$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa File: 7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa (raw, json) Hash identifier: F0g+OII68nMxv/p/AeAWj05DKz1R8nLdQcWY9EBCYss= Subject key identifier: D0:EA:33:C8:42:24:29:63:60:E4:60:38:D0:4C:DF:CA:E9:6C:08:13 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AFEE6AA9D73FFB878B1D66780 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 399629 IP address blocks: 149.248.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:aa:9d:73:ff:b8:78:b1:d6:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=f0f1bd89-2a39-47ac-a833-e42fdac6832e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a1:4c:73:93:c0:2b:d9:60:eb:a3:bb:71:f6: 85:6e:7f:3e:2e:f2:a3:99:61:76:c0:c8:df:7a:e0: c5:28:ec:94:88:38:94:88:02:be:00:41:e2:49:5a: 74:17:c4:28:30:e7:d4:8f:ad:b6:e9:0e:76:b1:e7: ac:e8:8f:10:a8:74:3c:60:67:b5:46:77:70:7d:13: ea:e1:f0:cd:71:4f:a4:74:26:46:4a:78:e6:1f:5d: 0f:af:f6:31:8f:06:bd:1b:85:49:0c:21:bd:0b:59: e3:69:7d:b6:2c:bf:09:76:c7:f7:3b:77:84:f9:75: 63:56:cc:78:74:7a:16:69:93:fa:a0:e5:91:70:0b: c3:c3:00:8e:18:e1:9b:8d:30:d7:49:4e:e7:71:7f: b1:e0:b5:ec:31:98:e7:17:4b:5a:07:07:54:02:9d: ce:81:21:40:2a:b8:7e:b8:2c:a9:22:a9:f7:60:c3: e5:9a:63:fc:44:1a:b8:75:95:c4:bf:ef:3e:b6:4a: 6b:f4:ff:87:0e:32:1a:5b:52:28:88:4d:7b:a2:44: 99:65:fa:c2:1c:cc:08:6a:a1:72:2d:ba:e8:81:63: d4:31:a9:cd:3c:e0:e1:12:7a:33:f1:fa:98:5a:27: c4:09:16:f9:0f:b2:ad:0c:90:4f:11:a6:08:4b:2f: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EA:33:C8:42:24:29:63:60:E4:60:38:D0:4C:DF:CA:E9:6C:08:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 149.248.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:20:e8:5e:b8:98:30:b1:95:9b:d2:68:78:f6:02:7f:19:c9: 7d:46:4b:a3:f5:0c:13:40:44:6f:1e:a6:5d:7e:ab:2c:ca:d0: 1d:50:1e:79:87:8a:5e:79:9e:be:e5:8d:f2:67:7d:5f:ed:c5: 2b:ed:8b:46:16:0a:8a:89:97:bb:75:13:70:0b:49:6d:50:9f: a6:7d:cb:6d:1a:d1:1a:30:61:b7:1c:d8:b5:c4:3c:93:05:00: a5:ad:e0:98:1f:d8:5b:6e:c0:1b:03:a4:3d:3d:0b:5b:01:b0: 55:c0:54:37:13:65:1b:ff:86:2b:d1:99:fc:48:e4:bf:69:ee: 60:55:14:71:d3:5f:ea:d3:f2:b1:2c:5a:20:d3:f0:95:dd:57: 85:30:7e:a9:1a:41:67:3d:a2:eb:8c:f7:67:a2:a4:41:74:c4: c4:1d:e1:8d:41:43:17:7d:49:64:f5:97:cc:33:55:b6:87:a7: 0d:05:5f:75:3b:75:0b:61:94:57:c7:fe:16:ef:99:83:9e:61: f8:1d:e8:d8:9b:59:fb:3a:e3:a9:3a:51:5f:66:da:ec:14:41: 38:ef:8d:76:5d:b0:45:f1:e3:e8:21:a3:1b:e7:73:89:df:69: 40:6d:e0:e6:98:6a:86:94:4f:41:2d:ed:a6:c0:1d:b2:24:dc: df:2b:3e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qqdc/+4eLHWZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZjBmMWJkODktMmEzOS00N2FjLWE4MzMtZTQyZmRhYzY4MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqFMc5PAK9lg66O7cfaFbn8+LvKjmWF2wMjf euDFKOyUiDiUiAK+AEHiSVp0F8QoMOfUj6226Q52sees6I8QqHQ8YGe1RndwfRPq 4fDNcU+kdCZGSnjmH10Pr/Yxjwa9G4VJDCG9C1njaX22LL8Jdsf3O3eE+XVjVsx4 dHoWaZP6oOWRcAvDwwCOGOGbjTDXSU7ncX+x4LXsMZjnF0taBwdUAp3OgSFAKrh+ uCypIqn3YMPlmmP8RBq4dZXEv+8+tkpr9P+HDjIaW1IoiE17okSZZfrCHMwIaqFy LbrogWPUManNPODhEnoz8fqYWifECRb5D7KtDJBPEaYISy9/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDqM8hCJCljYORgONBM38rpbAgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvN2RmYjU5ZjgtYWI0NS0z MDk0LTg5MzgtYTU0MzNiY2RjNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsg6F64mDCxlZvSaHj2An8ZyX1GS6P1DBNARG8epl1+qyzK0B1QHnmH il55nr7ljfJnfV/txSvti0YWCoqJl7t1E3ALSW1Qn6Z9y20a0RowYbcc2LXEPJMF AKWt4Jgf2FtuwBsDpD09C1sBsFXAVDcTZRv/hivRmfxI5L9p7mBVFHHTX+rT8rEs WiDT8JXdV4UwfqkaQWc9ouuM92eipEF0xMQd4Y1BQxd9SWT1l8wzVbaHpw0FX3U7 dQthlFfH/hbvmYOeYfgd6NibWfs646k6UV9m2uwUQTjvjXZdsEXx4+ghoxvnc4nf aUBt4OaYaoaUT0Et7abAHbIk3N8rPtM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:06 2025 by rpki-client