$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa File: 026b8b08-d03f-336f-8c9f-25cac406fa0b.roa (raw, json) Hash identifier: jbPSHIaKWSS7/5ESVKXPNYUco4vxBF0QnHmxvOlAd2Y= Subject key identifier: 81:ED:D8:7F:BE:9C:CB:CA:C8:2F:8A:21:A6:31:DC:52:CB:CF:81:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBF816DB806E7D6F81A1A8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 70.32.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f8:16:db:80:6e:7d:6f:81:a1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=97ea2990-7fa9-4b2f-8c74-06d68762eae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9a:49:6c:b9:7b:b6:b3:35:88:dd:c5:73:29: fc:06:2c:15:db:6a:8a:79:c6:9d:7c:59:77:78:c0: 32:19:18:e4:3d:c2:9f:05:3f:46:b7:b3:9c:11:3e: 16:87:61:bb:b8:02:78:90:ee:1c:1a:e0:43:9e:32: d3:85:57:af:d2:f7:9f:b1:8c:0a:55:f1:21:89:32: 05:b2:2f:62:77:6a:a7:ec:17:9d:69:58:84:50:e1: f8:3d:b6:98:76:27:32:7e:58:cd:53:ac:11:a5:8d: a7:87:ed:1a:ff:6d:27:8f:06:df:53:a6:e4:e7:31: 3d:17:fd:58:3b:49:52:da:7e:fe:2a:84:66:c4:bc: 2c:d2:c4:1e:4c:e2:8c:1e:51:b8:a0:d2:3a:25:4e: 9c:bb:e8:48:bf:ef:cd:fe:5a:56:a0:1d:ed:46:7a: e0:22:9c:54:a3:32:bc:0e:ea:bf:85:55:af:9f:85: 8d:50:a0:24:2b:8a:75:41:89:06:82:df:72:80:b5: 75:e4:3f:e8:d4:4f:21:25:1e:12:1e:33:db:84:23: 96:e9:f1:01:7b:36:3a:76:e3:66:dd:8b:fd:a7:b7: ec:c9:16:82:d2:67:75:26:a8:ed:57:3d:91:f5:11: d0:85:ab:af:bd:d6:f4:dd:e9:d7:72:a9:cb:01:b5: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:ED:D8:7F:BE:9C:CB:CA:C8:2F:8A:21:A6:31:DC:52:CB:CF:81:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e2:fb:82:27:18:28:30:5c:95:90:dc:a7:1c:4a:d3:6e:f2: d3:ef:6f:14:75:b2:7c:f0:45:0b:59:5f:1f:b0:3e:cd:32:d0: e5:af:0d:89:c3:9b:93:67:fc:d2:89:28:5c:e2:7d:8a:f7:fd: 29:bf:62:58:3f:4e:bc:79:bf:2e:9c:eb:6b:49:57:08:5a:0a: c5:2b:57:c7:10:ff:63:00:cd:5a:71:63:7c:b3:3a:06:d7:82: 3e:d7:fb:39:12:12:ad:5c:ae:95:27:30:30:b2:cd:da:57:94: 1c:1c:b3:e9:32:72:39:40:aa:51:ea:84:f6:e6:bc:8f:54:5c: e0:e5:24:02:49:ba:88:ca:5d:ba:fe:ea:a6:a9:67:dd:0e:2a: 26:02:47:35:64:2b:8d:41:cc:d3:75:df:c2:ca:65:62:f4:13: 94:8a:e8:34:54:99:85:03:1f:e2:3e:df:13:0b:53:ca:b7:c1: e4:13:07:3d:78:08:ee:19:cd:08:57:09:bb:f4:8a:af:a6:f1: 2f:ce:63:30:13:b2:cc:21:04:fc:72:c9:a6:50:00:a4:86:9e: 24:76:70:51:53:92:5e:09:c1:99:72:0f:54:26:f7:8d:01:19: c8:4d:55:ff:35:40:bf:c7:6c:5a:84:31:4c:00:37:23:cf:07: a9:19:49:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/gW24BufW+BoagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OTdlYTI5OTAtN2ZhOS00YjJmLThjNzQtMDZkNjg3NjJlYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5pJbLl7trM1iN3Fcyn8BiwV22qKecadfFl3 eMAyGRjkPcKfBT9Gt7OcET4Wh2G7uAJ4kO4cGuBDnjLThVev0vefsYwKVfEhiTIF si9id2qn7BedaViEUOH4PbaYdicyfljNU6wRpY2nh+0a/20njwbfU6bk5zE9F/1Y O0lS2n7+KoRmxLws0sQeTOKMHlG4oNI6JU6cu+hIv+/N/lpWoB3tRnrgIpxUozK8 Duq/hVWvn4WNUKAkK4p1QYkGgt9ygLV15D/o1E8hJR4SHjPbhCOW6fEBezY6duNm 3Yv9p7fsyRaC0md1JqjtVz2R9RHQhauvvdb03enXcqnLAbUhBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHt2H++nMvKyC+KIaYx3FLLz4G1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI2YjhiMDgtZDAzZi0z MzZmLThjOWYtMjVjYWM0MDZmYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzi+4InGCgwXJWQ3KccStNu8tPvbxR1snzwRQtZXx+wPs0y0OWvDYnD m5Nn/NKJKFzifYr3/Sm/Ylg/Trx5vy6c62tJVwhaCsUrV8cQ/2MAzVpxY3yzOgbX gj7X+zkSEq1crpUnMDCyzdpXlBwcs+kycjlAqlHqhPbmvI9UXODlJAJJuojKXbr+ 6qapZ90OKiYCRzVkK41BzNN138LKZWL0E5SK6DRUmYUDH+I+3xMLU8q3weQTBz14 CO4ZzQhXCbv0iq+m8S/OYzATsswhBPxyyaZQAKSGniR2cFFTkl4JwZlyD1Qm940B GchNVf81QL/HbFqEMUwANyPPB6kZSak= -----END CERTIFICATE-----Generated at Mon Aug 4 14:14:11 2025 by rpki-client