$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa File: 2917b113-9e5f-3763-84e3-6da8775eeb3e.roa (raw, json) Hash identifier: MA7RPA2wiTRO9ClwVSAhQdfDNP4sPxGpg8gbp8V495E= Subject key identifier: 23:17:A4:C1:83:89:95:94:1F:6A:6F:D1:99:63:5C:2A:CB:40:4E:FE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBA7D6DBF623A824674B20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a7:d6:db:f6:23:a8:24:67:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=6d9f941a-a878-49ca-bef2-3da6820de254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:37:17:3a:2b:06:10:d4:95:49:34:69:1a: b6:e0:48:0d:a4:bd:5e:ec:37:ed:9d:29:04:a2:f1: 37:d3:42:66:c8:f0:25:dc:6a:ac:b5:3f:22:fc:d5: 82:b9:e0:8a:61:c5:df:05:b5:0e:96:66:9b:e0:7c: aa:71:ae:53:9b:e8:70:bc:a8:d3:29:d1:cd:83:35: 16:df:fc:1c:11:84:90:45:76:72:17:7d:9e:65:dd: 28:40:ed:d0:13:88:dd:2e:60:be:e4:1e:17:a9:9b: 4b:c3:c4:7d:c0:91:5c:a4:fc:a6:83:35:1a:15:cf: e2:d2:fa:d3:75:86:eb:92:4b:f3:13:e7:63:75:e4: e4:e2:ca:b9:e7:b6:e2:c2:d6:32:a2:7a:1a:58:39: cc:a2:50:f1:d7:1d:5c:5e:61:cf:9f:6e:b7:3d:46: 3f:96:1b:09:45:12:9d:c3:6a:62:3a:e1:0b:1c:92: ed:00:d8:d9:bb:06:94:2f:6a:e7:ff:51:ce:75:c3: 10:1e:4f:4d:eb:8f:57:c0:23:14:14:ff:0c:73:4d: a6:51:ea:08:10:96:a9:2e:b4:92:0c:4c:99:99:d1: eb:65:09:91:68:1c:e8:19:30:37:67:30:57:9c:38: c0:05:c2:bb:1f:aa:30:0b:7a:2a:3c:e4:02:bb:eb: 04:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:17:A4:C1:83:89:95:94:1F:6A:6F:D1:99:63:5C:2A:CB:40:4E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:92:2c:bd:b3:35:85:17:ee:72:c6:54:c9:31:b4:1c:88:2f: cd:70:2e:a1:63:4b:b7:bf:1b:11:89:d5:01:3e:19:05:0b:3d: ec:d5:6a:11:fb:8b:c7:f6:11:06:80:b7:fd:06:dc:65:24:58: b5:2f:d6:05:6a:4b:0b:cd:3b:d3:e6:ac:72:e5:e6:f1:61:62: 48:2e:65:61:d1:62:c7:ef:43:6c:3f:d4:1a:a1:8c:67:5a:8a: dd:86:05:74:61:88:4a:42:ee:60:66:d1:15:b0:46:00:65:1e: 4b:fc:8c:f0:07:23:a2:87:e7:f2:24:f4:73:38:c4:61:d7:6b: d0:af:9d:a6:43:06:7f:68:02:8e:da:5c:a4:f3:fb:fc:32:ef: 3f:2b:1e:c5:f9:f8:02:04:f7:87:1c:5f:78:01:ee:09:db:1b: 3c:9e:6d:53:00:90:d5:2b:55:81:c1:85:90:63:80:74:d8:42: ee:de:f8:e7:43:c3:0c:36:a5:06:2f:04:20:c6:44:d5:8a:24: 07:65:f6:b0:33:29:fd:c3:c8:6b:13:87:ba:fb:89:2c:ef:41: 07:92:06:3d:b6:e6:e0:32:db:5a:67:70:20:3a:fe:22:4d:80: 17:52:97:62:9d:a2:45:b8:84:e8:a8:d0:59:4d:51:ab:d8:95: 46:a3:fe:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26fW2/YjqCRnSyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NmQ5Zjk0MWEtYTg3OC00OWNhLWJlZjItM2RhNjgyMGRlMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKo3FzorBhDUlUk0aRq24EgNpL1e7DftnSkE ovE300JmyPAl3GqstT8i/NWCueCKYcXfBbUOlmab4Hyqca5Tm+hwvKjTKdHNgzUW 3/wcEYSQRXZyF32eZd0oQO3QE4jdLmC+5B4XqZtLw8R9wJFcpPymgzUaFc/i0vrT dYbrkkvzE+djdeTk4sq557biwtYyonoaWDnMolDx1x1cXmHPn263PUY/lhsJRRKd w2piOuELHJLtANjZuwaUL2rn/1HOdcMQHk9N649XwCMUFP8Mc02mUeoIEJapLrSS DEyZmdHrZQmRaBzoGTA3ZzBXnDjABcK7H6owC3oqPOQCu+sE2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMXpMGDiZWUH2pv0ZljXCrLQE7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjkxN2IxMTMtOWU1Zi0z NzYzLTg0ZTMtNmRhODc3NWVlYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCSLL2zNYUX7nLGVMkxtByIL81wLqFjS7e/GxGJ1QE+GQULPezVahH7 i8f2EQaAt/0G3GUkWLUv1gVqSwvNO9PmrHLl5vFhYkguZWHRYsfvQ2w/1BqhjGda it2GBXRhiEpC7mBm0RWwRgBlHkv8jPAHI6KH5/Ik9HM4xGHXa9CvnaZDBn9oAo7a XKTz+/wy7z8rHsX5+AIE94ccX3gB7gnbGzyebVMAkNUrVYHBhZBjgHTYQu7e+OdD www2pQYvBCDGRNWKJAdl9rAzKf3DyGsTh7r7iSzvQQeSBj225uAy21pncCA6/iJN gBdSl2KdokW4hOio0FlNUavYlUaj/gg= -----END CERTIFICATE-----Generated at Wed Aug 6 00:34:59 2025 by rpki-client