$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa File: 50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa (raw, json) Hash identifier: 0YloQ+Ep6QJVRIks7onwy+hI+gZGujquVLrGaDsZ2cs= Subject key identifier: CC:4A:3F:86:6E:EA:D2:87:F9:0D:2F:F4:AB:8D:46:CF:D6:6F:33:CF Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584BB45D1C5E4F6FC3768E4AADC0 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 32181 IP address blocks: 70.32.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:1c:5e:4f:6f:c3:76:8e:4a:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=8cd98127-a1e6-45dc-9b5c-3dfd2dcfa70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8d:3b:ca:8e:03:e7:a9:26:40:84:40:4c:23: f8:cb:be:fe:3e:b7:25:2f:b8:bd:05:ca:5b:de:88: 2a:10:2e:e3:71:61:48:29:41:7f:01:51:7e:46:14: ee:dd:7b:42:63:e0:f1:ba:fe:e4:7a:8d:2d:2d:4d: 63:e0:3a:d4:90:6d:a9:f5:df:55:09:9f:a7:e4:2b: f6:2c:07:6c:30:3e:0a:1f:6c:4e:15:31:34:2f:ea: 45:42:78:1e:cd:91:e3:56:12:8a:bd:e4:a2:6f:1a: 66:f5:01:db:25:f5:33:cc:ba:dc:db:f8:db:81:b3: 3e:b8:33:d1:44:9d:ca:1e:c6:9b:c1:0a:67:2b:38: 62:96:ae:6b:f9:b5:88:00:c2:ce:45:e9:17:eb:ba: 82:86:00:7d:53:71:81:4d:c2:4b:e4:5d:ac:08:22: c1:29:d3:dc:6b:26:8d:60:18:f8:64:55:0a:ff:aa: da:26:db:25:fc:6f:76:cb:1e:e8:36:b2:50:de:5d: 98:ac:46:2b:82:41:4f:ad:77:ed:c8:c2:45:cb:76: 13:b6:24:7e:72:4b:09:5c:64:49:29:de:b1:ff:35: 70:94:e2:b0:2b:e8:85:b0:c8:36:86:97:b4:20:c3: 7e:b5:53:8d:25:d4:0f:38:3e:2e:3f:96:b2:b6:b4: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4A:3F:86:6E:EA:D2:87:F9:0D:2F:F4:AB:8D:46:CF:D6:6F:33:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 70.32.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e3:54:54:be:43:fc:49:e1:9b:7e:5c:80:61:7f:0c:1d:57: be:5b:35:e7:ac:3f:58:15:b9:8f:e3:bc:01:1b:39:d8:54:a9: 66:93:30:5a:83:f6:75:cd:bc:76:37:2a:d9:83:d2:d0:5a:43: a0:03:86:b6:3e:cc:74:60:5e:e3:96:f1:e7:64:a0:d7:46:40: 90:c3:6f:18:14:c4:56:4a:39:14:d4:c0:c6:8d:d5:6e:14:52: 2a:3a:28:93:81:f6:32:54:7a:8d:89:60:55:c7:12:a6:9a:2f: df:91:e3:2d:bb:38:69:d0:f9:83:86:e5:e3:5c:49:64:4a:dc: 53:02:22:46:2f:a7:d7:43:9e:14:58:58:17:7c:4a:c1:79:3e: 50:08:78:de:78:7f:fe:46:a2:bb:60:36:e7:fb:d9:93:f4:93: 80:ac:9e:1f:da:e9:0b:58:d3:e0:1d:bc:d7:b9:15:77:e5:70: 94:26:1f:7d:69:db:df:40:11:fa:cc:1e:9b:18:e4:24:90:71: 33:22:9c:6a:cf:37:8d:a2:8c:bd:c7:97:da:bb:95:32:f7:1d: 1c:e5:90:55:14:f0:d0:7c:17:3f:32:8d:fa:05:e0:0d:79:46: 2d:75:f6:2f:8d:a8:72:c7:f3:42:ff:28:13:82:4d:25:37:c3: e6:bd:80:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRxeT2/Ddo5KrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OGNkOTgxMjctYTFlNi00NWRjLTliNWMtM2RmZDJkY2ZhNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI07yo4D56kmQIRATCP4y77+PrclL7i9Bcpb 3ogqEC7jcWFIKUF/AVF+RhTu3XtCY+Dxuv7keo0tLU1j4DrUkG2p9d9VCZ+n5Cv2 LAdsMD4KH2xOFTE0L+pFQngezZHjVhKKveSibxpm9QHbJfUzzLrc2/jbgbM+uDPR RJ3KHsabwQpnKzhilq5r+bWIAMLORekX67qChgB9U3GBTcJL5F2sCCLBKdPcayaN YBj4ZFUK/6raJtsl/G92yx7oNrJQ3l2YrEYrgkFPrXftyMJFy3YTtiR+cksJXGRJ Kd6x/zVwlOKwK+iFsMg2hpe0IMN+tVONJdQPOD4uP5aytrTTjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxKP4Zu6tKH+Q0v9KuNRs/WbzPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNTA3ODZhMTYtMDA3My0z ZjRkLWIxZTYtZGYxZTVlYjE2ZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATjVFS+Q/xJ4Zt+XIBhfwwdV75bNeesP1gVuY/jvAEbOdhUqWaTMFqD 9nXNvHY3KtmD0tBaQ6ADhrY+zHRgXuOW8edkoNdGQJDDbxgUxFZKORTUwMaN1W4U Uio6KJOB9jJUeo2JYFXHEqaaL9+R4y27OGnQ+YOG5eNcSWRK3FMCIkYvp9dDnhRY WBd8SsF5PlAIeN54f/5GortgNuf72ZP0k4Csnh/a6QtY0+AdvNe5FXflcJQmH31p 299AEfrMHpsY5CSQcTMinGrPN42ijL3Hl9q7lTL3HRzlkFUU8NB8Fz8yjfoF4A15 Ri119i+NqHLH80L/KBOCTSU3w+a9gCU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:40:05 2025 by rpki-client