$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/215790de-3a2a-34a6-a6fa-00638664821c.roa File: 215790de-3a2a-34a6-a6fa-00638664821c.roa (raw, json) Hash identifier: iNgbDye/uKxqefbWu3EEn2kmCyeGFgZv6k5MYVuHdeg= Subject key identifier: 18:F1:21:10:C7:ED:87:76:2E:36:FB:E8:B3:9F:7B:82:DC:A9:EF:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797C0F4852B2EF6C2EF4540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/215790de-3a2a-34a6-a6fa-00638664821c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 32381 IP address blocks: 70.32.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:c0:f4:85:2b:2e:f6:c2:ef:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=de1c620e-84ff-4342-999d-f9c3a723db4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:a0:d1:9f:b6:f2:ed:a6:d9:0f:bc:33:30: 64:ce:91:d9:91:d3:10:fd:29:09:bd:df:35:fb:ce: 34:6c:5e:24:42:0c:9a:a1:8d:4d:ea:c7:3d:7c:fe: e7:d8:5c:4b:9e:27:9f:da:f6:2a:79:a3:af:34:68: f7:11:ef:0d:11:19:4f:9e:54:1e:f8:e9:f7:c3:9c: c2:f8:92:36:77:7c:6a:15:57:8f:ba:9e:61:10:97: a5:bc:02:a4:97:51:25:da:43:14:94:e8:9a:65:60: 82:04:63:5d:c4:8c:2e:c4:db:f9:0c:3e:1c:48:11: 2f:0d:95:41:2d:0d:1f:70:33:58:3f:2d:0e:4d:67: a0:f6:9c:23:78:94:34:54:04:db:bd:64:5f:32:93: 8d:d6:80:5b:02:0c:72:c3:8c:d6:94:be:59:b5:5d: 33:cc:d8:69:59:6a:e6:20:bb:f5:c9:0e:87:5a:21: 69:9e:af:39:74:57:ff:6b:c7:58:6b:10:62:96:51: 71:76:17:ff:e9:6e:7d:3e:bb:28:b9:a9:4f:5f:e2: 24:60:13:79:87:93:d0:49:82:2a:ff:4a:aa:1d:57: 32:f7:29:55:90:c4:61:32:6d:21:0b:dd:e9:97:79: 06:9a:8f:02:e8:36:3e:76:61:73:a4:28:46:94:0e: cd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F1:21:10:C7:ED:87:76:2E:36:FB:E8:B3:9F:7B:82:DC:A9:EF:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/215790de-3a2a-34a6-a6fa-00638664821c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ef:e3:f3:ed:a0:ca:0c:2c:aa:d2:65:2f:d9:e3:90:79:2c: 3f:de:46:ae:f5:44:e5:df:fa:82:10:ff:7d:76:a3:37:57:d7: 22:6a:a4:96:a7:eb:3c:61:47:48:f8:54:87:c6:3c:6e:7e:cf: b5:ac:ed:9c:c3:6e:ac:1a:dd:9d:ad:96:24:9c:13:d3:9c:a6: 61:ec:76:5c:cf:2a:a6:c1:37:a7:8e:95:05:b0:d0:08:c8:88: 6b:84:09:03:b2:19:9a:ca:ec:da:59:b6:80:66:45:47:88:33: 05:9e:ce:e4:bd:79:2c:7e:a3:1b:c9:0a:ae:ad:02:60:50:4a: 86:a3:f7:b5:46:d4:34:df:ec:1c:89:5a:7b:6e:88:43:a9:13: 8e:a8:b7:84:2d:46:b1:3f:7c:f9:5e:ec:64:89:e2:e0:d1:ca: 3d:e2:e7:b4:df:47:55:36:f1:b6:65:5b:54:20:ab:55:ba:e0: ed:87:b4:1b:20:53:61:94:01:68:05:67:c1:05:69:43:ff:fe: c0:06:d3:eb:d6:c5:e0:9e:ca:56:68:be:f5:2e:67:eb:7b:28: 05:3b:6f:a2:8e:ca:0d:ac:a3:b7:32:6f:f7:91:42:b9:d7:b1: 55:32:41:e9:7b:3a:31:4c:5f:3d:18:41:36:84:a8:40:4b:8f: 4c:7b:2f:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl8D0hSsu9sLvRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGUxYzYyMGUtODRmZi00MzQyLTk5OWQtZjljM2E3MjNkYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBeg0Z+28u2m2Q+8MzBkzpHZkdMQ/SkJvd81 +840bF4kQgyaoY1N6sc9fP7n2FxLnief2vYqeaOvNGj3Ee8NERlPnlQe+On3w5zC +JI2d3xqFVePup5hEJelvAKkl1El2kMUlOiaZWCCBGNdxIwuxNv5DD4cSBEvDZVB LQ0fcDNYPy0OTWeg9pwjeJQ0VATbvWRfMpON1oBbAgxyw4zWlL5ZtV0zzNhpWWrm ILv1yQ6HWiFpnq85dFf/a8dYaxBillFxdhf/6W59PrsoualPX+IkYBN5h5PQSYIq /0qqHVcy9ylVkMRhMm0hC93pl3kGmo8C6DY+dmFzpChGlA7NUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjxIRDH7Yd2Ljb76LOfe4Lcqe+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjE1NzkwZGUtM2EyYS0z NGE2LWE2ZmEtMDA2Mzg2NjQ4MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfv4/PtoMoMLKrSZS/Z45B5LD/eRq71ROXf+oIQ/312ozdX1yJqpJan 6zxhR0j4VIfGPG5+z7Ws7ZzDbqwa3Z2tliScE9OcpmHsdlzPKqbBN6eOlQWw0AjI iGuECQOyGZrK7NpZtoBmRUeIMwWezuS9eSx+oxvJCq6tAmBQSoaj97VG1DTf7ByJ WntuiEOpE46ot4QtRrE/fPle7GSJ4uDRyj3i57TfR1U28bZlW1Qgq1W64O2HtBsg U2GUAWgFZ8EFaUP//sAG0+vWxeCeylZovvUuZ+t7KAU7b6KOyg2so7cyb/eRQrnX sVUyQel7OjFMXz0YQTaEqEBLj0x7LxI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:29:56 2025 by rpki-client