$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa File: f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa (raw, json) Hash identifier: 8sF5wMhQrUdHicHy31B7DW1ex3+/2kjMN8bWf0i1zfU= Subject key identifier: 12:A3:8C:34:50:0E:6B:33:F4:01:64:9E:6C:70:D9:E0:ED:74:2C:D4 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AC0163F40E0DEFFEDB4FBAFC0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 399629 IP address blocks: 64.94.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:3f:40:e0:de:ff:ed:b4:fb:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=b476305b-2323-47f3-a003-47c4ed0314ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:6f:f9:3f:76:35:ea:df:34:d5:f3:9e:c8: b3:49:4a:ff:16:f1:9b:94:ff:85:78:da:01:4e:bb: a1:52:4d:43:b1:a9:7c:ff:08:1e:ba:7e:38:55:4f: 3b:09:15:fd:cb:77:f1:bd:78:f1:01:fd:79:f5:e6: 3a:23:e8:0a:e0:13:c0:b4:b2:b8:cf:c2:25:06:88: 5e:7a:8f:81:d0:32:f7:f8:44:13:bf:26:f3:71:4a: d8:b5:c7:b1:16:11:1a:7d:b7:f0:88:0c:c3:58:50: f5:c6:06:6a:f4:b5:6c:dc:7d:80:d7:3d:70:d0:b4: 6a:3c:31:37:ee:3c:23:c0:fd:0e:9e:1e:f6:f1:1a: 75:9a:9c:c6:7d:cb:99:0e:78:d5:b4:79:89:77:78: 1a:dd:13:da:c8:67:05:60:da:68:a4:cc:af:79:b1: 20:58:9f:6f:35:e4:4c:5b:32:70:67:e9:31:d6:6a: d0:5b:4f:18:27:5d:35:c6:4c:a1:db:99:43:83:93: d7:20:c5:62:ea:51:79:8a:a8:0a:f0:17:60:04:77: e9:7b:43:36:45:c8:20:88:89:4e:a9:0c:be:73:09: ab:8f:e7:a1:d9:d1:2d:1e:51:9f:53:1c:99:93:20: 40:49:f9:f3:80:67:59:f6:5c:f6:2a:e3:ea:3c:3b: da:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A3:8C:34:50:0E:6B:33:F4:01:64:9E:6C:70:D9:E0:ED:74:2C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.94.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1e:9f:4f:ea:3b:f1:66:ee:62:41:ec:c9:be:c1:5f:fa:0b: bb:cf:ee:f8:cf:28:11:c0:ce:ce:aa:46:8a:c3:70:3d:14:b1: 3d:96:73:5e:cf:f8:6c:fe:e4:a8:44:07:e6:41:80:2c:d6:fd: 4b:17:58:9b:4b:8e:fa:40:d7:15:7c:d3:cd:f7:66:9f:4a:af: 82:8b:ca:a7:c0:ba:78:1f:b1:c2:47:69:b8:e7:00:74:f0:69: 26:c0:37:db:d0:90:2d:8c:71:da:0d:1e:61:be:b5:25:d1:89: 0c:3f:54:0c:10:10:0a:ac:19:95:f1:12:c2:13:0f:d7:60:b6: 75:cd:ba:88:40:59:27:98:15:27:4f:22:d1:db:db:8f:2b:8f: 9b:65:c7:88:a7:9e:68:ec:ea:00:35:a8:e5:c5:98:e6:d4:aa: 73:c9:db:74:34:cc:8e:27:d9:b8:25:4f:5d:af:30:57:0e:44: c6:56:00:13:a3:35:a9:d4:c8:f4:35:7c:82:8e:ce:d3:1b:f4: a3:25:24:02:a8:fc:52:2e:35:b4:fa:df:24:3f:37:7c:0c:b1: 04:a6:10:dd:1d:4b:7f:17:01:58:73:5d:69:da:45:e8:07:b9: 54:40:4f:2f:dc:62:c9:e5:68:11:fc:62:c2:d3:c1:6b:12:68: 62:62:3f:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFj9A4N7/7bT7r8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YjQ3NjMwNWItMjMyMy00N2YzLWEwMDMtNDdjNGVkMDMxNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5pv+T92NerfNNXznsizSUr/FvGblP+FeNoB TruhUk1Dsal8/wgeun44VU87CRX9y3fxvXjxAf159eY6I+gK4BPAtLK4z8IlBohe eo+B0DL3+EQTvybzcUrYtcexFhEafbfwiAzDWFD1xgZq9LVs3H2A1z1w0LRqPDE3 7jwjwP0Onh728Rp1mpzGfcuZDnjVtHmJd3ga3RPayGcFYNpopMyvebEgWJ9vNeRM WzJwZ+kx1mrQW08YJ101xkyh25lDg5PXIMVi6lF5iqgK8BdgBHfpe0M2RcggiIlO qQy+cwmrj+eh2dEtHlGfUxyZkyBASfnzgGdZ9lz2KuPqPDva6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKjjDRQDmsz9AFknmxw2eDtdCzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZjhiN2MzMWItMzQzYS0z YzlmLTg4ZDMtNTdlY2E0MmU5YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8en0/qO/Fm7mJB7Mm+wV/6C7vP7vjPKBHAzs6qRorDcD0UsT2Wc17P +Gz+5KhEB+ZBgCzW/UsXWJtLjvpA1xV80833Zp9Kr4KLyqfAungfscJHabjnAHTw aSbAN9vQkC2McdoNHmG+tSXRiQw/VAwQEAqsGZXxEsITD9dgtnXNuohAWSeYFSdP ItHb248rj5tlx4innmjs6gA1qOXFmObUqnPJ23Q0zI4n2bglT12vMFcORMZWABOj NanUyPQ1fIKOztMb9KMlJAKo/FIuNbT63yQ/N3wMsQSmEN0dS38XAVhzXWnaRegH uVRATy/cYsnlaBH8YsLTwWsSaGJiPxo= -----END CERTIFICATE-----Generated at Thu Aug 21 10:25:48 2025 by rpki-client