$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa File: 3821e3dc-b2a8-348a-8401-999696cbb28c.roa (raw, json) Hash identifier: hJmBG7YA0BGhpvOVm4/zXd3ZJWniXuJRCxd0l485bEQ= Subject key identifier: 3F:E7:C0:40:01:54:F5:B8:FA:30:A8:19:C1:5E:F1:69:52:2C:F2:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB8EDC3B46B59F3A7AD420 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:8e:dc:3b:46:b5:9f:3a:7a:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=985aef5c-3729-4c6a-aa9e-6c1fb32d8faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:4c:6b:ec:13:c1:cc:f2:e1:0a:17:69:ce: 85:70:a7:2f:b1:d9:8f:ec:af:94:68:42:03:93:66: 8e:7e:1f:96:88:cf:11:b7:0f:da:de:d3:ba:df:cb: 66:18:5b:ed:be:15:f5:65:9b:bd:38:e5:b0:ba:e7: c2:de:54:e5:a8:f6:0c:d9:8e:21:54:5f:09:65:06: 91:46:f2:47:18:35:b6:d5:fd:3e:c7:e1:16:de:8e: 75:6b:b6:7a:07:bd:cf:1e:e8:69:e0:9c:97:f3:a8: f9:2b:b5:0f:17:d4:ef:b7:f3:d8:89:b5:95:de:44: 93:8c:32:2f:56:ab:99:e0:c7:20:d6:e0:b0:4f:c3: c4:6d:8f:e0:00:1e:0f:56:13:22:92:02:32:c9:f5: 23:3e:eb:c9:b9:66:d5:7d:52:c1:2c:8d:61:0d:35: ba:bc:37:d8:f1:f3:c9:e5:e2:83:19:47:ba:0f:9b: b4:95:3a:d9:2c:4f:ac:53:71:ea:c3:18:1d:30:e9: 9e:9f:6b:8f:36:85:63:99:94:69:ff:cf:1e:a7:ca: 10:d0:a9:a2:09:9c:39:bf:a0:dd:ce:9e:d7:6f:a4: ee:7d:0f:41:f5:f6:67:34:6c:33:76:54:fc:13:2b: 0a:90:d2:32:53:df:a4:f4:c4:6d:c7:5f:b3:2d:14: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E7:C0:40:01:54:F5:B8:FA:30:A8:19:C1:5E:F1:69:52:2C:F2:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a3:a1:29:1b:09:28:82:16:31:a7:ff:06:32:b3:f1:4d:62: 9e:db:4a:32:11:69:b5:b2:12:2c:a5:cb:2d:34:c7:af:7b:b2: 70:7b:e8:3f:7e:a3:f3:fa:27:11:21:03:7b:4e:70:0a:20:1f: e4:6d:65:6b:4e:1c:d2:45:d4:81:13:cd:ac:3c:56:05:59:23: f6:48:33:a3:c5:67:09:dc:00:75:fa:e4:02:a6:9f:74:8d:02: ec:68:ce:f0:16:95:35:1b:7f:dc:52:43:9e:27:03:59:44:e7: ea:fe:d8:9f:f7:d0:bc:d6:d1:8c:a7:94:ff:ba:84:2e:e9:da: 9a:31:be:27:55:52:2d:6b:bb:91:49:66:21:d9:32:ce:e5:60: eb:2c:86:85:48:23:e8:ba:70:e0:b2:1c:2e:29:73:ab:26:e6: a0:9c:91:4d:64:9b:59:3d:36:fc:2f:30:6b:94:36:e2:21:a5: 80:8b:92:49:ed:cd:b4:fb:97:dc:3f:25:54:d0:7e:30:9f:b6: 98:3a:c5:9d:11:50:8f:87:20:8a:da:c3:af:36:bd:af:ef:8d: 30:cd:57:b8:11:8b:73:40:51:33:e0:d6:4e:89:3e:74:b1:e7: ff:66:10:21:d5:40:e2:56:08:db:01:8d:c4:14:1d:19:a8:da: 91:71:73:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG247cO0a1nzp61CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OTg1YWVmNWMtMzcyOS00YzZhLWFhOWUtNmMxZmIzMmQ4ZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO5Ma+wTwczy4QoXac6FcKcvsdmP7K+UaEID k2aOfh+WiM8Rtw/a3tO638tmGFvtvhX1ZZu9OOWwuufC3lTlqPYM2Y4hVF8JZQaR RvJHGDW21f0+x+EW3o51a7Z6B73PHuhp4JyX86j5K7UPF9Tvt/PYibWV3kSTjDIv VquZ4Mcg1uCwT8PEbY/gAB4PVhMikgIyyfUjPuvJuWbVfVLBLI1hDTW6vDfY8fPJ 5eKDGUe6D5u0lTrZLE+sU3HqwxgdMOmen2uPNoVjmZRp/88ep8oQ0KmiCZw5v6Dd zp7Xb6TufQ9B9fZnNGwzdlT8EysKkNIyU9+k9MRtx1+zLRR4DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/nwEABVPW4+jCoGcFe8WlSLPKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzgyMWUzZGMtYjJhOC0z NDhhLTg0MDEtOTk5Njk2Y2JiMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+joSkbCSiCFjGn/wYys/FNYp7bSjIRabWyEiylyy00x697snB76D9+ o/P6JxEhA3tOcAogH+RtZWtOHNJF1IETzaw8VgVZI/ZIM6PFZwncAHX65AKmn3SN AuxozvAWlTUbf9xSQ54nA1lE5+r+2J/30LzW0YynlP+6hC7p2poxvidVUi1ru5FJ ZiHZMs7lYOsshoVII+i6cOCyHC4pc6sm5qCckU1km1k9NvwvMGuUNuIhpYCLkknt zbT7l9w/JVTQfjCftpg6xZ0RUI+HIIraw682va/vjTDNV7gRi3NAUTPg1k6JPnSx 5/9mECHVQOJWCNsBjcQUHRmo2pFxczk= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:47 2025 by rpki-client