$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/499a84c2-191a-39f2-b4fd-5937af6f121f.roa File: 499a84c2-191a-39f2-b4fd-5937af6f121f.roa (raw, json) Hash identifier: P5M77UTKfc6FX4gW/xGD0LFeZB/rGgk4Ij3AYVFopG4= Subject key identifier: F5:00:8A:D7:16:F3:DF:44:63:0C:C5:FB:CE:1B:91:49:18:6B:DB:A4 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584AC8763C52C1E9DF16E6119900 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/499a84c2-191a-39f2-b4fd-5937af6f121f.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 23959 IP address blocks: 172.93.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:3c:52:c1:e9:df:16:e6:11:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=84d0b438-d9d7-4013-a380-3a446ea6aefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:bd:4a:f6:38:f6:19:e4:63:53:97:2d:69: 1b:2e:5c:fd:97:57:c9:68:8f:6d:32:2e:ba:01:5d: d7:c8:c6:10:6c:42:e3:ee:0a:08:e7:47:fe:fb:65: 0e:49:0c:52:78:7c:2f:e5:d2:61:cb:3e:25:ec:31: a7:0d:f9:7d:4a:7b:cf:7c:69:8c:1d:f8:78:f8:a9: ae:ac:b0:1d:37:c6:e3:d4:20:80:8f:0d:bf:03:84: 41:3e:e2:d9:68:d2:94:ed:15:42:49:1a:fb:0e:7b: 9c:ab:cf:32:d3:cd:e7:6f:b2:9b:53:33:70:70:7d: 33:aa:8c:26:cd:b1:37:c3:4e:31:07:f9:33:2c:90: 5f:21:25:7f:10:25:9c:ae:47:e9:5f:be:dd:29:62: 6f:d6:af:47:ef:be:d3:53:3a:12:0c:1d:61:24:44: cd:40:3b:d1:55:34:5e:41:0c:0c:99:b3:00:0d:fc: 90:7b:4c:e8:29:70:ec:4a:53:6a:ce:27:9a:46:7b: a5:fe:19:73:0a:4b:e8:1c:62:b9:6b:91:9f:3b:2b: 17:16:b2:32:bc:4c:8f:c1:07:e8:c4:91:a0:4c:d5: bc:b3:79:0c:cb:71:fc:29:21:00:db:bf:52:34:44: 17:0a:b8:a5:f0:a4:ed:b9:b5:26:d3:1b:ba:30:f0: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:00:8A:D7:16:F3:DF:44:63:0C:C5:FB:CE:1B:91:49:18:6B:DB:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/499a84c2-191a-39f2-b4fd-5937af6f121f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 172.93.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:18:7c:af:f2:14:57:f7:12:b2:d7:3d:bc:41:fa:70:b1:6a: 6f:0d:fa:f0:9a:b5:cc:1b:0b:5b:e8:fb:cc:fc:56:fa:f7:41: 0b:93:72:7f:89:db:d7:ef:3c:9a:d0:2a:04:65:d9:f7:93:a4: d1:4f:35:6b:10:62:07:61:1c:dc:40:b1:a4:4b:09:f8:a7:a5: e9:4d:01:2e:4e:05:e2:78:b1:f0:b7:1c:f5:e7:be:0d:f3:f4: 7c:ae:37:0e:d5:b5:8b:89:0d:2f:10:4c:f9:65:79:ce:ae:2d: 39:e2:8f:ca:c0:ac:35:51:1b:21:43:ab:ad:51:a1:9d:80:c0: 15:24:db:01:34:6c:c2:af:9b:6c:60:fb:1f:f0:1e:b8:d9:f0: a8:70:96:9b:7b:ef:bc:60:72:68:e7:4d:f2:d9:b9:ea:d8:4a: 7d:91:84:08:d5:86:39:aa:dc:56:83:78:24:a6:fb:6f:ce:03: 41:7c:7d:41:a1:d5:1b:1e:aa:c6:ec:49:66:f1:fa:ff:0a:81: b5:8b:c3:00:00:79:46:fa:e2:14:34:05:28:f0:83:dd:43:2a: 9e:29:09:f9:7b:ac:37:ea:53:c0:af:89:94:a0:25:f6:e2:dd: 86:4f:de:9e:f5:94:e1:b9:1c:d5:d9:0c:ea:95:fb:f9:40:92: a9:41:e1:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdjxSwenfFuYRmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ODRkMGI0MzgtZDlkNy00MDEzLWEzODAtM2E0NDZlYTZhZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKG9SvY49hnkY1OXLWkbLlz9l1fJaI9tMi66 AV3XyMYQbELj7goI50f++2UOSQxSeHwv5dJhyz4l7DGnDfl9SnvPfGmMHfh4+Kmu rLAdN8bj1CCAjw2/A4RBPuLZaNKU7RVCSRr7Dnucq88y083nb7KbUzNwcH0zqowm zbE3w04xB/kzLJBfISV/ECWcrkfpX77dKWJv1q9H777TUzoSDB1hJETNQDvRVTRe QQwMmbMADfyQe0zoKXDsSlNqzieaRnul/hlzCkvoHGK5a5GfOysXFrIyvEyPwQfo xJGgTNW8s3kMy3H8KSEA279SNEQXCril8KTtubUm0xu6MPC3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUAitcW899EYwzF+84bkUkYa9ukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNDk5YTg0YzItMTkxYS0z OWYyLWI0ZmQtNTkzN2FmNmYxMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrF3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMYfK/yFFf3ErLXPbxB+nCxam8N+vCatcwbC1vo+8z8Vvr3QQuTcn+J 29fvPJrQKgRl2feTpNFPNWsQYgdhHNxAsaRLCfinpelNAS5OBeJ4sfC3HPXnvg3z 9HyuNw7VtYuJDS8QTPllec6uLTnij8rArDVRGyFDq61RoZ2AwBUk2wE0bMKvm2xg +x/wHrjZ8Khwlpt777xgcmjnTfLZuerYSn2RhAjVhjmq3FaDeCSm+2/OA0F8fUGh 1RseqsbsSWbx+v8KgbWLwwAAeUb64hQ0BSjwg91DKp4pCfl7rDfqU8CviZSgJfbi 3YZP3p71lOG5HNXZDOqV+/lAkqlB4fQ= -----END CERTIFICATE-----Generated at Sat Aug 23 19:24:58 2025 by rpki-client