$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/8895cd74-8d41-3b58-bd1d-a4244dfdc582.roa File: 8895cd74-8d41-3b58-bd1d-a4244dfdc582.roa (raw, json) Hash identifier: YBtayG2HqdIMZVgvqx2xAxeDwwNPSzveF556TnK6wzQ= Subject key identifier: 59:28:F8:F4:5F:CC:4F:8D:F3:03:E6:40:B2:D1:E3:23:AD:9F:30:A2 Certificate issuer: /CN=32652e19-5988-41fb-a45a-66b23c523f3b Certificate serial: 010D0C9F4328584B8B6CFF24C5A74B178E620780 Authority key identifier: AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/8895cd74-8d41-3b58-bd1d-a4244dfdc582.roa Signing time: Thu 16 Oct 2025 21:04:41 +0000 ROA not before: Thu 16 Oct 2025 21:04:41 +0000 ROA not after: Wed 14 Jan 2026 22:04:41 +0000 asID: 210110 IP address blocks: 142.248.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:6c:ff:24:c5:a7:4b:17:8e:62:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32652e19-5988-41fb-a45a-66b23c523f3b Validity Not Before: Oct 16 21:04:41 2025 GMT Not After : Jan 14 22:04:41 2026 GMT Subject: CN=18a1075f-4dfe-4461-878b-c40a241e1fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:f6:d8:52:e5:b0:bf:58:66:12:03:f7:39: 91:7d:36:5a:50:a6:48:75:db:03:91:80:1e:4a:4f: a6:53:da:23:05:cd:06:95:00:aa:ed:89:1a:36:8b: 44:f9:de:0c:47:21:91:02:20:23:87:6d:c3:d8:73: 33:e6:92:3c:31:76:64:fc:51:6b:0b:e5:63:18:37: 1c:e3:65:f5:03:87:5d:50:43:42:8c:22:a1:ea:ce: e2:6b:e4:df:8d:8e:b5:81:3d:23:b6:c5:ba:b3:21: bf:2f:2c:b4:26:a0:ec:15:3b:b8:e5:84:fc:3b:87: d2:4c:03:65:18:a7:90:fb:8a:9e:46:8e:66:ed:d3: 34:a5:07:10:75:f0:28:ef:f2:6c:e2:40:44:5d:31: ea:6c:b4:fb:8c:32:c3:10:92:15:9b:92:45:52:04: 84:c5:f1:e5:70:b9:10:a6:5d:f1:7f:09:e3:e3:fe: 0f:63:53:e9:db:26:dc:22:bd:d9:e3:ed:68:58:82: 98:e8:bd:d4:41:f9:18:ad:c2:4f:a4:ae:ec:59:27: d6:1d:c6:c8:5f:1f:ac:19:1e:fa:2b:dc:bd:c3:b0: 9e:37:6c:62:3d:49:be:56:e9:22:49:90:46:cc:16: 41:61:76:8e:68:79:4d:6b:3f:eb:39:84:e4:47:4f: b0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:28:F8:F4:5F:CC:4F:8D:F3:03:E6:40:B2:D1:E3:23:AD:9F:30:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/8895cd74-8d41-3b58-bd1d-a4244dfdc582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl X509v3 Authority Key Identifier: keyid:AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer sbgp-ipAddrBlock: critical IPv4: 142.248.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:01:07:51:78:98:26:d2:e5:65:c1:49:1d:48:4b:85:db:04: 55:1d:f3:37:92:c6:be:a9:d0:b1:7d:9d:b6:f0:d5:dc:dc:75: 49:a6:f8:9c:01:71:38:03:a1:1c:9a:22:82:2c:80:2e:9f:6c: 02:a2:cd:8f:6a:0b:b7:fd:73:7e:97:89:90:53:2d:95:b9:88: 99:06:0d:6a:bf:de:6c:41:bd:33:2d:b8:f0:b7:a2:4e:a0:3a: 0d:db:4b:f1:f6:2e:63:1d:ce:8c:3e:84:6e:83:22:81:e1:f2: 9d:66:a8:a0:f8:21:0a:3c:2d:98:47:c7:32:49:5a:6e:d0:f5: 5e:77:ce:14:c7:0e:96:22:0b:ff:3e:24:cd:71:60:38:46:c4: 75:87:ad:06:25:99:40:44:d3:78:67:da:c7:12:71:cb:5b:50: 3b:96:8c:4e:9e:88:09:f6:e3:4b:39:b9:16:d0:68:53:37:08: f8:dd:5a:7f:e5:95:3f:1c:d6:63:91:22:47:e3:06:49:de:56: 12:ac:4c:08:60:81:d9:58:ab:18:29:ec:c5:ba:d5:97:61:4d: 5c:93:e0:bf:63:44:01:8a:88:96:f2:1a:49:1a:22:69:49:45: 89:3a:33:29:5a:61:f0:5b:c6:a2:7a:1e:61:d6:88:a5:c2:23: 6e:c1:dc:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuLbP8kxadLF45iB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI2NTJlMTktNTk4OC00MWZiLWE0NWEtNjZiMjNjNTIz ZjNiMB4XDTI1MTAxNjIxMDQ0MVoXDTI2MDExNDIyMDQ0MVowLzEtMCsGA1UEAxMk MThhMTA3NWYtNGRmZS00NDYxLTg3OGItYzQwYTI0MWUxZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxT22FLlsL9YZhID9zmRfTZaUKZIddsDkYAe Sk+mU9ojBc0GlQCq7YkaNotE+d4MRyGRAiAjh23D2HMz5pI8MXZk/FFrC+VjGDcc 42X1A4ddUENCjCKh6s7ia+TfjY61gT0jtsW6syG/Lyy0JqDsFTu45YT8O4fSTANl GKeQ+4qeRo5m7dM0pQcQdfAo7/Js4kBEXTHqbLT7jDLDEJIVm5JFUgSExfHlcLkQ pl3xfwnj4/4PY1Pp2ybcIr3Z4+1oWIKY6L3UQfkYrcJPpK7sWSfWHcbIXx+sGR76 K9y9w7CeN2xiPUm+VukiSZBGzBZBYXaOaHlNaz/rOYTkR0+w4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFko+PRfzE+N8wPmQLLR4yOtnzCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMjY1 MmUxOS01OTg4LTQxZmItYTQ1YS02NmIyM2M1MjNmM2IvODg5NWNkNzQtOGQ0MS0z YjU4LWJkMWQtYTQyNDRkZmRjNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzI2NTJlMTktNTk4OC00MWZiLWE0 NWEtNjZiMjNjNTIzZjNiLzMyNjUyZTE5LTU5ODgtNDFmYi1hNDVhLTY2YjIzYzUy M2YzYi5jcmwwHwYDVR0jBBgwFoAUrWJ7cveJh0NtZMJTwuOF0WzytQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMjY1MmUxOS01OTg4LTQxZmItYTQ1YS02NmIy M2M1MjNmM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8BB1F4mCbS5WXBSR1IS4XbBFUd8zeSxr6p0LF9nbbw1dzcdUmm+JwB cTgDoRyaIoIsgC6fbAKizY9qC7f9c36XiZBTLZW5iJkGDWq/3mxBvTMtuPC3ok6g Og3bS/H2LmMdzow+hG6DIoHh8p1mqKD4IQo8LZhHxzJJWm7Q9V53zhTHDpYiC/8+ JM1xYDhGxHWHrQYlmUBE03hn2scScctbUDuWjE6eiAn240s5uRbQaFM3CPjdWn/l lT8c1mORIkfjBkneVhKsTAhggdlYqxgp7MW61ZdhTVyT4L9jRAGKiJbyGkkaImlJ RYk6MylaYfBbxqJ6HmHWiKXCI27B3Ig= -----END CERTIFICATE-----Generated at Sun Oct 19 23:14:30 2025 by rpki-client