$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa File: 34bcf9a3-a232-3124-a010-fbd2231925d1.roa (raw, json) Hash identifier: rcqlTVqsb5Gn8/3hJuzGDECamUc6ph4eZ3tNaHv+nb8= Subject key identifier: 1D:88:6A:CB:E5:1B:73:54:DC:F5:50:C6:67:C2:65:96:5F:02:FC:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBCCD07D3AFA69DE986000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:cc:d0:7d:3a:fa:69:de:98:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b1234612-727f-4ba2-af62-df3a438f9ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:ca:4a:f6:62:21:d1:e2:cd:95:98:56:5d: 37:15:52:5e:e4:f2:38:59:28:40:f7:c6:0f:e2:5c: 2b:12:29:bd:fe:36:0d:e2:5f:51:85:1b:42:8d:c4: 79:5b:87:4e:f9:7c:9b:72:5c:0d:75:07:9e:37:42: 3f:63:58:5b:6b:50:33:ae:a3:77:cf:0e:7e:86:35: 34:54:61:f1:bb:b2:1b:f3:e2:03:ce:03:70:ce:14: c4:60:5b:04:37:27:dc:c0:d2:6a:9e:b7:6a:88:6d: a4:35:1c:85:21:75:aa:f3:a5:ae:4a:29:fc:c9:eb: 7f:2a:b3:f1:75:a0:45:f6:6a:84:3d:84:46:85:06: 27:c1:35:79:26:42:89:a5:33:ae:2f:31:99:38:1b: 00:b1:da:29:a8:cd:5f:be:94:13:ae:49:8c:3f:b7: 88:4e:9c:4b:74:c5:d6:47:dc:3b:b8:78:d5:d8:5d: fe:a6:3f:37:87:07:12:8b:96:a4:2c:98:5a:7b:4e: c7:e6:86:f5:d6:82:cf:00:27:27:a3:cd:2c:d4:92: 6c:f1:bd:bc:d4:da:f4:85:67:27:41:7d:2e:c1:c8: 19:c8:71:a3:77:af:32:2a:4c:db:b2:82:11:a5:81: 22:bc:66:7f:59:53:5f:57:f5:a6:e1:1b:07:55:e9: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:88:6A:CB:E5:1B:73:54:DC:F5:50:C6:67:C2:65:96:5F:02:FC:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:67:96:ef:70:b4:63:2a:34:f1:19:a0:08:e5:8d:b6:32:5f: 9a:9f:b7:c0:97:9e:de:1e:1b:1a:b9:0a:c9:42:ad:52:7b:aa: ec:0a:03:de:51:bf:79:db:e8:80:84:b4:3d:30:31:7a:9f:b5: a2:c9:53:d9:54:9a:f5:b8:91:54:25:5f:d2:9e:ce:84:a4:e0: 1f:33:f2:10:3a:52:61:fe:28:8f:67:3d:18:eb:71:2f:46:90: 5e:c7:21:b5:ee:ca:f2:7f:07:9a:82:00:21:6b:10:f0:a5:31: 67:f6:07:e5:32:d4:35:f8:54:fa:bf:13:d6:d4:9e:c7:9f:94: 3c:7e:be:92:be:a7:4e:7c:b1:e4:af:91:7f:0b:2f:08:94:5d: aa:d4:f6:81:d2:48:ac:6a:bf:f2:53:92:be:06:5c:69:36:d8: 8f:50:07:e4:5a:ee:d1:6b:af:68:fd:21:3f:61:c6:65:92:d8: 9e:83:90:7e:81:49:2d:cf:ed:59:75:65:64:b2:46:ce:7a:ba: c2:f8:cd:fb:de:2b:39:f6:c3:96:bc:91:7d:5d:b8:03:35:9f: 43:d1:0e:5b:86:ba:c8:df:ac:7b:35:c3:62:84:d3:09:c2:6a: 52:d9:7c:63:9d:4d:ff:73:81:ce:f5:ee:8f:08:4a:0a:84:ec: 0e:69:bb:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28zQfTr6ad6YYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjEyMzQ2MTItNzI3Zi00YmEyLWFmNjItZGYzYTQzOGY5ZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwobKSvZiIdHizZWYVl03FVJe5PI4WShA98YP 4lwrEim9/jYN4l9RhRtCjcR5W4dO+XybclwNdQeeN0I/Y1hba1AzrqN3zw5+hjU0 VGHxu7Ib8+IDzgNwzhTEYFsENyfcwNJqnrdqiG2kNRyFIXWq86WuSin8yet/KrPx daBF9mqEPYRGhQYnwTV5JkKJpTOuLzGZOBsAsdopqM1fvpQTrkmMP7eITpxLdMXW R9w7uHjV2F3+pj83hwcSi5akLJhae07H5ob11oLPACcno80s1JJs8b281Nr0hWcn QX0uwcgZyHGjd68yKkzbsoIRpYEivGZ/WVNfV/Wm4RsHVemhkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2IasvlG3NU3PVQxmfCZZZfAvzZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzRiY2Y5YTMtYTIzMi0z MTI0LWEwMTAtZmJkMjIzMTkyNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFnlu9wtGMqNPEZoAjljbYyX5qft8CXnt4eGxq5CslCrVJ7quwKA95R v3nb6ICEtD0wMXqftaLJU9lUmvW4kVQlX9KezoSk4B8z8hA6UmH+KI9nPRjrcS9G kF7HIbXuyvJ/B5qCACFrEPClMWf2B+Uy1DX4VPq/E9bUnseflDx+vpK+p058seSv kX8LLwiUXarU9oHSSKxqv/JTkr4GXGk22I9QB+Ra7tFrr2j9IT9hxmWS2J6DkH6B SS3P7Vl1ZWSyRs56usL4zfveKzn2w5a8kX1duAM1n0PRDluGusjfrHs1w2KE0wnC alLZfGOdTf9zgc717o8ISgqE7A5pu+g= -----END CERTIFICATE-----Generated at Mon Aug 4 14:43:59 2025 by rpki-client