$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa File: 16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa (raw, json) Hash identifier: djS++3k/3TO20tEBIPO6SjdaNzNrqomvE4eKR+qrxUU= Subject key identifier: 7D:57:4D:1C:93:6C:D0:BE:56:B7:F2:9C:1F:FE:92:76:06:19:87:D1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBAA78AF3F318B52891020 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:aa:78:af:3f:31:8b:52:89:10:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=78d62f09-fc87-4462-b17b-6ff5c292ddd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:15:18:65:fb:b4:7f:58:04:68:f8:54:19:81: 52:34:ef:e4:05:25:29:b8:da:b2:3e:2a:fa:e4:b1: 5f:3d:80:7b:5d:47:43:3a:cc:4d:b8:c5:e4:89:11: bf:a9:3c:52:ff:d8:c3:ff:64:71:cc:60:3f:95:7d: 01:f2:dc:e9:2d:0e:12:08:b2:c0:a8:65:b1:9c:e3: 62:cc:7c:9e:de:2d:bf:62:c9:33:43:bf:05:8c:a5: 61:29:ad:94:31:4c:94:01:75:57:23:e8:ea:ae:f6: b3:d6:00:1f:53:a5:29:cf:b6:ea:5b:06:00:e8:ed: 43:e7:08:07:43:68:e9:01:cc:fe:c7:2c:b2:01:d3: c3:b6:26:cd:62:21:4f:ee:73:a4:94:f5:75:35:e4: 75:8b:17:fc:1f:9f:54:87:e0:7c:74:0d:b4:6f:f1: 81:8c:23:89:e3:91:7e:06:ea:6f:ba:4f:04:26:2b: 1c:06:b0:2b:e1:86:92:cf:51:63:bd:4e:1b:64:8f: ae:f7:b5:df:ae:04:6f:98:e8:00:5f:6b:81:ec:9a: 08:60:90:77:2e:d6:65:72:b0:ac:42:69:65:39:92: 08:98:57:29:e0:db:df:15:60:aa:98:16:f2:e8:c6: 90:d3:2c:39:68:49:a0:21:9a:96:17:65:35:ac:54: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:57:4D:1C:93:6C:D0:BE:56:B7:F2:9C:1F:FE:92:76:06:19:87:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ee:05:54:54:6d:11:09:ea:8a:55:11:6a:87:75:4b:f8:1c: 31:ee:3a:80:5a:96:8c:93:37:62:34:2b:1c:0c:a5:99:e9:0b: dd:bc:51:8b:09:43:80:87:d1:44:fb:1d:90:51:7b:1f:ed:bd: a0:3d:ba:18:6f:b2:2e:f2:03:2b:b8:89:f9:5a:7a:72:0e:39: 45:3c:1d:86:7d:af:4e:8e:5f:c4:19:02:d9:a6:4b:f7:a5:43: 60:f7:ca:72:c9:67:39:77:a8:53:ce:fd:04:57:83:1d:0c:2d: 75:4e:4c:79:b7:a6:69:63:86:94:c5:81:9a:30:82:b9:79:95: 32:85:d6:79:70:69:3b:70:4f:8d:59:90:66:34:46:1c:7a:d0: af:f0:70:08:a7:55:3d:42:b8:ef:5f:78:3d:81:1d:5e:8c:c3: 20:2d:2e:38:d8:5f:e2:83:3e:8f:e9:6a:12:7c:d8:43:b4:05: 7f:0f:b8:b3:e5:55:e6:5c:01:28:1a:92:c0:a0:5e:f7:fe:83: 24:bc:65:d7:79:cb:c9:9d:6a:a4:ec:2b:44:ac:fa:f6:80:1e: 7d:ea:5d:a3:f0:e4:f6:19:e3:97:ca:80:fd:37:1e:37:b6:c4: dc:5d:97:55:8f:19:bb:cb:30:3b:f9:43:9a:f2:a4:1b:04:a4: 28:5c:4d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26p4rz8xi1KJECAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NzhkNjJmMDktZmM4Ny00NDYyLWIxN2ItNmZmNWMyOTJkZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBUYZfu0f1gEaPhUGYFSNO/kBSUpuNqyPir6 5LFfPYB7XUdDOsxNuMXkiRG/qTxS/9jD/2RxzGA/lX0B8tzpLQ4SCLLAqGWxnONi zHye3i2/YskzQ78FjKVhKa2UMUyUAXVXI+jqrvaz1gAfU6Upz7bqWwYA6O1D5wgH Q2jpAcz+xyyyAdPDtibNYiFP7nOklPV1NeR1ixf8H59Uh+B8dA20b/GBjCOJ45F+ Bupvuk8EJiscBrAr4YaSz1FjvU4bZI+u97XfrgRvmOgAX2uB7JoIYJB3LtZlcrCs QmllOZIImFcp4NvfFWCqmBby6MaQ0yw5aEmgIZqWF2U1rFSHQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1XTRyTbNC+VrfynB/+knYGGYfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTZlMWFjODEtODBhOS0z ZGVlLTliZmEtYThhMGQzMjg1MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELuBVRUbREJ6opVEWqHdUv4HDHuOoBaloyTN2I0KxwMpZnpC928UYsJ Q4CH0UT7HZBRex/tvaA9uhhvsi7yAyu4iflaenIOOUU8HYZ9r06OX8QZAtmmS/el Q2D3ynLJZzl3qFPO/QRXgx0MLXVOTHm3pmljhpTFgZowgrl5lTKF1nlwaTtwT41Z kGY0Rhx60K/wcAinVT1CuO9feD2BHV6MwyAtLjjYX+KDPo/pahJ82EO0BX8PuLPl VeZcASgaksCgXvf+gyS8Zdd5y8mdaqTsK0Ss+vaAHn3qXaPw5PYZ45fKgP03Hje2 xNxdl1WPGbvLMDv5Q5rypBsEpChcTdA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:52:08 2025 by rpki-client