$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa File: 4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa (raw, json) Hash identifier: yKmsOTcghkJ2J088WXblGJ8fgs1imD2XYw6EVvxTTkc= Subject key identifier: E6:40:C4:02:9F:26:88:48:4B:21:71:92:5C:D4:57:B1:62:F0:53:C8 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584BAA97B7C7B9F6CFCA5F6FBB80 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 32806 IP address blocks: 208.114.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b7:c7:b9:f6:cf:ca:5f:6f:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=0ec789c3-a6dc-477c-9176-b26de110fe68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:17:53:72:27:5f:8e:23:a4:61:1e:0b:4b:37: 5e:71:12:51:be:45:ae:e7:1b:13:86:6f:03:40:5a: c6:78:b3:c1:32:7f:a8:68:70:bd:c5:8d:45:7c:08: 4d:64:ce:d4:e0:86:74:91:39:4b:a6:97:06:a6:37: 40:0b:90:66:5e:d4:38:f4:d6:1a:24:e0:6c:d3:7c: 1e:e9:40:85:50:d3:16:c9:c9:f1:f4:73:b9:d1:83: b0:6b:f8:e0:d8:43:ed:81:88:0f:17:e2:2d:fd:6f: 09:e1:1a:82:21:c8:5d:98:be:fc:0d:57:fc:32:98: 9f:5c:fe:b4:0d:1f:34:ff:7c:82:de:93:b2:82:e2: d5:b7:3e:fa:7a:04:06:ab:67:41:39:ae:3a:0d:f2: a4:5c:e6:c1:99:c0:01:0e:fd:be:be:96:11:f3:cf: ca:31:71:ac:6c:1b:d4:81:80:72:15:33:88:d0:f9: cf:e9:86:a4:7d:2d:b5:71:27:2d:e8:e0:23:15:f9: d2:a2:df:ff:fc:85:59:76:1d:4c:fe:8f:14:29:d6: 3d:38:d9:46:ae:39:b9:ad:dc:13:40:c9:15:86:67: f5:ab:b3:23:ae:6a:87:f8:a8:81:05:65:1f:26:0c: 34:3d:76:85:7d:fb:f5:6b:8f:3f:a4:4c:d4:4c:e7: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:40:C4:02:9F:26:88:48:4B:21:71:92:5C:D4:57:B1:62:F0:53:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 208.114.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d3:ad:bd:2b:a3:f9:f7:d5:94:dd:21:88:61:17:c8:4c:32: 90:40:10:df:4c:d3:02:63:62:29:0d:3a:e8:90:e5:f6:1c:31: ec:5c:15:0d:78:02:e6:c7:a6:f6:66:60:e0:f9:6b:e4:e3:48: 7b:40:23:78:97:26:90:7a:97:76:50:d3:be:76:eb:40:f0:93: 90:d7:53:c6:c1:e3:6b:a5:be:1b:b4:4f:06:02:20:68:27:74: be:cf:37:7f:38:70:14:27:b9:94:6d:8d:97:b4:ed:33:89:c7: c0:69:d4:57:59:ce:ca:de:0e:b8:e2:a5:21:03:11:20:a8:5d: 61:9a:32:50:f1:92:02:9d:6b:9c:1d:7a:4f:87:31:b6:ff:19: 89:95:cf:9a:a7:91:1d:fa:94:b2:17:65:27:1b:ed:f9:74:f6: a4:54:20:59:aa:a1:94:6c:dd:e4:d6:01:3d:f8:90:86:82:81: 1d:2c:97:bf:1a:56:30:6d:aa:de:e1:79:b4:df:23:a1:06:ae: 26:f8:b6:b6:bf:55:7b:4e:f5:be:5f:98:a6:af:98:ca:29:11: df:e0:11:f3:0c:de:f9:ab:01:4b:34:74:ab:ab:d1:5c:a5:1e: f5:ee:26:d4:6e:0f:56:0f:ab:44:34:fb:d7:a9:11:52:7b:5c: 79:53:61:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7fHufbPyl9vu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MGVjNzg5YzMtYTZkYy00NzdjLTkxNzYtYjI2ZGUxMTBmZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxdTcidfjiOkYR4LSzdecRJRvkWu5xsThm8D QFrGeLPBMn+oaHC9xY1FfAhNZM7U4IZ0kTlLppcGpjdAC5BmXtQ49NYaJOBs03we 6UCFUNMWycnx9HO50YOwa/jg2EPtgYgPF+It/W8J4RqCIchdmL78DVf8MpifXP60 DR80/3yC3pOyguLVtz76egQGq2dBOa46DfKkXObBmcABDv2+vpYR88/KMXGsbBvU gYByFTOI0PnP6YakfS21cSct6OAjFfnSot///IVZdh1M/o8UKdY9ONlGrjm5rdwT QMkVhmf1q7MjrmqH+KiBBWUfJgw0PXaFffv1a48/pEzUTOc10QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZAxAKfJohISyFxklzUV7Fi8FPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNGY3NzBiMGEtMjAxMS0z NGQ3LWJmNWUtNTRlMWY2Zjk2ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HJ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrTrb0ro/n31ZTdIYhhF8hMMpBAEN9M0wJjYikNOuiQ5fYcMexcFQ14 AubHpvZmYOD5a+TjSHtAI3iXJpB6l3ZQ075260Dwk5DXU8bB42ulvhu0TwYCIGgn dL7PN384cBQnuZRtjZe07TOJx8Bp1FdZzsreDrjipSEDESCoXWGaMlDxkgKda5wd ek+HMbb/GYmVz5qnkR36lLIXZScb7fl09qRUIFmqoZRs3eTWAT34kIaCgR0sl78a VjBtqt7hebTfI6EGrib4tra/VXtO9b5fmKavmMopEd/gEfMM3vmrAUs0dKur0Vyl HvXuJtRuD1YPq0Q0+9epEVJ7XHlTYVo= -----END CERTIFICATE-----Generated at Tue Oct 28 13:08:08 2025 by rpki-client