w2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MzllYzg5NGItMWQzMS00YzgyLWExNjEtNzg5Nzk1ODI2ZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj+hrPi9MjmqjWbNHes1lV0xnAxPuBARI2u8 OCyGFWFQsvSL+qoIk/7A5LPjebQMJseGEaVDPEi4Ahyh+Z7xz3R2BEVggZkl9MNG +OaWHXDm7PGq7078MHp21iS/VH/SGjXnz/1IQ9Gex0NlfCTsbHaAPGhsJxJ2Dl9H PDi63RIcMTadG8Qqc+tRDgWtz7Y74rKW/qVQBCNbadNAPlGKJxl02E1zfb0SkyK9 z98TvJC+Vo1iE5GII9utVSwOwLvNNjivc1BeIhg9i3HAcc2t4/HXflUUaS4VsjA0 VLc0EiKPqiV8Zw622UYoAqw297/l+3OoVej4yRCxLI5bw2/QrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpF9LyxuZPkk92mpf1cHIwq2KYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZTM0NjljMzItNjljNi0z MzlhLTliOTEtMGUxZTJhYjIyZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzrzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuJM5iQHjzu2ZT8GOgdqZGyTB5FXZk7MFHDRhgtllydA3QCfg1V6yFd 9Rs5L1RhIy0c/x5C0pm8M/iuE0Ybz9AoXyLmMSwEvfGyQjDk32/x82arGqZ0nzdA 0uByhZx9ibg1JNv+ecSZxoUapa4p6JaK/u09mwJsO6YHF/AXP3BvmA33fpRDwLwm +aaLl92hSgmRzZhWmvzWlpsVOS+7jpFMmZGs5pUrHpMqPMPcng0ESuCYnZcjq3MH WXVYSQ33Vq2XAiOtdyevwlKjO0Ef7ViEeWd3CC2t/EyZE6YAaybpNUDS6RY+NG3q 5MXVgd0xFcZ4knP1s3Kecvb6IPrm7bo= -----END CERTIFICATE-----Generated at Tue Oct 28 00:36:03 2025 by rpki-client