$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa File: 9afff874-6a4f-331a-93da-b870000569c0.roa (raw, json) Hash identifier: z/S7KqzMsUUDpcQs/Lbdb1EebPfMpEle9DnH5iDEQE4= Subject key identifier: F5:71:BA:E5:8E:B3:62:4B:92:72:88:80:97:D4:3D:F9:BA:02:DA:7B Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F43285849BF3F66CCE3D7500C9D76EE40 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 398191 IP address blocks: 216.225.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:66:cc:e3:d7:50:0c:9d:76:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=682af217-f79d-4b6d-8634-bb3df366c96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:52:62:27:09:10:14:dc:54:c3:92:76:09: 46:f9:4d:df:20:ad:65:29:9c:79:cb:a3:3a:c3:36: 22:93:ae:ca:c5:d1:d4:35:62:50:bb:5e:c9:60:63: 4c:a3:47:ae:cd:98:f7:1c:c1:41:f3:12:02:9f:4d: 22:00:75:79:5b:4b:09:db:96:68:ff:2f:50:63:06: 6d:46:81:2d:05:67:cf:b9:ed:0b:8e:ed:b7:a9:28: df:52:0e:b5:8e:20:6b:37:71:86:51:a2:75:86:22: f2:4e:12:bb:d4:fe:b1:13:39:8b:3f:e4:80:1e:c4: 95:8a:15:8b:74:1b:e9:70:1b:f0:c6:ee:96:28:de: 43:5c:c7:a6:55:52:85:6d:5c:c8:44:83:a8:c6:95: 43:d8:e3:82:fc:8b:2f:09:3f:7e:d7:6d:b9:ca:c9: 52:ea:24:cf:ee:49:71:02:8b:92:25:21:45:d2:6e: 1c:d8:a8:5c:4d:39:ae:4e:24:46:ae:6b:16:ac:ae: 42:c6:d3:bc:d5:09:03:6f:09:5c:db:5a:5c:1a:0a: d5:82:f6:27:ba:7e:f0:e8:f3:02:f8:6b:98:44:42: 45:73:f8:15:c0:01:26:a4:70:0d:e5:9e:dd:54:c8: 0e:09:b4:8a:44:d8:42:b0:ad:17:7f:4c:c6:3b:29: 90:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:71:BA:E5:8E:B3:62:4B:92:72:88:80:97:D4:3D:F9:BA:02:DA:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv4: 216.225.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:94:75:e0:e1:ad:eb:25:a8:cf:99:ae:2c:3b:fa:fd:ab:b2: d4:22:44:81:6d:96:1d:20:e6:1f:cd:41:90:a7:25:91:6d:42: 1b:45:3e:0f:54:47:d6:3d:75:a9:37:ae:d1:4b:f3:f2:b8:d0: 13:14:30:e9:77:1b:4f:d1:2b:d5:33:f5:1f:fa:bb:14:aa:de: f5:90:d5:aa:ef:14:25:bd:d5:31:4f:32:db:f2:ae:d0:bd:af: a0:f8:6f:a7:e0:82:5f:34:57:19:d4:4c:59:b3:1b:87:02:83: db:f5:ef:3d:be:9b:65:f3:ac:2e:70:f9:ca:37:34:af:8c:65: c4:0f:b6:73:80:c8:50:a8:b4:da:cb:86:eb:59:7e:c1:2f:2b: 43:f4:32:a2:2d:27:c1:36:04:b2:92:49:e9:d5:45:5f:2a:36: ef:61:70:64:3a:5e:f6:f9:7d:28:b4:06:1f:0c:a7:59:44:b8: 34:66:fd:dd:95:ff:ab:1e:68:07:f7:8c:37:8f:24:27:e5:90: 71:e8:a8:be:a2:8b:9e:84:9c:44:6d:34:a9:41:03:ff:c5:b8: 29:37:d7:e4:b4:d0:69:b4:8a:00:93:c5:a9:79:2b:e4:1c:7a: 39:f1:6e:51:14:2e:c5:58:c8:17:19:2b:09:8d:5f:6c:ae:1c: a3:9e:dd:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2bM49dQDJ127kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NjgyYWYyMTctZjc5ZC00YjZkLTg2MzQtYmIzZGYzNjZjOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/VSYicJEBTcVMOSdglG+U3fIK1lKZx5y6M6 wzYik67KxdHUNWJQu17JYGNMo0euzZj3HMFB8xICn00iAHV5W0sJ25Zo/y9QYwZt RoEtBWfPue0Lju23qSjfUg61jiBrN3GGUaJ1hiLyThK71P6xEzmLP+SAHsSVihWL dBvpcBvwxu6WKN5DXMemVVKFbVzIRIOoxpVD2OOC/IsvCT9+1225yslS6iTP7klx AouSJSFF0m4c2KhcTTmuTiRGrmsWrK5CxtO81QkDbwlc21pcGgrVgvYnun7w6PMC +GuYREJFc/gVwAEmpHAN5Z7dVMgOCbSKRNhCsK0Xf0zGOymQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVxuuWOs2JLknKIgJfUPfm6Atp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvOWFmZmY4NzQtNmE0Zi0z MzFhLTkzZGEtYjg3MDAwMDU2OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmUdeDhreslqM+Zriw7+v2rstQiRIFtlh0g5h/NQZCnJZFtQhtFPg9U R9Y9dak3rtFL8/K40BMUMOl3G0/RK9Uz9R/6uxSq3vWQ1arvFCW91TFPMtvyrtC9 r6D4b6fggl80VxnUTFmzG4cCg9v17z2+m2XzrC5w+co3NK+MZcQPtnOAyFCotNrL hutZfsEvK0P0MqItJ8E2BLKSSenVRV8qNu9hcGQ6Xvb5fSi0Bh8Mp1lEuDRm/d2V /6seaAf3jDePJCflkHHoqL6ii56EnERtNKlBA//FuCk31+S00Gm0igCTxal5K+Qc ejnxblEULsVYyBcZKwmNX2yuHKOe3Vo= -----END CERTIFICATE-----Generated at Sun May 11 04:12:12 2025 by rpki-client