$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa File: 32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa (raw, json) Hash identifier: DzQzLHOnj50NOHyTjXfdxSOpracCV1EFBQGOZDqOJXQ= Subject key identifier: 53:DC:52:1F:9E:5C:92:29:EC:9C:97:86:0D:54:80:C2:7A:B2:0D:D9 Certificate issuer: /CN=4eb5326f-ee03-4174-b355-9916b3e826aa Certificate serial: 010D0C9F4328584B5DD1DFF940FD510DAD2D8B80 Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 400380 IP address blocks: 81.199.36.0/23 maxlen: 23 81.199.36.0/24 maxlen: 24 81.199.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:df:f9:40:fd:51:0d:ad:2d:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=c9d1884a-75b0-412f-93c7-60d04a0b521e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:05:aa:ba:ae:57:b0:e3:0a:35:b7:a6:de: 44:3d:be:f0:8b:b2:7d:1d:47:c1:1c:2b:00:5f:7b: 41:c2:ba:ad:b8:0b:32:49:e6:9a:a0:41:98:21:d1: 12:03:62:9b:d9:db:d9:10:8a:ac:75:b5:60:45:d9: 6c:f8:43:c2:30:eb:01:c6:b5:ee:fb:22:ab:18:4e: e0:56:6b:ac:54:fb:52:a1:dd:71:f4:a7:ff:bd:0c: 10:fc:4a:a2:ec:14:bc:d3:b3:b7:df:4a:8e:ed:8d: c1:10:52:72:40:b7:94:84:c4:3a:06:a9:db:57:e0: ff:11:38:bc:1c:e5:ec:4f:83:0f:53:a4:eb:9a:58: 8f:38:6b:b1:4b:d5:29:ae:72:bb:6f:bf:b4:ea:76: 6e:89:e3:19:97:08:44:52:00:85:c8:ec:31:96:8e: 9d:43:39:c3:d6:a0:a5:92:ba:e3:d0:7e:c4:c0:7e: 28:e9:93:cb:45:79:d8:27:2c:a0:35:b7:7b:38:23: 03:00:89:9a:46:f8:5f:b4:57:cc:7a:b1:27:9a:58: 9e:06:b6:e7:a1:c6:bb:46:83:53:21:b6:55:6d:1b: bf:96:84:9f:1c:1f:47:50:a4:7e:eb:5c:9c:24:39: 76:75:6f:2f:b3:96:2a:11:95:1c:0f:dd:8c:c2:c4: 9d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DC:52:1F:9E:5C:92:29:EC:9C:97:86:0D:54:80:C2:7A:B2:0D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl X509v3 Authority Key Identifier: keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer sbgp-ipAddrBlock: critical IPv4: 81.199.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8e:68:d0:e3:e3:81:19:b5:6b:d0:0c:d8:95:44:0a:98:a3: 07:c4:08:4c:e1:b5:2b:ad:cf:87:c1:df:03:34:a1:8c:b0:42: b0:22:7d:17:1f:8a:bf:9e:e6:db:e8:f3:2b:57:19:38:7d:85: 4e:b0:7b:02:ca:e5:32:8a:bc:b9:cf:83:85:77:0d:17:25:f4: 43:54:66:98:37:7c:00:c3:ad:28:db:6c:47:93:78:93:68:44: 8e:d9:5c:d9:6f:a4:5e:66:1e:8e:0f:6f:8d:62:9a:f5:78:90: 2d:fc:7b:b8:8f:31:da:81:98:94:61:42:c0:12:13:ba:fd:a1: 2e:ee:94:70:b5:0a:6f:20:bb:e2:f9:97:dc:86:db:ad:ac:8f: 7b:79:ca:83:4c:40:db:ef:9e:ab:9f:77:4a:70:49:b6:5d:15: c0:71:7a:e1:67:ba:1a:a9:0e:6f:a4:0c:69:46:3f:20:d4:41: 06:38:67:ae:8c:d9:bf:9f:77:2b:5e:c1:0b:76:be:ab:19:5c: b4:52:15:46:1a:e6:ca:5f:b4:f0:62:59:dd:f6:a6:4a:4e:54: 22:8b:ab:5a:90:44:78:1c:04:e7:bf:d0:4f:57:7a:30:24:3e: 38:28:b1:63:4b:db:e5:e2:0b:db:49:e4:ee:35:4e:de:b9:a1: cb:d8:fe:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0d/5QP1RDa0ti4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGViNTMyNmYtZWUwMy00MTc0LWIzNTUtOTkxNmIzZTgy NmFhMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YzlkMTg4NGEtNzViMC00MTJmLTkzYzctNjBkMDRhMGI1MjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QgFqrquV7DjCjW3pt5EPb7wi7J9HUfBHCsA X3tBwrqtuAsySeaaoEGYIdESA2Kb2dvZEIqsdbVgRdls+EPCMOsBxrXu+yKrGE7g VmusVPtSod1x9Kf/vQwQ/Eqi7BS807O330qO7Y3BEFJyQLeUhMQ6BqnbV+D/ETi8 HOXsT4MPU6TrmliPOGuxS9UprnK7b7+06nZuieMZlwhEUgCFyOwxlo6dQznD1qCl krrj0H7EwH4o6ZPLRXnYJyygNbd7OCMDAImaRvhftFfMerEnmlieBrbnoca7RoNT IbZVbRu/loSfHB9HUKR+61ycJDl2dW8vs5YqEZUcD92MwsSdpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPcUh+eXJIp7JyXhg1UgMJ6sg3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1 MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2YjNlODI2YWEvMzIwNzVhOWQtOTJlNy0z N2E0LWE2OWEtNWEzYmQ0NTFmYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGViNTMyNmYtZWUwMy00MTc0LWIz NTUtOTkxNmIzZTgyNmFhLzRlYjUzMjZmLWVlMDMtNDE3NC1iMzU1LTk5MTZiM2U4 MjZhYS5jcmwwHwYDVR0jBBgwFoAUTU4uJJShwss4I21uaEckHdJB3B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZWI1MzI2Zi1lZTAzLTQxNzQtYjM1NS05OTE2 YjNlODI2YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUcckMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCOaNDj44EZtWvQDNiVRAqYowfECEzhtSutz4fB3wM0oYywQrAifRcf ir+e5tvo8ytXGTh9hU6wewLK5TKKvLnPg4V3DRcl9ENUZpg3fADDrSjbbEeTeJNo RI7ZXNlvpF5mHo4Pb41imvV4kC38e7iPMdqBmJRhQsASE7r9oS7ulHC1Cm8gu+L5 l9yG262sj3t5yoNMQNvvnqufd0pwSbZdFcBxeuFnuhqpDm+kDGlGPyDUQQY4Z66M 2b+fdytewQt2vqsZXLRSFUYa5spftPBiWd32pkpOVCKLq1qQRHgcBOe/0E9XejAk PjgosWNL2+XiC9tJ5O41Tt65ocvY/uk= -----END CERTIFICATE-----Generated at Thu Oct 16 08:53:59 2025 by rpki-client