$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/ace1e709-17e9-3f35-ad21-35fa7d91015c.roa File: ace1e709-17e9-3f35-ad21-35fa7d91015c.roa (raw, json) Hash identifier: fmt9q4MIR4WTqExzCOQLPQ8PJWB45hMwW4LNIAuyYgk= Subject key identifier: 4C:58:0C:43:70:9F:B2:01:D7:CD:C6:C5:2E:1A:6C:7C:65:11:02:D8 Certificate issuer: /CN=32652e19-5988-41fb-a45a-66b23c523f3b Certificate serial: 010D0C9F4328584B9F99A3FAD9CF51A159A2C2C0 Authority key identifier: AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/ace1e709-17e9-3f35-ad21-35fa7d91015c.roa Signing time: Fri 24 Oct 2025 02:30:48 +0000 ROA not before: Fri 24 Oct 2025 02:30:48 +0000 ROA not after: Thu 22 Jan 2026 03:30:48 +0000 asID: 210110 IP address blocks: 142.248.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:99:a3:fa:d9:cf:51:a1:59:a2:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32652e19-5988-41fb-a45a-66b23c523f3b Validity Not Before: Oct 24 02:30:48 2025 GMT Not After : Jan 22 03:30:48 2026 GMT Subject: CN=b6954b79-6ba3-4772-ad56-fa86b81511d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1a:d3:f0:0c:3a:f7:57:82:52:8b:23:21:a3: 90:b4:c6:29:4f:20:d0:b6:6a:48:e5:50:b4:00:2c: 26:c8:35:90:02:47:16:04:04:58:04:dd:b6:d5:49: 79:1b:19:ec:ae:ca:52:37:c3:e5:dc:38:4a:00:54: 27:2c:1c:7b:83:d8:bf:11:ef:51:8f:9d:37:19:bf: 4d:85:5c:68:67:77:62:ff:21:24:4f:a2:de:2c:99: 96:d8:0a:1b:d2:e4:45:f7:de:b8:c5:92:58:4e:f6: 4a:e5:cf:cd:ee:6a:06:09:68:45:60:88:63:dd:be: a6:a8:4b:68:ed:89:83:9b:9f:2e:e7:c1:44:19:73: 92:4e:3a:2b:47:f3:b4:05:dc:53:1a:90:28:7a:c8: 9d:8f:3b:6f:ac:76:a4:eb:d9:aa:ca:bd:18:7b:e8: 8d:c9:6f:08:cf:cf:f9:49:1e:54:04:c3:5c:37:98: d8:f7:b0:00:59:07:71:cb:2d:8b:d4:6e:89:6a:50: 0e:e7:fe:56:dc:ed:be:7b:dc:55:84:1c:63:6a:57: 87:af:c3:d6:2d:2b:1d:de:ef:c2:28:35:14:0f:26: 28:cf:7f:a4:06:b4:7c:76:a0:77:e7:30:97:27:ff: 1f:a0:e0:b2:54:9e:80:66:fe:ec:38:0c:6b:5e:ad: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:58:0C:43:70:9F:B2:01:D7:CD:C6:C5:2E:1A:6C:7C:65:11:02:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/ace1e709-17e9-3f35-ad21-35fa7d91015c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl X509v3 Authority Key Identifier: keyid:AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer sbgp-ipAddrBlock: critical IPv4: 142.248.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:dd:30:ee:76:d8:18:65:53:81:00:5d:cc:89:a0:f1:e4:ff: 11:5a:78:c1:bd:3f:d0:e7:3c:d4:ce:0b:55:df:26:c0:9c:d2: e5:cb:6d:e4:9c:dd:3e:d7:71:c1:c3:07:d5:96:ce:d8:5c:ae: 94:6f:e7:fc:10:d5:84:3f:77:2e:d5:c5:27:8f:a1:10:2d:3c: 93:94:b5:81:c1:e4:19:09:79:ca:b2:c0:2c:10:ae:64:e7:42: e1:0d:c0:11:72:d6:63:dc:5f:2c:c6:3d:43:38:75:7c:91:68: 1b:32:67:da:4b:24:81:a0:c1:0b:7d:48:0e:51:55:7c:b2:00: 0b:28:c5:87:a3:ae:07:29:9f:45:17:4b:36:7c:ed:25:4b:fa: 89:e9:ae:fb:e9:1a:b3:be:cd:e7:fa:de:6e:3d:90:3b:49:61: 9d:10:11:22:f0:e3:89:37:81:08:7c:97:be:df:e1:80:a0:af: 8f:49:bf:c8:e4:50:90:05:74:78:a4:8e:2e:a8:0d:3a:0d:17: 71:25:36:67:62:c5:92:95:ad:09:0e:45:6a:82:11:81:a3:c5: e1:7d:21:4c:95:58:b9:8b:01:aa:3a:6f:41:06:e3:45:2a:cc: 6a:ff:0e:53:7e:01:9a:f0:17:de:79:72:b0:62:c8:99:5d:b2: b8:a6:f4:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufmaP62c9RoVmiwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI2NTJlMTktNTk4OC00MWZiLWE0NWEtNjZiMjNjNTIz ZjNiMB4XDTI1MTAyNDAyMzA0OFoXDTI2MDEyMjAzMzA0OFowLzEtMCsGA1UEAxMk YjY5NTRiNzktNmJhMy00NzcyLWFkNTYtZmE4NmI4MTUxMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRrT8Aw691eCUosjIaOQtMYpTyDQtmpI5VC0 ACwmyDWQAkcWBARYBN221Ul5GxnsrspSN8Pl3DhKAFQnLBx7g9i/Ee9Rj503Gb9N hVxoZ3di/yEkT6LeLJmW2Aob0uRF9964xZJYTvZK5c/N7moGCWhFYIhj3b6mqEto 7YmDm58u58FEGXOSTjorR/O0BdxTGpAoesidjztvrHak69mqyr0Ye+iNyW8Iz8/5 SR5UBMNcN5jY97AAWQdxyy2L1G6JalAO5/5W3O2+e9xVhBxjaleHr8PWLSsd3u/C KDUUDyYoz3+kBrR8dqB35zCXJ/8foOCyVJ6AZv7sOAxrXq0ptwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExYDENwn7IB183GxS4abHxlEQLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMjY1 MmUxOS01OTg4LTQxZmItYTQ1YS02NmIyM2M1MjNmM2IvYWNlMWU3MDktMTdlOS0z ZjM1LWFkMjEtMzVmYTdkOTEwMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzI2NTJlMTktNTk4OC00MWZiLWE0 NWEtNjZiMjNjNTIzZjNiLzMyNjUyZTE5LTU5ODgtNDFmYi1hNDVhLTY2YjIzYzUy M2YzYi5jcmwwHwYDVR0jBBgwFoAUrWJ7cveJh0NtZMJTwuOF0WzytQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMjY1MmUxOS01OTg4LTQxZmItYTQ1YS02NmIy M2M1MjNmM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELdMO522BhlU4EAXcyJoPHk/xFaeMG9P9DnPNTOC1XfJsCc0uXLbeSc 3T7XccHDB9WWzthcrpRv5/wQ1YQ/dy7VxSePoRAtPJOUtYHB5BkJecqywCwQrmTn QuENwBFy1mPcXyzGPUM4dXyRaBsyZ9pLJIGgwQt9SA5RVXyyAAsoxYejrgcpn0UX SzZ87SVL+onprvvpGrO+zef63m49kDtJYZ0QESLw44k3gQh8l77f4YCgr49Jv8jk UJAFdHikji6oDToNF3ElNmdixZKVrQkORWqCEYGjxeF9IUyVWLmLAao6b0EG40Uq zGr/DlN+AZrwF955crBiyJldsrim9Go= -----END CERTIFICATE-----Generated at Fri Oct 24 17:09:50 2025 by rpki-client