$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/f30eb1d8-75ab-3a4f-a1f8-2c6b097912d9.roa File: f30eb1d8-75ab-3a4f-a1f8-2c6b097912d9.roa (raw, json) Hash identifier: vk7FfzI49E5NFiA/DX/I9WPgbStuj99UOkFAsgalvmQ= Subject key identifier: BB:23:1C:4F:EE:B8:CC:78:3E:BC:81:D1:BF:77:00:DE:52:E0:13:60 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584BAA97B7B65BECEB0B6C966000 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/f30eb1d8-75ab-3a4f-a1f8-2c6b097912d9.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 32806 IP address blocks: 208.114.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b7:b6:5b:ec:eb:0b:6c:96:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=664dfd2d-4b29-4040-a2a3-482e7b2ef156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:2a:35:f0:1b:26:39:b0:9a:0e:c8:90:3f: ce:da:3b:c2:87:8e:cd:a0:08:71:f1:d1:72:b9:fa: 3d:9c:b8:aa:71:f3:ea:47:ce:2f:d9:95:74:0b:ab: 5f:d6:37:43:c1:2b:dc:aa:b6:1a:56:c5:09:29:f5: 40:a9:b5:b7:f0:8d:80:7f:b9:ac:c4:8f:64:b4:4c: 00:8d:7a:30:35:b9:79:6a:00:d7:ef:ca:78:15:5e: 97:f8:46:f4:77:12:81:bb:21:50:a4:d3:9c:4e:53: d7:61:32:07:21:b1:8f:b2:53:f6:b4:ed:07:27:d8: 8e:42:f4:38:98:e7:10:88:63:f9:0e:2a:c6:88:e0: c1:45:d6:db:f1:8a:e6:09:33:ca:e8:fe:79:7d:5f: 23:db:e8:2d:cd:71:ea:63:85:e0:e1:b9:2c:cd:a5: ac:a7:a7:5c:58:b0:ca:c7:a2:6c:b9:40:d1:27:64: d4:d3:b8:d0:a6:bb:f4:98:8a:6a:9e:81:4f:cb:d9: 11:a1:93:c4:27:95:59:1a:8c:00:c0:b1:7c:1a:93: 36:b7:2b:3f:73:35:f3:45:bb:f2:45:48:29:ab:e5: 13:16:52:dc:16:55:25:c5:42:8b:06:e0:72:26:a8: da:e0:22:78:6f:60:8e:92:d6:50:be:30:23:bf:c6: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:23:1C:4F:EE:B8:CC:78:3E:BC:81:D1:BF:77:00:DE:52:E0:13:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/f30eb1d8-75ab-3a4f-a1f8-2c6b097912d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 208.114.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2a:04:6a:45:65:54:9c:f7:5b:86:a9:95:f6:e0:96:7f:5e: 36:46:ca:fd:88:2c:99:92:c1:ab:79:98:cc:94:78:23:5d:a0: a8:07:ea:a4:d6:0e:e4:93:c4:c2:6c:d0:e8:c0:a9:68:9c:9f: 1b:ec:f4:e5:cf:e5:ac:b2:73:6f:90:40:12:41:19:8b:9b:d1: 5a:22:a5:35:77:c5:ba:0e:1d:9b:41:94:df:0d:05:ca:74:af: f5:05:2a:53:84:1f:92:6c:ea:4b:5d:36:ff:33:58:e9:e9:66: 85:a3:92:9d:95:fc:b0:70:35:2e:4e:36:58:03:b2:09:f4:1c: 21:92:e8:26:1a:7f:3a:b3:b7:b2:db:7f:b7:b4:71:54:96:32: 31:8c:1b:a7:ad:49:4b:d2:f3:a3:90:22:a5:e4:9f:cd:6a:02: 8e:30:d6:98:93:9c:c2:76:6d:dc:57:49:6c:b6:b9:a7:e2:bd: 20:dd:a3:fb:fb:3a:28:b3:47:00:6d:55:5f:56:55:54:1c:93: 8b:e2:1c:57:1e:37:15:3d:b4:47:ad:9a:4a:47:40:a4:40:a4: 3f:ee:85:bf:6d:7d:c0:2a:68:73:0e:f2:e3:55:8b:11:bd:96: 76:cc:30:07:35:91:99:38:97:38:ce:84:25:50:9c:7b:bb:d6: f4:8f:e1:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7e2W+zrC2yWYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NjY0ZGZkMmQtNGIyOS00MDQwLWEyYTMtNDgyZTdiMmVmMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlckqNfAbJjmwmg7IkD/O2jvCh47NoAhx8dFy ufo9nLiqcfPqR84v2ZV0C6tf1jdDwSvcqrYaVsUJKfVAqbW38I2Af7msxI9ktEwA jXowNbl5agDX78p4FV6X+Eb0dxKBuyFQpNOcTlPXYTIHIbGPslP2tO0HJ9iOQvQ4 mOcQiGP5DirGiODBRdbb8YrmCTPK6P55fV8j2+gtzXHqY4Xg4bkszaWsp6dcWLDK x6JsuUDRJ2TU07jQprv0mIpqnoFPy9kRoZPEJ5VZGowAwLF8GpM2tys/czXzRbvy RUgpq+UTFlLcFlUlxUKLBuByJqja4CJ4b2COktZQvjAjv8Zw2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsjHE/uuMx4PryB0b93AN5S4BNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvZjMwZWIxZDgtNzVhYi0z YTRmLWExZjgtMmM2YjA5NzkxMmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HJ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAqBGpFZVSc91uGqZX24JZ/XjZGyv2ILJmSwat5mMyUeCNdoKgH6qTW DuSTxMJs0OjAqWicnxvs9OXP5ayyc2+QQBJBGYub0VoipTV3xboOHZtBlN8NBcp0 r/UFKlOEH5Js6ktdNv8zWOnpZoWjkp2V/LBwNS5ONlgDsgn0HCGS6CYafzqzt7Lb f7e0cVSWMjGMG6etSUvS86OQIqXkn81qAo4w1piTnMJ2bdxXSWy2uafivSDdo/v7 OiizRwBtVV9WVVQck4viHFceNxU9tEetmkpHQKRApD/uhb9tfcAqaHMO8uNVixG9 lnbMMAc1kZk4lzjOhCVQnHu71vSP4SY= -----END CERTIFICATE-----Generated at Tue Oct 28 13:17:51 2025 by rpki-client