$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/02bd29d6-457b-326a-911b-918d4d008838.roa File: 02bd29d6-457b-326a-911b-918d4d008838.roa (raw, json) Hash identifier: EpBsgNNhAJ96lwcIm5+ZLY+KPkGZZa59Pp/7nWm7vZk= Subject key identifier: 97:35:3A:DA:E8:54:6D:FC:EE:7E:57:F6:BA:AE:9C:5E:FF:B8:A0:18 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584B6797F853ED0F80135FAC6900 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/02bd29d6-457b-326a-911b-918d4d008838.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 32806 IP address blocks: 208.114.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f8:53:ed:0f:80:13:5f:ac:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=78b5562e-484a-4006-bf17-80ae8ac63b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:01:6c:ae:39:7d:44:06:d3:59:a1:96:21: ae:1c:91:a5:0a:a5:ec:e5:43:0d:2f:0a:38:50:97: 39:b0:97:f7:d7:29:3a:1c:d8:e7:96:e4:68:3d:3f: 84:95:a8:44:7e:3b:9b:0f:d0:ba:81:9b:5d:37:9d: dc:ae:30:95:c5:33:12:fe:0d:b7:a6:29:35:ab:79: 81:dc:a5:e4:f2:e5:1f:0a:16:62:44:c2:62:d0:68: 2d:5c:e4:a1:d7:de:68:33:98:d3:d5:d4:2d:47:3e: c4:87:9b:3a:e9:c4:2e:c0:34:f4:94:d9:50:e7:99: 5d:95:98:22:02:64:e5:8d:59:0a:9e:b2:8b:0f:dc: 16:87:e4:b0:f7:e8:2a:c3:e1:f2:f9:a4:34:70:4d: f0:e6:1e:2b:b6:48:f1:cc:0c:c0:92:f5:18:f3:39: d9:52:70:89:06:80:69:98:d9:69:c4:5e:bc:a7:9a: 92:c7:d2:cf:17:42:49:9d:07:84:31:d2:bd:a2:57: 56:33:f7:91:5c:fc:e8:34:8a:31:b9:fb:8c:df:a9: 60:ba:a1:17:b1:d1:a3:bf:5d:23:73:8b:07:d6:7a: 31:99:62:04:df:99:85:51:72:54:6d:57:b6:64:cc: 1e:c1:e9:02:9b:ea:64:78:c1:77:bc:02:50:b1:c7: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:35:3A:DA:E8:54:6D:FC:EE:7E:57:F6:BA:AE:9C:5E:FF:B8:A0:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/02bd29d6-457b-326a-911b-918d4d008838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 208.114.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ed:88:e6:6f:79:eb:55:18:41:43:8e:f8:ec:f7:77:e9:00: 9e:a2:6b:6c:02:f2:81:77:01:07:70:73:6e:a9:30:d1:66:1c: 44:fc:87:a1:64:92:ef:dc:2f:56:83:79:b7:1e:d5:d5:7c:f5: 23:94:d2:6a:76:ef:81:44:dc:57:6f:08:f1:56:33:e4:c9:cb: ba:ea:9b:64:77:29:16:6c:d1:ac:f8:51:7f:01:1a:49:c7:d2: 0a:e1:e8:c9:d1:b0:d8:bb:cd:f1:71:a7:24:af:31:0c:24:74: 8a:04:6b:c8:55:fb:3d:22:3e:b4:c3:c6:35:f9:ea:4c:21:9f: f0:a9:d0:8e:3b:e1:12:50:b0:e9:90:48:da:8c:fd:17:71:e1: 4d:03:9f:81:74:f6:95:e8:c1:54:02:01:cb:0b:f3:28:09:ca: f6:af:82:2c:69:9b:b4:64:26:4f:9e:21:16:8b:29:c1:4c:b6: 88:bb:76:ea:80:0f:02:e1:61:76:5b:7b:83:11:81:4f:4e:09: d1:47:04:f9:3b:90:90:76:30:2c:e7:14:5f:15:4d:81:bb:48: ca:ee:b3:9e:81:f9:34:79:93:fa:b9:18:43:3a:ac:77:ba:7f: 9b:0a:37:0b:aa:0c:5f:5a:4e:89:24:88:c4:4f:fe:26:de:a5: 7d:62:32:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/hT7Q+AE1+saQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzhiNTU2MmUtNDg0YS00MDA2LWJmMTctODBhZThhYzYzYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ4BbK45fUQG01mhliGuHJGlCqXs5UMNLwo4 UJc5sJf31yk6HNjnluRoPT+ElahEfjubD9C6gZtdN53crjCVxTMS/g23pik1q3mB 3KXk8uUfChZiRMJi0GgtXOSh195oM5jT1dQtRz7Eh5s66cQuwDT0lNlQ55ldlZgi AmTljVkKnrKLD9wWh+Sw9+gqw+Hy+aQ0cE3w5h4rtkjxzAzAkvUY8znZUnCJBoBp mNlpxF68p5qSx9LPF0JJnQeEMdK9oldWM/eRXPzoNIoxufuM36lguqEXsdGjv10j c4sH1noxmWIE35mFUXJUbVe2ZMwewekCm+pkeMF3vAJQsceGDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc1OtroVG387n5X9rqunF7/uKAYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvMDJiZDI5ZDYtNDU3Yi0z MjZhLTkxMWItOTE4ZDRkMDA4ODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HJ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACztiOZveetVGEFDjvjs93fpAJ6ia2wC8oF3AQdwc26pMNFmHET8h6Fk ku/cL1aDebce1dV89SOU0mp274FE3FdvCPFWM+TJy7rqm2R3KRZs0az4UX8BGknH 0grh6MnRsNi7zfFxpySvMQwkdIoEa8hV+z0iPrTDxjX56kwhn/Cp0I474RJQsOmQ SNqM/Rdx4U0Dn4F09pXowVQCAcsL8ygJyvavgixpm7RkJk+eIRaLKcFMtoi7duqA DwLhYXZbe4MRgU9OCdFHBPk7kJB2MCznFF8VTYG7SMrus56B+TR5k/q5GEM6rHe6 f5sKNwuqDF9aTokkiMRP/ibepX1iMt8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:20:46 2025 by rpki-client