$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/420b0bcc-147a-3e2b-b25f-c403abedd91a.roa File: 420b0bcc-147a-3e2b-b25f-c403abedd91a.roa (raw, json) Hash identifier: ISLETSRRTnmnKDbABosTIJOx5uhZV2Nqb7Vdj5JQeFI= Subject key identifier: 1D:9F:0B:5A:CB:73:31:4E:47:37:DE:B7:5F:A6:AA:C3:F2:20:6C:24 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584B887945C9C9123082A0EFBA00 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/420b0bcc-147a-3e2b-b25f-c403abedd91a.roa Signing time: Wed 15 Oct 2025 19:41:59 +0000 ROA not before: Wed 15 Oct 2025 19:41:59 +0000 ROA not after: Tue 13 Jan 2026 20:41:59 +0000 asID: 32806 IP address blocks: 216.7.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:79:45:c9:c9:12:30:82:a0:ef:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Oct 15 19:41:59 2025 GMT Not After : Jan 13 20:41:59 2026 GMT Subject: CN=5423143c-cd6d-4fb3-ad1b-c3983346f6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:5d:6a:b0:c0:d0:e2:84:21:f3:88:08:d3: 19:da:a2:fd:f0:6b:e2:b3:87:61:6e:fa:65:34:83: 49:47:23:fe:e6:72:dc:d3:9f:ef:17:e0:33:4f:24: 3b:75:01:60:51:4d:58:68:4f:35:10:80:74:08:4b: 2c:1a:d3:7a:15:b2:52:74:31:fb:62:64:65:44:3a: 37:30:14:c9:cb:50:dd:6b:07:9b:aa:65:47:b5:cc: 2f:ee:15:6c:10:17:58:9a:9a:6e:f0:eb:62:5a:59: ac:82:27:9b:ec:20:b0:37:2a:9c:a0:78:3a:f2:34: 4e:6e:5a:41:95:d2:c4:6a:41:3e:6f:bc:8c:6e:22: fa:ee:c5:fc:9a:39:1f:4c:6c:11:7c:63:18:47:7e: a7:5c:d4:28:14:32:4e:3b:95:2b:6d:b0:f0:87:4f: f6:ea:2d:30:f7:ab:1f:f7:2d:a8:d3:4f:00:d1:77: 30:fa:f7:f0:9a:27:29:88:a1:d0:31:b5:f0:79:e1: 1a:89:29:ca:8f:4b:5d:6a:5b:fd:ac:09:3a:1c:53: 4a:f8:77:00:a3:c4:1e:ec:b4:9b:2f:9c:a7:c5:09: da:b4:cd:dd:69:92:f0:7f:28:a0:76:09:39:36:5d: 32:9a:38:d2:e1:31:2d:63:7e:3c:b8:e8:d7:2f:71: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9F:0B:5A:CB:73:31:4E:47:37:DE:B7:5F:A6:AA:C3:F2:20:6C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/420b0bcc-147a-3e2b-b25f-c403abedd91a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 216.7.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:a7:b6:dc:42:2b:9e:d1:a2:c6:ea:16:75:64:15:e6:da:45: 40:30:7d:fd:78:ab:29:0b:e0:06:94:d0:42:af:60:d4:cd:ee: 40:ec:1a:cd:9d:9c:86:99:7d:d2:6d:4e:87:5b:22:d0:59:5b: e8:81:cf:ea:e8:c4:34:8c:a2:38:58:6f:e1:fe:e0:a5:3e:5b: 91:ae:3c:53:e0:ce:dd:56:41:5b:a7:89:1b:1b:75:8b:d6:f8: a8:c9:5c:5a:6a:ab:3a:bd:b6:0a:5a:a2:de:16:25:05:0c:68: 68:e9:34:3f:e2:e7:c8:d3:70:95:66:92:11:93:0d:e1:c7:47: e1:cc:08:2c:1d:06:bd:cc:55:cf:5e:9f:b6:5a:7e:14:6d:2d: fa:c4:b9:34:e2:61:ae:07:8f:b6:1c:92:00:6d:22:db:12:d3: 7a:a6:56:43:ad:86:70:ea:13:93:e7:b7:cf:df:5e:6d:3c:d2: 4b:c4:46:1e:16:58:e5:5b:ef:8a:0a:e8:35:62:cd:96:ab:f0: 9f:ac:d9:88:f8:d5:22:9c:38:08:95:95:c2:59:15:3b:c7:7d: 6e:ea:ec:2a:17:2f:71:cc:5c:d1:5c:3d:5d:97:14:1b:10:c5: f4:c3:bd:7d:e0:04:86:42:79:6d:d3:9b:8d:88:fe:47:a5:fa: 83:4c:91:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIeUXJyRIwgqDvugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MTAxNTE5NDE1OVoXDTI2MDExMzIwNDE1OVowLzEtMCsGA1UEAxMk NTQyMzE0M2MtY2Q2ZC00ZmIzLWFkMWItYzM5ODMzNDZmNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHJdarDA0OKEIfOICNMZ2qL98Gvis4dhbvpl NINJRyP+5nLc05/vF+AzTyQ7dQFgUU1YaE81EIB0CEssGtN6FbJSdDH7YmRlRDo3 MBTJy1DdawebqmVHtcwv7hVsEBdYmppu8OtiWlmsgieb7CCwNyqcoHg68jROblpB ldLEakE+b7yMbiL67sX8mjkfTGwRfGMYR36nXNQoFDJOO5UrbbDwh0/26i0w96sf 9y2o008A0Xcw+vfwmicpiKHQMbXweeEaiSnKj0tdalv9rAk6HFNK+HcAo8Qe7LSb L5ynxQnatM3daZLwfyigdgk5Nl0ymjjS4TEtY348uOjXL3F5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2fC1rLczFORzfet1+mqsPyIGwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNDIwYjBiY2MtMTQ3YS0z ZTJiLWIyNWYtYzQwM2FiZWRkOTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALinttxCK57RosbqFnVkFebaRUAwff14qykL4AaU0EKvYNTN7kDsGs2d nIaZfdJtTodbItBZW+iBz+roxDSMojhYb+H+4KU+W5GuPFPgzt1WQVuniRsbdYvW +KjJXFpqqzq9tgpaot4WJQUMaGjpND/i58jTcJVmkhGTDeHHR+HMCCwdBr3MVc9e n7ZafhRtLfrEuTTiYa4Hj7YckgBtItsS03qmVkOthnDqE5Pnt8/fXm080kvERh4W WOVb74oK6DVizZar8J+s2Yj41SKcOAiVlcJZFTvHfW7q7CoXL3HMXNFcPV2XFBsQ xfTDvX3gBIZCeW3Tm42I/kel+oNMkeU= -----END CERTIFICATE-----Generated at Tue Oct 28 13:14:21 2025 by rpki-client