$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/1d53c4f7-3aed-32a1-a023-21e0e5af2181.roa File: 1d53c4f7-3aed-32a1-a023-21e0e5af2181.roa (raw, json) Hash identifier: yZ6DHKKiifdS4Qi/btaRp+G8T/+XgtMv5iWCWLYcYq4= Subject key identifier: 5E:B8:59:A1:DD:9F:A8:75:31:56:44:52:0E:A0:2A:2A:AB:35:08:1E Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584AF256A191E2958CE94729BD00 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/1d53c4f7-3aed-32a1-a023-21e0e5af2181.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 32806 IP address blocks: 192.187.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a1:91:e2:95:8c:e9:47:29:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=af132aca-bf49-4f2a-866c-6d1bd4d3d033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:91:3a:31:60:c0:02:95:53:81:57:35:65:93: 69:9b:bd:1d:15:c0:0a:75:7b:9a:41:fc:ab:44:93: 84:6f:ce:41:a6:17:0c:49:4f:98:a2:15:6c:85:86: 70:a3:39:ab:4c:d3:b5:85:28:05:34:a9:ae:ba:61: 1a:b7:7d:95:e6:2c:25:2b:62:94:f5:9c:7a:a5:29: 87:21:d0:5e:62:89:d4:07:df:58:a2:27:85:20:3e: 46:a2:d5:e4:b5:db:48:22:8d:09:fb:69:64:5d:59: de:56:56:6f:34:c5:2d:93:35:55:66:cd:2a:86:46: 89:de:e8:a5:aa:cf:30:75:ab:72:a1:59:57:5b:32: c2:07:3e:e9:1f:01:ba:0e:c1:cf:25:0a:4a:27:a8: 2d:bd:94:bf:2c:d4:c7:fc:69:59:db:7b:e3:a9:6c: a3:85:38:d6:b8:f1:a6:35:f3:33:b6:fc:01:ae:92: 37:d7:df:f4:76:ba:f9:33:24:73:11:46:35:e6:c2: c8:cc:4a:83:18:f2:1a:53:3c:d8:19:a8:21:8f:4f: a1:b4:ee:56:92:56:49:54:b0:74:0c:35:7d:c7:d3: 66:76:5a:ae:ab:40:3b:bb:d8:38:a0:59:4c:ca:6b: 30:66:b4:1c:c0:5c:56:c6:69:e2:18:95:f6:59:b6: ae:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B8:59:A1:DD:9F:A8:75:31:56:44:52:0E:A0:2A:2A:AB:35:08:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/1d53c4f7-3aed-32a1-a023-21e0e5af2181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv4: 192.187.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:73:ab:6c:7f:8e:c5:09:d3:8d:14:ca:37:11:a4:33:98:13: 32:d9:cb:d6:b8:4c:ef:3b:d8:a2:82:31:30:af:d3:ea:a5:07: 25:91:f9:c5:6d:f1:04:87:03:2d:3a:38:69:40:b9:09:e7:6a: 13:39:48:8f:82:58:ce:33:a4:f4:79:08:0b:83:36:85:1b:4c: 5e:67:d4:aa:52:7b:fc:bc:32:a5:b2:3a:fa:a1:c6:8e:91:38: f2:62:e5:e3:a9:7a:03:bc:ca:c4:6c:13:a2:58:bc:a4:65:53: fe:e5:ea:8d:e2:d9:76:ca:d8:d8:bd:59:0d:6d:c0:99:0d:f1: ad:4d:f8:ea:ad:4b:43:a9:5b:80:12:04:0c:b3:6d:28:99:ff: 64:6c:32:b9:72:1c:97:5b:1c:87:92:90:31:84:50:a9:43:56: c1:53:20:14:24:08:35:0a:b7:39:43:16:d6:59:83:24:98:3e: ff:15:4c:bf:cf:73:7e:ae:a1:9c:83:6c:b0:ef:ce:f2:ba:c0: c2:c8:23:6f:5c:ce:d8:bf:36:6a:17:95:84:36:ee:1c:0e:27: 2b:f7:d4:16:ce:58:d4:f8:5a:eb:08:c3:b6:0d:94:08:4f:9a: 3f:ae:e1:a7:cd:fa:99:13:6e:dc:65:99:00:75:8d:15:08:39: 6a:a2:59:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqGR4pWM6UcpvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YWYxMzJhY2EtYmY0OS00ZjJhLTg2NmMtNmQxYmQ0ZDNkMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55E6MWDAApVTgVc1ZZNpm70dFcAKdXuaQfyr RJOEb85BphcMSU+YohVshYZwozmrTNO1hSgFNKmuumEat32V5iwlK2KU9Zx6pSmH IdBeYonUB99YoieFID5GotXktdtIIo0J+2lkXVneVlZvNMUtkzVVZs0qhkaJ3uil qs8wdatyoVlXWzLCBz7pHwG6DsHPJQpKJ6gtvZS/LNTH/GlZ23vjqWyjhTjWuPGm NfMztvwBrpI319/0drr5MyRzEUY15sLIzEqDGPIaUzzYGaghj0+htO5WklZJVLB0 DDV9x9Nmdlquq0A7u9g4oFlMymswZrQcwFxWxmniGJX2WbauTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF64WaHdn6h1MVZEUg6gKiqrNQgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvMWQ1M2M0ZjctM2FlZC0z MmExLWEwMjMtMjFlMGU1YWYyMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9zq2x/jsUJ040UyjcRpDOYEzLZy9a4TO872KKCMTCv0+qlByWR+cVt 8QSHAy06OGlAuQnnahM5SI+CWM4zpPR5CAuDNoUbTF5n1KpSe/y8MqWyOvqhxo6R OPJi5eOpegO8ysRsE6JYvKRlU/7l6o3i2XbK2Ni9WQ1twJkN8a1N+OqtS0OpW4AS BAyzbSiZ/2RsMrlyHJdbHIeSkDGEUKlDVsFTIBQkCDUKtzlDFtZZgySYPv8VTL/P c36uoZyDbLDvzvK6wMLII29czti/NmoXlYQ27hwOJyv31BbOWNT4WusIw7YNlAhP mj+u4afN+pkTbtxlmQB1jRUIOWqiWUM= -----END CERTIFICATE-----Generated at Sun Aug 24 04:26:01 2025 by rpki-client