$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/c9ce292e-c9e7-3379-93d7-4fb8907c3252.roa File: c9ce292e-c9e7-3379-93d7-4fb8907c3252.roa (raw, json) Hash identifier: EO6qD2pU3TVey0DcJ3ZT+DW7p8stY8YJgML516PQB2E= Subject key identifier: 45:24:74:8C:05:ED:B9:C3:A5:94:90:4E:A3:55:07:00:60:03:9E:0B Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584B434CAF693AD0D89785110980 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/c9ce292e-c9e7-3379-93d7-4fb8907c3252.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 32806 IP address blocks: 192.187.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:af:69:3a:d0:d8:97:85:11:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=72f2363e-b87b-45aa-8005-c207a3fc28f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:f4:a8:02:3b:be:c0:f3:43:ee:d2:18:58: 96:1b:ca:3a:ca:20:95:e4:09:14:96:39:07:42:aa: bb:81:40:74:fc:12:82:68:4d:c5:f9:6f:bc:6d:cc: c6:e1:2b:41:67:76:d0:f6:03:5c:60:ac:b6:40:d8: 8f:02:95:e1:3d:c7:92:15:d9:1c:bc:cb:4d:ac:72: 70:d0:72:d5:f8:4f:38:e3:9c:be:30:57:b4:b6:41: 96:9a:a2:40:53:0c:a6:e9:ad:6b:46:c4:52:23:10: 20:b1:50:b3:4f:11:96:f7:25:67:23:81:8e:90:c5: 15:a1:4f:a4:cb:a7:2c:99:e9:66:9e:b7:ce:c8:a5: c9:91:52:3c:e2:c7:2d:1c:b8:4b:9e:a7:00:8b:0b: bf:0a:1a:93:6f:9e:db:25:a5:3e:38:07:2c:57:d3: 9c:50:60:2d:f2:3f:ac:b4:c8:d0:d3:d8:97:72:a0: 1f:91:0b:f4:5c:f2:d1:8c:7e:36:0a:00:c2:a3:65: 8c:b3:d3:38:b8:7a:c0:6c:2c:b2:8d:8c:3f:94:4a: 50:a3:7d:9b:b8:07:4b:0a:90:ee:ab:a7:f9:e7:2f: b3:46:51:42:e6:dd:36:6e:e8:23:d8:5e:f6:f6:ac: 38:b1:05:3d:83:a7:4c:b3:a7:cb:07:a5:15:0d:0b: 31:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:24:74:8C:05:ED:B9:C3:A5:94:90:4E:A3:55:07:00:60:03:9E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/c9ce292e-c9e7-3379-93d7-4fb8907c3252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 192.187.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:50:d2:ef:00:50:b5:af:d0:34:66:f9:9b:d8:a0:34:ff:31: 40:f4:6f:0b:96:4e:ad:7f:18:0a:40:34:38:bd:d3:32:1a:60: 9e:f9:e5:6a:57:ba:ae:3f:71:e6:9b:18:54:00:7c:6a:d9:7d: 5b:37:2e:df:1e:4e:fb:5d:12:a9:84:3e:b0:e4:90:a0:f8:73: 52:2d:5f:4c:fe:4d:6a:5e:2e:e6:6f:ab:e6:04:bb:1e:24:e2: 5f:37:23:ac:24:06:f5:79:74:d7:a5:4a:d7:19:57:01:41:d1: b1:0d:d6:86:ea:9a:3f:7d:45:c6:a1:e6:54:a1:9d:f9:b9:e8: 7e:81:6b:05:d3:d3:b2:d3:67:d4:d5:5a:40:47:03:fe:f6:f5: e2:02:47:14:d4:3a:00:d5:9b:50:94:5c:7d:34:63:64:b1:68: 27:bd:e5:c2:ab:cb:1d:2f:8d:34:e5:f3:4b:2d:b2:bb:b0:15: b9:49:0f:0d:16:1c:01:af:e3:af:1d:3a:24:d2:28:1d:1b:63: 7f:ab:e6:e3:62:10:bf:e0:03:65:5c:d9:f8:2b:3e:d9:0c:e2: 41:27:d3:2f:45:16:7f:c5:5c:47:12:a4:55:ff:c8:60:88:62: df:f9:a2:ce:20:b2:66:7b:b8:b8:17:06:63:ad:90:8a:85:c0: 2d:b3:f3:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTK9pOtDYl4URCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NzJmMjM2M2UtYjg3Yi00NWFhLTgwMDUtYzIwN2EzZmMyOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArST0qAI7vsDzQ+7SGFiWG8o6yiCV5AkUljkH Qqq7gUB0/BKCaE3F+W+8bczG4StBZ3bQ9gNcYKy2QNiPApXhPceSFdkcvMtNrHJw 0HLV+E8445y+MFe0tkGWmqJAUwym6a1rRsRSIxAgsVCzTxGW9yVnI4GOkMUVoU+k y6csmelmnrfOyKXJkVI84sctHLhLnqcAiwu/ChqTb57bJaU+OAcsV9OcUGAt8j+s tMjQ09iXcqAfkQv0XPLRjH42CgDCo2WMs9M4uHrAbCyyjYw/lEpQo32buAdLCpDu q6f55y+zRlFC5t02bugj2F729qw4sQU9g6dMs6fLB6UVDQsxjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUkdIwF7bnDpZSQTqNVBwBgA54LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvYzljZTI5MmUtYzllNy0z Mzc5LTkzZDctNGZiODkwN2MzMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtQ0u8AULWv0DRm+ZvYoDT/MUD0bwuWTq1/GApANDi90zIaYJ755WpX uq4/ceabGFQAfGrZfVs3Lt8eTvtdEqmEPrDkkKD4c1ItX0z+TWpeLuZvq+YEux4k 4l83I6wkBvV5dNelStcZVwFB0bEN1obqmj99Rcah5lShnfm56H6BawXT07LTZ9TV WkBHA/729eICRxTUOgDVm1CUXH00Y2SxaCe95cKryx0vjTTl80stsruwFblJDw0W HAGv468dOiTSKB0bY3+r5uNiEL/gA2Vc2fgrPtkM4kEn0y9FFn/FXEcSpFX/yGCI Yt/5os4gsmZ7uLgXBmOtkIqFwC2z82g= -----END CERTIFICATE-----Generated at Tue Oct 28 13:08:05 2025 by rpki-client