$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa File: 32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa (raw, json) Hash identifier: 87O01me47OYNLcxTzZ/RGE3OCyQrWm7ZTo6WLo/qm5E= Subject key identifier: A5:05:BA:C9:08:84:FC:E9:80:FC:36:79:85:86:81:1B:1A:6F:41:DC Certificate issuer: /CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Certificate serial: 010D0C9F4328584AE11753CB433FE77B37CA4EC0 Authority key identifier: 98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa Signing time: Sat 16 Aug 2025 20:11:16 +0000 ROA not before: Sat 16 Aug 2025 20:11:16 +0000 ROA not after: Fri 14 Nov 2025 21:11:16 +0000 asID: 2386 IP address blocks: 170.190.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:17:53:cb:43:3f:e7:7b:37:ca:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Validity Not Before: Aug 16 20:11:16 2025 GMT Not After : Nov 14 21:11:16 2025 GMT Subject: CN=afd77472-41b7-40e8-983f-1df2886b44b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:d0:c1:6a:43:8c:ff:ed:5e:9e:6f:79:7c: d7:7d:a7:58:f4:53:55:f1:f3:a5:e2:eb:02:d7:ff: 2f:ad:1c:72:9e:08:2f:e4:8d:26:f5:76:c1:d0:c0: 41:a7:93:97:aa:6a:6c:88:e9:4f:cf:d8:ae:0a:b3: 51:70:f7:bf:bd:98:ee:ae:b9:ac:33:9e:9e:4f:35: de:c2:72:68:09:68:e0:47:3d:fe:cc:ba:4e:73:88: d0:81:86:46:73:24:6f:2c:f9:48:4b:b4:e1:9a:ad: dc:57:c5:87:c7:e3:f7:c4:a6:33:2c:dd:f5:88:4f: 39:c6:ff:37:df:86:e6:11:11:26:6f:2b:ad:b2:28: d0:50:6f:96:42:b2:50:f6:b8:dc:dc:64:49:6f:1f: c9:25:88:67:01:e5:d9:24:28:c2:1e:a2:e3:05:e3: 27:d0:e1:96:a0:f9:70:e3:7f:94:20:a0:c5:0b:fd: 4a:e1:2a:b6:f0:54:39:65:98:46:d8:1a:b6:a5:00: 80:7f:ed:a2:65:d4:4c:11:25:17:79:5b:2b:c6:c8: 2d:1a:01:06:dd:87:fe:f6:0d:d9:99:62:e2:79:06: 74:c8:22:65:0a:dc:da:4a:12:01:a6:9a:5d:2c:23: ef:a1:d7:35:a5:6b:6c:2c:e3:8b:b5:cc:4a:26:48: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:05:BA:C9:08:84:FC:E9:80:FC:36:79:85:86:81:1B:1A:6F:41:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/32fbac4e-e1ae-36d0-9460-c5633c3a9c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl X509v3 Authority Key Identifier: keyid:98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer sbgp-ipAddrBlock: critical IPv4: 170.190.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a1:54:b5:66:08:21:05:52:13:dc:9d:8d:5a:41:2a:5d:fa: 25:81:21:b4:1a:11:75:48:47:e2:e8:f0:38:22:bf:74:57:f8: 17:75:ca:c8:9e:64:eb:6d:d7:39:6f:78:7e:da:7d:80:95:d4: 84:bd:08:86:e4:f3:19:1b:1f:a7:a8:21:03:aa:90:5e:e0:28: 1b:77:2f:2b:7c:3f:8e:45:9a:3c:43:92:52:62:28:cc:9d:5c: 57:c4:1d:28:67:56:29:ad:6b:b0:a0:dd:fb:43:a2:19:99:97: 43:7c:ac:2e:f8:ce:11:8a:1b:31:13:47:cf:b3:ce:a4:d8:83: 9d:1f:56:30:0c:80:68:10:51:ef:91:4a:49:b7:0c:0d:b0:c5: 76:65:17:c9:53:8f:68:af:66:22:c7:c6:3b:c7:0d:88:e0:00: 08:f7:64:dd:86:8a:63:ae:4e:b1:9b:98:83:5b:f2:c7:31:d5: bd:f9:bb:2f:31:1a:41:21:d2:67:b0:e5:2d:c6:3f:fd:3b:7c: a2:ee:37:32:e2:60:02:8d:bd:af:8c:7c:52:96:47:85:ca:32: 2f:fa:fa:b0:c9:6b:50:b7:30:af:20:e8:ab:0d:07:44:ae:3c: 79:75:1a:93:21:16:b0:6d:48:33:07:dd:e5:36:99:a2:b7:88: d2:32:be:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhF1PLQz/nezfKTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhYjQ3NGYtZTg2ZS00NTdjLThlNGYtNTI1ZTQ3M2Y5 ZTAxMB4XDTI1MDgxNjIwMTExNloXDTI1MTExNDIxMTExNlowLzEtMCsGA1UEAxMk YWZkNzc0NzItNDFiNy00MGU4LTk4M2YtMWRmMjg4NmI0NGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9/QwWpDjP/tXp5veXzXfadY9FNV8fOl4usC 1/8vrRxynggv5I0m9XbB0MBBp5OXqmpsiOlPz9iuCrNRcPe/vZjurrmsM56eTzXe wnJoCWjgRz3+zLpOc4jQgYZGcyRvLPlIS7Thmq3cV8WHx+P3xKYzLN31iE85xv83 34bmEREmbyutsijQUG+WQrJQ9rjc3GRJbx/JJYhnAeXZJCjCHqLjBeMn0OGWoPlw 43+UIKDFC/1K4Sq28FQ5ZZhG2Bq2pQCAf+2iZdRMESUXeVsrxsgtGgEG3Yf+9g3Z mWLieQZ0yCJlCtzaShIBpppdLCPvodc1pWtsLOOLtcxKJkhXvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUFuskIhPzpgPw2eYWGgRsab0HcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80N2Fi NDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVlNDczZjllMDEvMzJmYmFjNGUtZTFhZS0z NmQwLTk0NjAtYzU2MzNjM2E5YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDdhYjQ3NGYtZTg2ZS00NTdjLThl NGYtNTI1ZTQ3M2Y5ZTAxLzQ3YWI0NzRmLWU4NmUtNDU3Yy04ZTRmLTUyNWU0NzNm OWUwMS5jcmwwHwYDVR0jBBgwFoAUmLjiKxPCPsM43Lo6U1UYTTFS8DEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80N2FiNDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVl NDczZjllMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqr4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOhVLVmCCEFUhPcnY1aQSpd+iWBIbQaEXVIR+Lo8Dgiv3RX+Bd1ysie ZOtt1zlveH7afYCV1IS9CIbk8xkbH6eoIQOqkF7gKBt3Lyt8P45FmjxDklJiKMyd XFfEHShnVimta7Cg3ftDohmZl0N8rC74zhGKGzETR8+zzqTYg50fVjAMgGgQUe+R Skm3DA2wxXZlF8lTj2ivZiLHxjvHDYjgAAj3ZN2GimOuTrGbmINb8scx1b35uy8x GkEh0mew5S3GP/07fKLuNzLiYAKNva+MfFKWR4XKMi/6+rDJa1C3MK8g6KsNB0Su PHl1GpMhFrBtSDMH3eU2maK3iNIyvkY= -----END CERTIFICATE-----Generated at Wed Aug 20 03:34:03 2025 by rpki-client