$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/32ccbbe6-ab71-3674-a938-9630bf9d1890.roa File: 32ccbbe6-ab71-3674-a938-9630bf9d1890.roa (raw, json) Hash identifier: GNgOAT5L4ESECC0VZB4DcLEDRXKUdO6Omnd/TxBsHyg= Subject key identifier: 9B:D8:18:EC:81:0D:54:9C:F4:7E:B5:27:0C:3A:2D:1E:71:AB:02:4A Certificate issuer: /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Certificate serial: 010D0C9F4328584B59A1E00B9E32EDBFAAD2E980 Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/32ccbbe6-ab71-3674-a938-9630bf9d1890.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 46261 IP address blocks: 23.226.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:e0:0b:9e:32:ed:bf:aa:d2:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=a9baa189-9ef0-4b66-b74a-1abbe2570292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:d2:b5:79:7e:34:44:e1:54:16:29:c8:3a: df:b6:38:47:b0:47:47:c0:0c:27:f6:18:9a:92:08: 3b:33:fd:4f:f7:1e:4b:ae:62:91:c5:6a:ed:6a:9b: 32:d7:28:66:5d:da:74:a4:b7:eb:c1:25:43:7b:4f: 2b:b7:98:fc:fb:cc:49:68:f1:8d:93:9e:33:c9:98: 45:2c:9e:93:ee:66:92:48:0f:18:f0:4e:77:6f:7d: 48:03:fb:01:3e:e3:d4:8d:44:73:3a:f9:b2:1e:6d: e8:6b:0a:68:4f:a0:e8:9c:01:4d:8c:8d:a9:9b:6e: 6d:e9:fa:93:53:19:9a:5a:b0:35:b4:e5:c6:35:25: 98:9c:a2:e8:2e:63:15:f5:1f:d6:73:5a:8e:c4:ed: c7:c4:54:af:d8:a6:57:fc:dc:8c:3a:9e:4c:78:a6: b4:9c:81:ef:74:e0:0f:89:da:00:a9:38:4e:06:d5: 73:6a:91:42:82:2d:68:6b:95:e9:7f:45:30:f5:07: 55:86:18:4e:57:d5:c8:64:19:dc:b1:ef:57:b7:a6: f9:6d:84:52:dd:27:95:80:88:f3:29:d9:b7:2c:60: 6f:6c:27:8e:5d:27:13:59:69:21:75:1d:71:c1:08: c0:70:1e:4a:11:49:5a:f2:40:01:f2:38:97:89:b2: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D8:18:EC:81:0D:54:9C:F4:7E:B5:27:0C:3A:2D:1E:71:AB:02:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/32ccbbe6-ab71-3674-a938-9630bf9d1890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl X509v3 Authority Key Identifier: keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer sbgp-ipAddrBlock: critical IPv4: 23.226.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:4b:c2:0d:bb:23:50:a1:02:64:1c:26:82:69:79:d8:63:e2: 5c:dd:41:bb:8e:3e:68:ea:b8:8d:2b:50:17:6a:f0:6a:96:76: 08:91:fc:a8:97:ec:d1:8b:5e:40:20:0a:ad:18:7e:4b:4f:eb: 6a:d8:e4:49:ba:20:21:83:5f:d5:8e:cf:08:fa:48:99:78:76: 1a:b2:f8:b4:71:8c:ae:9d:f4:fd:d8:51:bd:23:f2:c4:69:d9: dc:76:d4:c9:0f:2a:d6:ba:ab:50:66:8e:93:44:85:d4:2c:3e: e4:69:a1:b8:93:6b:b2:37:10:93:21:89:5a:6f:e6:3d:4b:08: ef:b2:6d:db:ac:d8:cc:e4:b3:e9:8e:84:2b:90:45:36:68:94: f8:22:1e:79:a7:ad:1c:da:ca:e3:4f:3b:72:d6:f3:9c:97:2a: c0:ec:4a:53:c5:11:ca:cc:f5:55:7b:ef:6c:cd:69:db:08:b4: 13:1c:bf:54:fd:1c:0c:d6:52:44:f3:04:63:0e:9f:73:fd:eb: 79:39:57:bd:e8:3c:87:d2:b8:5c:7c:f9:e2:dc:9d:d1:a8:e4: 24:7e:65:c5:5c:f1:97:1a:47:54:a8:f6:89:35:a6:4e:d5:45: 15:80:06:bb:f8:97:35:5e:3f:44:3e:a1:80:25:27:77:08:e6: 3e:60:85:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoeALnjLtv6rS6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0 Mjg3MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk YTliYWExODktOWVmMC00YjY2LWI3NGEtMWFiYmUyNTcwMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLPStXl+NEThVBYpyDrftjhHsEdHwAwn9hia kgg7M/1P9x5LrmKRxWrtapsy1yhmXdp0pLfrwSVDe08rt5j8+8xJaPGNk54zyZhF LJ6T7maSSA8Y8E53b31IA/sBPuPUjURzOvmyHm3oawpoT6DonAFNjI2pm25t6fqT UxmaWrA1tOXGNSWYnKLoLmMV9R/Wc1qOxO3HxFSv2KZX/NyMOp5MeKa0nIHvdOAP idoAqThOBtVzapFCgi1oa5Xpf0Uw9QdVhhhOV9XIZBncse9Xt6b5bYRS3SeVgIjz Kdm3LGBvbCeOXScTWWkhdR1xwQjAcB5KEUla8kAB8jiXibJTGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvYGOyBDVSc9H61Jww6LR5xqwJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4 NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvMzJjY2JiZTYtYWI3MS0z Njc0LWE5MzgtOTYzMGJmOWQxODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+LXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZLwg27I1ChAmQcJoJpedhj4lzdQbuOPmjquI0rUBdq8GqWdgiR/KiX 7NGLXkAgCq0YfktP62rY5Em6ICGDX9WOzwj6SJl4dhqy+LRxjK6d9P3YUb0j8sRp 2dx21MkPKta6q1BmjpNEhdQsPuRpobiTa7I3EJMhiVpv5j1LCO+ybdus2Mzks+mO hCuQRTZolPgiHnmnrRzayuNPO3LW85yXKsDsSlPFEcrM9VV772zNadsItBMcv1T9 HAzWUkTzBGMOn3P963k5V73oPIfSuFx8+eLcndGo5CR+ZcVc8ZcaR1So9ok1pk7V RRWABrv4lzVeP0Q+oYAlJ3cI5j5ghRs= -----END CERTIFICATE-----Generated at Sun Oct 19 17:30:48 2025 by rpki-client