$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa File: 435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa (raw, json) Hash identifier: MkI7fTRH8fd5LkrtXi67kK33IX4Mu+HbLytuPvWGJAE= Subject key identifier: 23:CF:42:24:2E:AC:03:72:36:81:7D:44:2C:58:5C:1C:AC:B7:17:37 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584B68FC9D498349A1DD49DCC780 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 5645 IP address blocks: 209.161.192.0/18 maxlen: 18 209.161.192.0/20 maxlen: 20 209.161.208.0/20 maxlen: 20 209.161.224.0/20 maxlen: 20 209.161.240.0/21 maxlen: 21 209.161.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9d:49:83:49:a1:dd:49:dc:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=de9cac11-bbea-4a0f-a072-d36fb0781def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:34:df:1d:ea:f9:18:b1:71:bc:5e:c1:e5: 0c:03:99:14:fa:49:19:44:29:ce:f0:5b:0c:22:f0: 2d:68:3e:96:b3:20:88:7e:0a:72:31:5d:d1:3d:d8: 03:06:5c:e7:d1:4c:00:c5:9c:ff:54:5a:7f:a9:17: f0:1d:75:f5:fd:23:d4:62:70:54:f1:07:84:02:55: 39:8f:36:9a:08:2a:ec:c7:db:78:92:86:4a:21:cd: a4:c7:0c:e7:8f:46:42:48:bc:ff:aa:8e:87:c6:74: 39:51:71:99:77:9c:8b:7a:17:26:93:16:c8:8d:74: c3:f6:47:33:1c:ff:94:1c:40:67:68:f9:af:ef:f6: 57:af:e9:85:00:20:94:d9:4f:cc:80:73:95:5f:21: 1e:63:c6:c8:77:6b:7e:17:1c:05:1c:1a:d5:c8:e4: d9:32:dd:6f:3b:db:e9:2c:53:7c:67:9b:17:ba:02: 71:ef:8d:38:34:0c:6f:a0:a3:96:f3:4e:9c:b3:5e: fc:9c:76:72:9c:8e:cb:d0:37:ff:41:c0:36:f3:dc: a4:df:3b:71:ec:80:ea:2b:8d:af:7d:74:82:04:15: 1f:3b:53:18:97:a2:3d:2d:d1:26:79:59:8d:13:61: 38:24:21:11:da:73:3b:3f:6e:b6:ee:7e:b9:51:b5: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:42:24:2E:AC:03:72:36:81:7D:44:2C:58:5C:1C:AC:B7:17:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/435ee4c7-987c-3e07-8589-0d39b3c8ebd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 209.161.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:47:3a:90:40:7f:bd:ae:15:78:a3:5b:e8:4d:13:a0:b4:76: 4f:9c:2a:d0:b4:aa:98:97:a2:85:b7:0b:4f:4e:45:03:4d:3d: dd:1b:03:1c:83:59:9a:c9:73:43:06:9a:cc:54:24:6d:fa:1a: 1b:0d:a1:30:c3:17:8f:0e:75:99:2f:91:b9:a3:9a:b7:9c:89: a2:51:6a:a0:e1:50:d1:11:a9:44:dc:3e:98:b8:19:a5:aa:ca: b5:00:99:c1:81:62:27:ce:1c:39:7c:2d:19:2d:bc:c4:7b:57: 64:8a:6b:51:af:4f:64:17:a7:7c:b1:c6:45:26:43:8c:a3:2f: aa:8d:b0:dd:bc:a1:59:f8:1a:15:4f:97:dc:e2:76:38:39:93: 5f:82:42:b2:67:ee:c5:61:24:20:14:e9:54:cc:0b:d6:e2:0c: dc:3e:01:88:04:cc:32:b8:4d:6b:13:9e:d4:61:47:f6:05:63: ec:85:9a:83:56:61:68:86:d8:8e:1d:e8:b0:a6:bf:a9:26:f5: 73:6b:c1:9b:83:0f:95:b7:cb:89:c5:36:44:53:e2:d8:b5:a2: 61:1e:30:0c:41:6d:4f:bb:59:85:23:45:39:9e:00:62:a5:31: f9:77:59:d1:2e:09:03:07:37:51:75:ab:e5:1b:e2:01:f7:98: be:8d:23:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/J1Jg0mh3Uncx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZGU5Y2FjMTEtYmJlYS00YTBmLWEwNzItZDM2ZmIwNzgxZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh403x3q+RixcbxeweUMA5kU+kkZRCnO8FsM IvAtaD6WsyCIfgpyMV3RPdgDBlzn0UwAxZz/VFp/qRfwHXX1/SPUYnBU8QeEAlU5 jzaaCCrsx9t4koZKIc2kxwznj0ZCSLz/qo6HxnQ5UXGZd5yLehcmkxbIjXTD9kcz HP+UHEBnaPmv7/ZXr+mFACCU2U/MgHOVXyEeY8bId2t+FxwFHBrVyOTZMt1vO9vp LFN8Z5sXugJx7404NAxvoKOW806cs178nHZynI7L0Df/QcA289yk3ztx7IDqK42v fXSCBBUfO1MYl6I9LdEmeVmNE2E4JCER2nM7P2627n65UbWFQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPPQiQurANyNoF9RCxYXBystxc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNDM1ZWU0YzctOTg3Yy0z ZTA3LTg1ODktMGQzOWIzYzhlYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0aHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5HOpBAf72uFXijW+hNE6C0dk+cKtC0qpiXooW3C09ORQNNPd0bAxyD WZrJc0MGmsxUJG36GhsNoTDDF48OdZkvkbmjmreciaJRaqDhUNERqUTcPpi4GaWq yrUAmcGBYifOHDl8LRktvMR7V2SKa1GvT2QXp3yxxkUmQ4yjL6qNsN28oVn4GhVP l9zidjg5k1+CQrJn7sVhJCAU6VTMC9biDNw+AYgEzDK4TWsTntRhR/YFY+yFmoNW YWiG2I4d6LCmv6km9XNrwZuDD5W3y4nFNkRT4ti1omEeMAxBbU+7WYUjRTmeAGKl Mfl3WdEuCQMHN1F1q+Ub4gH3mL6NIzw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:57 2025 by rpki-client