$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/215790de-3a2a-34a6-a6fa-00638664821c.roa File: 215790de-3a2a-34a6-a6fa-00638664821c.roa (raw, json) Hash identifier: M1LME3cZNsyuYgnim9iPg8TyDnw4J9i3cWO5ORCcSQw= Subject key identifier: 70:19:DD:24:AE:07:55:15:B8:FD:37:52:99:11:A5:EE:CF:0B:A6:81 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBDC8209D997384B130300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/215790de-3a2a-34a6-a6fa-00638664821c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 32381 IP address blocks: 70.32.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:dc:82:09:d9:97:38:4b:13:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=f54dec45-0738-4181-b766-60f81b69bfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:5e:96:c0:21:b1:11:69:df:c4:15:eb:56: f5:bd:12:8e:ca:a8:00:4c:a4:71:42:39:06:3c:33: 60:29:6f:b4:a3:2d:94:68:44:69:f9:bb:2d:b3:39: f6:53:fd:f6:74:89:bc:0f:bd:fe:69:59:07:3b:c2: 91:07:ba:2e:9d:03:0e:f2:63:d3:e8:75:60:18:70: 5f:df:66:46:69:a3:90:fa:32:53:32:78:4b:69:a7: 3c:c7:00:a4:40:cf:f8:68:c4:3b:48:d0:60:24:c4: ab:47:8c:da:63:0f:25:86:29:1c:8e:ad:c7:b3:dc: 38:07:26:e6:64:2d:e7:11:07:fc:c3:b9:49:ad:e6: 0d:89:11:38:77:3c:54:da:98:04:0b:c6:ac:a8:55: ec:2f:42:70:d5:d9:57:b6:e4:0f:49:d3:d0:f0:30: b0:99:66:ff:88:25:57:43:54:b7:2e:e7:7d:ca:4e: cf:de:75:1f:59:ae:31:9d:7a:2e:62:db:24:9d:53: d3:e1:05:fc:16:d1:8b:d7:f7:8d:4a:1a:af:8e:46: ee:21:af:5f:d4:7f:cb:d7:31:7a:6f:2c:25:a2:7c: d0:19:57:ef:85:fc:53:04:e6:88:ef:6a:2b:56:48: ea:2a:05:34:6e:64:03:8f:2b:1d:f7:04:a8:bf:dc: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:19:DD:24:AE:07:55:15:B8:FD:37:52:99:11:A5:EE:CF:0B:A6:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/215790de-3a2a-34a6-a6fa-00638664821c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e8:1a:94:42:d8:7e:fe:a2:37:4b:2f:ce:cc:dd:80:39:cc: 13:5e:d5:02:16:49:68:7d:95:3b:cb:f0:e2:f6:d9:8e:15:30: 65:09:ff:ca:f8:f6:a8:9a:35:90:fc:ba:9d:f8:22:2c:ba:c3: de:7e:b5:76:34:fe:8b:c9:43:81:69:3c:d9:58:45:54:97:b2: dc:6f:49:98:28:5a:37:8b:d2:d1:f0:f8:06:45:8f:35:20:f9: 96:83:56:14:8b:08:1b:9a:29:89:f3:08:62:a2:5d:41:18:60: 34:7d:f0:40:19:fc:0d:8d:be:2c:37:eb:76:27:39:1f:1d:e8: 9f:af:5f:50:9c:83:7f:73:6d:c7:7c:67:a0:58:5f:2f:0e:a7: 0e:9e:d7:37:a5:35:c1:a7:a2:82:a8:49:91:44:19:a7:b0:00: ab:44:01:6a:7d:c5:f0:d4:ea:75:f0:ed:a3:d2:6e:64:ce:87: 6c:b7:71:d9:3b:ee:f4:b1:96:64:e3:29:94:11:0c:aa:0c:87: a3:b7:64:b4:10:28:5a:cf:21:18:52:3d:ac:8b:73:d8:23:a3: 38:85:9f:56:13:d5:e5:fc:23:58:79:10:cc:7c:b6:4b:24:5d: 2a:15:42:b6:76:7b:2e:9b:64:8c:37:46:52:88:1a:19:6d:8c: b4:11:f6:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29yCCdmXOEsTAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjU0ZGVjNDUtMDczOC00MTgxLWI3NjYtNjBmODFiNjliZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZBelsAhsRFp38QV61b1vRKOyqgATKRxQjkG PDNgKW+0oy2UaERp+bstszn2U/32dIm8D73+aVkHO8KRB7ounQMO8mPT6HVgGHBf 32ZGaaOQ+jJTMnhLaac8xwCkQM/4aMQ7SNBgJMSrR4zaYw8lhikcjq3Hs9w4Bybm ZC3nEQf8w7lJreYNiRE4dzxU2pgEC8asqFXsL0Jw1dlXtuQPSdPQ8DCwmWb/iCVX Q1S3Lud9yk7P3nUfWa4xnXouYtsknVPT4QX8FtGL1/eNShqvjkbuIa9f1H/L1zF6 bywlonzQGVfvhfxTBOaI72orVkjqKgU0bmQDjysd9wSov9yeLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAZ3SSuB1UVuP03UpkRpe7PC6aBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjE1NzkwZGUtM2EyYS0z NGE2LWE2ZmEtMDA2Mzg2NjQ4MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHroGpRC2H7+ojdLL87M3YA5zBNe1QIWSWh9lTvL8OL22Y4VMGUJ/8r4 9qiaNZD8up34Iiy6w95+tXY0/ovJQ4FpPNlYRVSXstxvSZgoWjeL0tHw+AZFjzUg +ZaDVhSLCBuaKYnzCGKiXUEYYDR98EAZ/A2Nviw363YnOR8d6J+vX1Ccg39zbcd8 Z6BYXy8Opw6e1zelNcGnooKoSZFEGaewAKtEAWp9xfDU6nXw7aPSbmTOh2y3cdk7 7vSxlmTjKZQRDKoMh6O3ZLQQKFrPIRhSPayLc9gjoziFn1YT1eX8I1h5EMx8tksk XSoVQrZ2ey6bZIw3RlKIGhltjLQR9lI= -----END CERTIFICATE-----Generated at Mon Aug 4 15:41:51 2025 by rpki-client