$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/71946b01-6052-3777-8280-5d1a5e5f3715.roa File: 71946b01-6052-3777-8280-5d1a5e5f3715.roa (raw, json) Hash identifier: 9ZnAuejVl97FXjJdMboEECDzvjAhH1hKKRYvyK3cPLY= Subject key identifier: CF:9D:BD:A3:29:6A:06:CB:92:2B:34:72:FF:D9:83:12:32:F7:21:8A Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584B434C5C500E5EC96CFD7A4290 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/71946b01-6052-3777-8280-5d1a5e5f3715.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 399629 IP address blocks: 206.71.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5c:50:0e:5e:c9:6c:fd:7a:42:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=7cb28b1b-cc62-4063-99c5-56eac19e4bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8d:ff:bd:86:b0:2e:1d:67:df:9b:27:ce:be: 31:f5:28:b1:88:14:ef:25:eb:c0:d1:db:33:1d:9f: e4:bf:f9:94:7f:65:66:cb:58:0a:93:4c:86:f5:15: 4b:c1:c9:e7:31:c5:3c:40:da:b2:e7:5c:fb:46:e9: a7:33:c0:3f:d4:4c:33:30:1f:45:65:1c:d1:42:93: 3e:5b:44:34:e0:07:4f:da:4e:d8:2c:21:7f:fb:a3: ce:f5:f1:08:24:ec:75:f5:ae:ca:54:a7:dd:00:04: c8:59:cc:9d:b3:a8:81:75:99:76:5a:20:04:ba:ff: 0e:c7:32:35:75:71:1b:04:cb:97:95:69:52:e0:e6: 0b:53:d2:42:1a:b9:11:04:ea:dc:81:0d:71:27:71: 0c:de:3f:0b:7c:ee:05:36:07:a3:86:7d:0f:80:b4: 4c:a1:f0:b9:0d:fa:09:46:5a:b9:8e:ad:1d:aa:0a: 4c:3b:dc:12:cd:28:68:5e:39:23:2e:a3:1c:13:4b: 68:7a:45:85:2c:85:3c:4d:56:6e:53:f7:dd:bc:c7: 30:ff:40:ca:0d:c3:41:2f:a1:5b:26:c8:36:d6:bf: 01:62:c4:bd:d4:ba:5f:19:84:54:ba:5e:80:8e:07: 14:ca:3d:96:65:ca:ee:b8:4a:08:cc:08:8d:86:13: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9D:BD:A3:29:6A:06:CB:92:2B:34:72:FF:D9:83:12:32:F7:21:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/71946b01-6052-3777-8280-5d1a5e5f3715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 206.71.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b1:75:a3:41:f7:0e:73:15:7d:e7:77:a9:35:94:18:82:6a: ad:ed:2b:cc:fa:3c:6c:d9:83:4e:f3:6a:90:36:ea:da:b5:6c: b9:e1:73:41:ce:2f:28:16:d4:c9:6e:e3:b5:40:1c:b6:7c:8a: 6c:c8:c8:71:67:52:60:d6:06:21:dc:e0:d6:b1:b2:c5:2c:fd: 2b:06:7d:d4:68:24:ae:82:c9:81:11:ba:d0:9f:4b:b5:32:e4: 4c:52:b6:52:cd:d3:fb:b6:b3:3a:fe:6f:f6:c9:6d:ae:6e:0e: 77:9b:57:53:e3:db:95:41:b7:bd:9d:20:a3:c3:3d:44:c9:c6: f5:55:70:e6:d1:78:b0:ca:88:03:bd:0f:06:59:78:d6:ed:4d: 81:a8:37:27:06:34:5e:e7:b2:42:e4:19:26:c5:ac:fd:e9:af: 18:33:88:cd:5b:87:d6:e0:0b:05:4e:06:ab:56:67:bd:29:a5: 32:16:a0:ec:4e:3f:f2:e0:cd:77:7e:3b:8d:9c:5b:0e:a3:98: fe:27:61:31:e4:62:46:b2:c0:b2:1f:e2:b8:3c:db:8b:16:a9: fb:d6:23:94:0c:da:b4:32:46:4d:23:e9:16:7d:95:26:d5:a3: 72:dc:d8:cf:31:25:ff:e7:cd:f3:06:e9:f4:44:67:ce:7a:cb: ad:b9:b6:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFxQDl7JbP16QpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk N2NiMjhiMWItY2M2Mi00MDYzLTk5YzUtNTZlYWMxOWU0YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi43/vYawLh1n35snzr4x9SixiBTvJevA0dsz HZ/kv/mUf2Vmy1gKk0yG9RVLwcnnMcU8QNqy51z7RumnM8A/1EwzMB9FZRzRQpM+ W0Q04AdP2k7YLCF/+6PO9fEIJOx19a7KVKfdAATIWcyds6iBdZl2WiAEuv8OxzI1 dXEbBMuXlWlS4OYLU9JCGrkRBOrcgQ1xJ3EM3j8LfO4FNgejhn0PgLRMofC5DfoJ Rlq5jq0dqgpMO9wSzShoXjkjLqMcE0toekWFLIU8TVZuU/fdvMcw/0DKDcNBL6Fb Jsg21r8BYsS91LpfGYRUul6AjgcUyj2WZcruuEoIzAiNhhMQXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+dvaMpagbLkis0cv/ZgxIy9yGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNzE5NDZiMDEtNjA1Mi0z Nzc3LTgyODAtNWQxYTVlNWYzNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzkeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAexdaNB9w5zFX3nd6k1lBiCaq3tK8z6PGzZg07zapA26tq1bLnhc0HO LygW1Mlu47VAHLZ8imzIyHFnUmDWBiHc4NaxssUs/SsGfdRoJK6CyYERutCfS7Uy 5ExStlLN0/u2szr+b/bJba5uDnebV1Pj25VBt72dIKPDPUTJxvVVcObReLDKiAO9 DwZZeNbtTYGoNycGNF7nskLkGSbFrP3prxgziM1bh9bgCwVOBqtWZ70ppTIWoOxO P/LgzXd+O42cWw6jmP4nYTHkYkaywLIf4rg824sWqfvWI5QM2rQyRk0j6RZ9lSbV o3Lc2M8xJf/nzfMG6fREZ856y625tsM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:06:04 2025 by rpki-client