$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa File: 089de854-3bd0-3daa-8427-ce457804664f.roa (raw, json) Hash identifier: G2c8NTZnwUeIXYqDaGaR4bGDvtddv+L1F7kGkIR1dok= Subject key identifier: E9:9E:FE:1A:BB:E4:34:AC:C4:D9:39:3C:32:B9:53:86:38:56:97:8C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB9EDBD7EC319ED2102600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9e:db:d7:ec:31:9e:d2:10:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=4e7cf4b9-b1be-4130-ad14-4558c080283e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:ce:bb:38:2b:03:75:05:c4:21:83:4b:76: 29:06:29:77:7b:90:85:ee:dd:c8:b8:dc:07:d8:da: a1:b1:a5:58:92:ec:79:9c:60:c9:b1:11:c6:d9:53: 52:8a:c9:c4:40:1c:d7:00:e0:6f:2f:a6:f5:76:7f: f1:78:fc:0c:a2:26:93:be:74:d6:4e:08:6e:72:d0: 7f:e8:0f:80:3b:ba:02:64:af:83:fa:e0:59:cf:e0: d5:ea:2f:8d:dc:ea:8f:b5:7b:39:95:10:d3:a8:c5: cf:b3:53:15:6f:15:36:53:fb:8d:ea:b1:0d:c7:2e: fe:0a:cf:46:7b:b0:ee:0c:ff:5d:8d:52:24:f9:64: e9:07:c7:ec:b4:0a:71:10:65:ff:19:c7:e8:53:8a: 32:55:ee:b7:b5:8b:fa:13:b5:f2:ec:b3:90:41:92: b5:83:a2:88:d5:9d:18:ce:1b:2c:b5:b8:8f:5d:38: d9:a4:51:b0:85:3e:22:8e:70:fa:b6:a9:d2:d7:d0: 02:ce:fe:4f:d7:02:fe:9a:f2:27:f5:af:c5:a0:f0: 95:60:94:fe:dd:04:5d:d4:4f:a9:ae:45:27:e9:22: 43:1f:56:54:53:11:74:8e:6a:04:f3:96:2e:3f:62: aa:46:fe:ae:f5:44:c2:8f:90:6f:c3:af:1e:85:29: 0a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9E:FE:1A:BB:E4:34:AC:C4:D9:39:3C:32:B9:53:86:38:56:97:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:97:36:5e:f0:47:94:e8:d9:34:11:9c:c9:8f:e7:22:54:d1: b0:b9:93:a0:b5:72:a9:02:c1:13:51:34:e2:38:42:3d:c3:dd: 5f:c7:0b:a3:22:fa:6e:16:b7:fb:22:23:b0:5b:64:47:60:cc: 0a:9d:2b:3c:1a:9e:2c:b1:46:55:9f:05:86:48:68:39:8a:ce: c0:e8:7d:16:51:65:8d:bf:3e:a1:16:99:23:1e:0a:0a:ae:72: c5:64:e7:11:a0:8a:3c:5a:d1:64:01:1f:bc:db:f0:c4:a5:5b: c4:b4:8f:ec:e4:09:bb:e0:83:77:bb:fc:5c:2b:b5:49:22:43: 8b:98:9f:23:d5:12:2e:33:c7:22:3f:e8:3a:b0:b3:93:ce:3b: ab:10:8c:37:98:a2:93:f9:8d:21:c9:d1:0e:a9:58:d2:5c:41: 87:f4:c1:94:f4:50:df:12:15:69:31:56:21:c8:04:18:38:09: d9:30:9d:4d:2e:62:01:41:4f:7d:1c:52:69:62:10:6e:54:39: 3f:37:8e:66:98:60:89:d9:04:b5:e2:90:28:2d:1b:f9:e7:81: 9e:c3:79:3a:4b:7c:5f:69:ba:dd:5c:01:44:c4:fb:07:8b:4a: c6:af:f4:ab:88:a8:63:6b:e5:ef:2d:0a:53:54:e0:72:77:1d: 88:bf:71:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG257b1+wxntIQJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NGU3Y2Y0YjktYjFiZS00MTMwLWFkMTQtNDU1OGMwODAyODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGvOuzgrA3UFxCGDS3YpBil3e5CF7t3IuNwH 2NqhsaVYkux5nGDJsRHG2VNSisnEQBzXAOBvL6b1dn/xePwMoiaTvnTWTghuctB/ 6A+AO7oCZK+D+uBZz+DV6i+N3OqPtXs5lRDTqMXPs1MVbxU2U/uN6rENxy7+Cs9G e7DuDP9djVIk+WTpB8fstApxEGX/GcfoU4oyVe63tYv6E7Xy7LOQQZK1g6KI1Z0Y zhsstbiPXTjZpFGwhT4ijnD6tqnS19ACzv5P1wL+mvIn9a/FoPCVYJT+3QRd1E+p rkUn6SJDH1ZUUxF0jmoE85YuP2KqRv6u9UTCj5Bvw68ehSkKhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOme/hq75DSsxNk5PDK5U4Y4VpeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDg5ZGU4NTQtM2JkMC0z ZGFhLTg0MjctY2U0NTc4MDQ2NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCXNl7wR5To2TQRnMmP5yJU0bC5k6C1cqkCwRNRNOI4Qj3D3V/HC6Mi +m4Wt/siI7BbZEdgzAqdKzwaniyxRlWfBYZIaDmKzsDofRZRZY2/PqEWmSMeCgqu csVk5xGgijxa0WQBH7zb8MSlW8S0j+zkCbvgg3e7/FwrtUkiQ4uYnyPVEi4zxyI/ 6Dqws5POO6sQjDeYopP5jSHJ0Q6pWNJcQYf0wZT0UN8SFWkxViHIBBg4CdkwnU0u YgFBT30cUmliEG5UOT83jmaYYInZBLXikCgtG/nngZ7DeTpLfF9put1cAUTE+weL Ssav9KuIqGNr5e8tClNU4HJ3HYi/cX0= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:28 2025 by rpki-client