$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa File: b31f8880-9daf-3934-8200-09c9b0c1e35f.roa (raw, json) Hash identifier: SWzX68AmL1FxQMETozEnLMmYNPWOshtIYOggVuT55Qw= Subject key identifier: 24:E0:7A:37:68:96:11:9D:11:74:C6:85:AD:58:B3:EB:67:C5:21:51 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584ADC00F7CD23B82311DE27A400 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 8888 IP address blocks: 96.9.211.0/24 maxlen: 24 96.9.212.0/24 maxlen: 24 96.9.213.0/24 maxlen: 24 172.93.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:00:f7:cd:23:b8:23:11:de:27:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=f2abeaad-50eb-4db2-92ef-25e89bfcefd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8f:b3:ab:0e:29:af:f1:06:6e:c5:aa:2c:47: f3:4e:85:84:93:81:db:70:78:bf:b8:c9:02:32:de: 96:79:ba:5a:5c:ea:94:b1:62:7a:aa:31:3b:8f:31: ca:05:51:31:5a:61:70:85:bd:92:53:b0:72:5b:99: df:94:f2:0d:68:be:bb:95:b1:9c:7b:47:ad:4e:9e: 20:42:0a:03:68:65:3d:d3:30:b2:b0:c2:a3:fb:7d: e3:6c:62:bf:9b:c8:9c:e7:ca:96:9e:8e:bc:4b:68: 90:94:c0:24:53:62:55:20:29:68:41:24:c2:02:80: 7b:e9:1f:da:d5:2b:f7:1a:00:82:d3:20:6d:4e:d3: db:a4:5c:cf:e6:db:56:bf:71:a6:20:22:d6:7b:be: 21:8c:25:43:bf:10:46:6e:bb:ad:78:9f:04:98:1d: f2:ba:e2:f3:24:50:c5:ab:ee:02:7e:bb:c4:02:f7: c7:82:c3:65:fa:68:24:e1:a1:28:a0:0c:ae:fa:41: f6:9a:d7:04:82:65:43:25:dc:39:54:24:79:44:83: 02:34:63:a8:0b:9a:9e:78:d0:dc:b1:0b:a7:51:f9: 28:33:4d:24:97:22:d8:bc:b7:0b:50:81:ee:b1:15: 95:92:be:ae:e6:5e:88:8b:d2:87:45:85:c8:e6:27: 3b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E0:7A:37:68:96:11:9D:11:74:C6:85:AD:58:B3:EB:67:C5:21:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 96.9.211.0-96.9.213.255 172.93.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:fa:a2:6e:c1:69:d8:f0:e9:a7:74:42:1b:d4:30:76:91:2f: 40:05:d7:be:5e:a7:7b:d0:25:81:5f:a1:b8:e8:0b:94:5d:a5: 92:70:65:bb:a8:65:5a:4c:7e:f7:3b:7e:c5:e8:43:0c:eb:e4: c1:77:d2:0e:c3:57:2b:e6:21:db:37:24:80:3a:92:e4:9e:45: 96:7b:95:c8:a7:3e:70:24:f4:ef:72:0d:38:5a:09:a5:96:c4: 52:dc:f8:91:d1:72:0f:b4:ca:9b:cd:8f:94:b2:23:f3:d5:9d: 48:d1:c8:58:a5:f9:9d:2f:b5:f1:5a:9d:3a:76:50:82:2e:c6: 58:0b:03:1c:ac:9a:5a:59:7d:98:75:1c:da:f0:50:77:47:66: 0b:a1:97:a0:8e:0b:17:b0:80:90:f4:6b:e8:6e:b4:75:dc:c1: 9a:c0:9d:d0:b2:1f:6c:95:73:cc:9a:2e:fa:88:cf:e8:f2:b4: 44:4b:61:c7:a1:3d:f8:37:a0:8a:85:aa:7c:44:0e:08:12:11: 79:df:b3:72:4e:7f:be:92:80:b6:43:ba:c1:41:65:78:2e:56: b4:7c:16:b6:60:74:14:6c:cc:40:0b:5b:71:6c:0f:7f:e0:fa: 5c:e2:e5:d5:28:e3:0a:2f:99:92:59:ef:9e:64:97:13:2c:95: 55:b9:6a:99 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWErcAPfNI7gjEd4npAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk ZjJhYmVhYWQtNTBlYi00ZGIyLTkyZWYtMjVlODliZmNlZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI+zqw4pr/EGbsWqLEfzToWEk4HbcHi/uMkC Mt6WebpaXOqUsWJ6qjE7jzHKBVExWmFwhb2SU7ByW5nflPINaL67lbGce0etTp4g QgoDaGU90zCysMKj+33jbGK/m8ic58qWno68S2iQlMAkU2JVICloQSTCAoB76R/a 1Sv3GgCC0yBtTtPbpFzP5ttWv3GmICLWe74hjCVDvxBGbruteJ8EmB3yuuLzJFDF q+4CfrvEAvfHgsNl+mgk4aEooAyu+kH2mtcEgmVDJdw5VCR5RIMCNGOoC5qeeNDc sQunUfkoM00klyLYvLcLUIHusRWVkr6u5l6Ii9KHRYXI5ic7JwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFCTgejdolhGdEXTGha1Ys+tnxSFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYjMxZjg4ODAtOWRhZi0z OTM0LTgyMDAtMDljOWIwYzFlMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABgCdMD BAFgCdQDBACsXbowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAWfqibsFp2PDpp3RCG9QwdpEvQAXXvl6ne9Al gV+huOgLlF2lknBlu6hlWkx+9zt+xehDDOvkwXfSDsNXK+Yh2zckgDqS5J5FlnuV yKc+cCT073INOFoJpZbEUtz4kdFyD7TKm82PlLIj89WdSNHIWKX5nS+18VqdOnZQ gi7GWAsDHKyaWll9mHUc2vBQd0dmC6GXoI4LF7CAkPRr6G60ddzBmsCd0LIfbJVz zJou+ojP6PK0REthx6E9+DegioWqfEQOCBIRed+zck5/vpKAtkO6wUFleC5WtHwW tmB0FGzMQAtbcWwPf+D6XOLl1SjjCi+ZklnvnmSXEyyVVblqmQ== -----END CERTIFICATE-----Generated at Sat Aug 23 22:34:45 2025 by rpki-client