$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa File: 34bcf9a3-a232-3124-a010-fbd2231925d1.roa (raw, json) Hash identifier: z5DpPOK0IMBbrokVuo3NsjDvaYtEEqY0rTtC/GLh7+Y= Subject key identifier: 74:94:12:BA:6D:03:DB:3B:76:BE:D4:2B:FA:9D:4E:3A:F1:38:1E:F2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797AD216218AD0BBF659D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ad:21:62:18:ad:0b:bf:65:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2f818faa-6ce5-4714-a5ff-6ce264201705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5e:37:6a:08:f2:63:5a:29:05:ce:96:11:9a: 08:fa:1e:b1:44:01:45:d5:87:39:62:70:c8:4c:6e: 8b:eb:5f:60:e0:8d:11:77:ea:a5:ef:3e:e2:53:15: 3f:9b:64:b7:0b:51:11:40:0f:9e:22:8d:93:62:3c: f9:4b:96:76:d5:6a:5b:61:1a:02:fe:df:9f:f5:6f: 4c:eb:a7:f8:d2:60:8c:54:cb:12:d1:c8:38:1b:b8: 1d:28:97:d1:49:53:12:df:d5:46:c8:11:d1:9b:eb: 79:9d:9b:eb:f4:4b:b7:63:1c:bc:7f:d9:57:13:74: 2e:ab:01:ab:06:0f:fd:52:6e:28:f3:b1:d3:1d:fe: b7:1e:59:ef:19:e6:85:b1:fb:ae:97:55:1f:a9:90: 1b:fc:6b:3f:dd:48:99:56:e4:a8:b0:bf:e4:d8:c5: db:7d:43:aa:76:75:17:12:aa:df:52:68:d8:bd:f2: d6:ef:fa:9b:26:48:34:1d:e5:62:13:f6:68:a1:7f: 87:59:17:34:a8:b4:2b:ce:9c:dc:b1:26:9d:f2:2e: 59:c3:eb:71:75:fd:d8:0e:d6:f0:51:78:17:05:34: d3:fe:cf:e8:46:56:12:f0:d9:7d:ae:1b:54:8e:bd: 4f:50:5b:d3:77:51:43:96:1d:69:59:8e:0d:33:0c: f7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:94:12:BA:6D:03:DB:3B:76:BE:D4:2B:FA:9D:4E:3A:F1:38:1E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:21:cd:3c:8e:6d:7a:fb:cb:87:63:0d:c8:9a:d4:d1:d5:fd: b4:a1:c2:f8:d3:04:fb:12:b8:35:2d:de:2a:d7:23:a2:7b:c8: c6:86:03:28:20:09:3d:c8:06:99:a5:a3:3a:5b:e1:50:16:79: e8:05:3f:25:03:80:89:1c:79:52:0d:eb:c9:4c:ce:f7:0a:4e: 2c:7b:ae:cd:b5:6f:e1:1b:47:de:5a:63:6f:82:4d:ff:5a:7f: 63:d6:42:4d:39:92:88:1a:d0:4e:e2:b0:56:0a:c3:14:8f:8d: a7:72:ba:33:3f:a6:80:5f:e7:db:51:b2:07:b9:f7:f9:6d:82: 3d:f8:cb:43:11:13:5d:87:95:f8:fc:30:bc:35:a3:71:5b:c0: d9:cf:30:43:98:43:fc:84:48:c6:8b:52:2f:f5:36:5d:75:9d: 1e:03:08:1f:62:ab:6e:f9:43:3f:d1:d0:9a:17:72:65:89:0a: a6:af:d1:02:a7:71:73:77:15:94:cc:99:7f:4b:65:b2:b0:d2: 89:67:3d:e9:68:3e:42:d1:44:91:3c:56:6d:ae:73:b9:a1:54: 3f:72:e0:08:1c:f6:b8:ac:79:20:5b:f7:e2:f8:7a:05:cc:e3: ad:b5:9b:9b:b1:4f:b3:f7:3c:64:c5:79:0c:f6:bd:b8:da:6f: a7:13:3f:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl60hYhitC79lnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmY4MThmYWEtNmNlNS00NzE0LWE1ZmYtNmNlMjY0MjAxNzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F43agjyY1opBc6WEZoI+h6xRAFF1Yc5YnDI TG6L619g4I0Rd+ql7z7iUxU/m2S3C1ERQA+eIo2TYjz5S5Z21WpbYRoC/t+f9W9M 66f40mCMVMsS0cg4G7gdKJfRSVMS39VGyBHRm+t5nZvr9Eu3Yxy8f9lXE3QuqwGr Bg/9Um4o87HTHf63HlnvGeaFsfuul1UfqZAb/Gs/3UiZVuSosL/k2MXbfUOqdnUX EqrfUmjYvfLW7/qbJkg0HeViE/ZooX+HWRc0qLQrzpzcsSad8i5Zw+txdf3YDtbw UXgXBTTT/s/oRlYS8Nl9rhtUjr1PUFvTd1FDlh1pWY4NMwz39QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSUErptA9s7dr7UK/qdTjrxOB7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzRiY2Y5YTMtYTIzMi0z MTI0LWEwMTAtZmJkMjIzMTkyNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIhzTyObXr7y4djDcia1NHV/bShwvjTBPsSuDUt3irXI6J7yMaGAygg CT3IBpmlozpb4VAWeegFPyUDgIkceVIN68lMzvcKTix7rs21b+EbR95aY2+CTf9a f2PWQk05koga0E7isFYKwxSPjadyujM/poBf59tRsge59/ltgj34y0MRE12Hlfj8 MLw1o3FbwNnPMEOYQ/yESMaLUi/1Nl11nR4DCB9iq275Qz/R0JoXcmWJCqav0QKn cXN3FZTMmX9LZbKw0olnPeloPkLRRJE8Vm2uc7mhVD9y4Agc9riseSBb9+L4egXM 4621m5uxT7P3PGTFeQz2vbjab6cTP4M= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:36 2025 by rpki-client