$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33822243-69e4-3d54-98ee-ca1bf1ad9525.roa File: 33822243-69e4-3d54-98ee-ca1bf1ad9525.roa (raw, json) Hash identifier: pR2FB13h9/3wElpQbE/AbLnREgU5h0bxaszHVPcIdPc= Subject key identifier: 00:D7:2D:EF:DA:2F:4B:96:A2:34:26:77:FF:26:FF:99:A4:42:A2:EA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB8C7AF390E318BE77F680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33822243-69e4-3d54-98ee-ca1bf1ad9525.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 19484 IP address blocks: 70.32.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:8c:7a:f3:90:e3:18:be:77:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b057e720-4b7a-4c87-86d5-bf0d68465ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:16:33:fa:2b:38:c4:e6:6d:e9:4d:63:dc: 40:fe:89:dd:46:5e:82:60:5b:c1:ed:55:80:b0:42: 4d:0c:c5:8a:c2:97:86:ab:15:68:14:b5:f9:c6:7e: 5a:e8:93:45:1b:99:a3:16:c0:f2:06:bf:89:c0:b4: 59:de:26:1c:bd:74:1f:00:52:89:d6:97:d9:c0:04: 38:70:61:d4:fc:b7:9f:6b:48:2c:d7:ac:86:16:c0: f3:e4:5c:cd:ec:02:1a:b6:ae:fa:f4:af:9c:44:34: 65:f5:49:f0:e6:08:a5:39:db:d2:10:8a:96:82:d9: de:1e:de:75:78:7e:f7:b1:01:8a:25:a3:a7:7d:fc: e1:47:18:b4:cd:43:0d:1a:dd:9e:92:b0:a9:77:0b: 3b:8b:b0:2c:01:ba:be:b5:a9:ef:3f:4a:47:db:c7: 25:c4:5e:c9:d0:92:9e:13:34:3b:ea:93:7e:60:e9: eb:a3:bb:cc:76:68:f1:16:a7:39:d2:01:91:f0:3e: c7:da:f5:b9:f1:b4:a9:1f:d2:fa:67:ea:35:58:24: f5:d7:21:e9:50:25:ed:d8:05:89:f1:39:44:00:0e: de:c3:eb:01:92:e7:f5:1a:1e:32:61:6f:5f:d7:7f: f5:9d:2d:41:e3:9e:65:57:61:fa:77:d1:94:63:63: dc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D7:2D:EF:DA:2F:4B:96:A2:34:26:77:FF:26:FF:99:A4:42:A2:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33822243-69e4-3d54-98ee-ca1bf1ad9525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:6b:92:8f:a7:c2:ed:97:6a:37:76:b0:8d:19:a4:97:59:79: ad:8d:77:26:6a:2a:e6:09:f1:3d:7d:df:30:f8:d3:93:c2:96: 28:e3:73:78:07:46:58:30:4c:25:be:cb:f9:6f:9b:f2:86:26: 8f:4f:7d:1c:be:8e:6e:9e:73:8b:58:97:37:c4:5d:81:0f:71: 0f:7f:0b:0e:c1:da:95:4e:51:71:c3:a0:a3:fd:47:4e:73:90: 92:62:e4:28:5c:33:ae:11:55:86:9c:bf:43:42:a7:d7:04:64: 05:7c:56:68:3e:c9:15:ea:31:b4:16:56:5c:4c:cc:21:c8:9b: 44:59:0a:4f:11:2e:0b:64:1f:7b:31:8f:4c:e8:a0:1a:1b:d8: fb:6d:86:b2:2c:2c:9a:71:80:5b:a2:2e:a1:e7:ff:86:7c:50: 1c:69:84:80:a9:28:de:0e:24:93:1d:a3:c9:a0:9d:b7:ea:f1: 90:7b:d1:e2:92:6b:c9:11:55:39:f2:09:86:e3:a1:f8:d2:16: d6:91:84:0d:79:9b:a9:fe:7d:f2:20:ef:92:52:1a:14:b4:31: 56:f5:12:22:49:82:08:2a:31:e3:f4:9e:03:a4:c4:9e:ac:2d: 1b:8c:92:cf:43:31:40:c0:e6:46:23:59:a2:1e:05:72:a6:a9: f6:b8:66:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24x685DjGL539oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjA1N2U3MjAtNGI3YS00Yzg3LTg2ZDUtYmYwZDY4NDY1ZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaYWM/orOMTmbelNY9xA/ondRl6CYFvB7VWA sEJNDMWKwpeGqxVoFLX5xn5a6JNFG5mjFsDyBr+JwLRZ3iYcvXQfAFKJ1pfZwAQ4 cGHU/Lefa0gs16yGFsDz5FzN7AIatq769K+cRDRl9Unw5gilOdvSEIqWgtneHt51 eH73sQGKJaOnffzhRxi0zUMNGt2ekrCpdws7i7AsAbq+tanvP0pH28clxF7J0JKe EzQ76pN+YOnro7vMdmjxFqc50gGR8D7H2vW58bSpH9L6Z+o1WCT11yHpUCXt2AWJ 8TlEAA7ew+sBkuf1Gh4yYW9f13/1nS1B455lV2H6d9GUY2PcSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADXLe/aL0uWojQmd/8m/5mkQqLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzM4MjIyNDMtNjllNC0z ZDU0LTk4ZWUtY2ExYmYxYWQ5NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1rko+nwu2Xajd2sI0ZpJdZea2NdyZqKuYJ8T193zD405PClijjc3gH RlgwTCW+y/lvm/KGJo9PfRy+jm6ec4tYlzfEXYEPcQ9/Cw7B2pVOUXHDoKP9R05z kJJi5ChcM64RVYacv0NCp9cEZAV8Vmg+yRXqMbQWVlxMzCHIm0RZCk8RLgtkH3sx j0zooBob2PtthrIsLJpxgFuiLqHn/4Z8UBxphICpKN4OJJMdo8mgnbfq8ZB70eKS a8kRVTnyCYbjofjSFtaRhA15m6n+ffIg75JSGhS0MVb1EiJJgggqMeP0ngOkxJ6s LRuMks9DMUDA5kYjWaIeBXKmqfa4Zmk= -----END CERTIFICATE-----Generated at Wed Aug 6 10:19:50 2025 by rpki-client