$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa File: 43659337-d3a9-39a2-9081-bbcafeb0d57d.roa (raw, json) Hash identifier: W1QcNxl1C0525rlnALEhGhQnrbTruJ376/s92MZOUQw= Subject key identifier: 4B:61:C5:DB:9F:7B:B9:C2:5A:6F:0F:EE:BF:95:83:0D:6C:B8:2D:7C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBDA635CC041823EB1C400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:da:63:5c:c0:41:82:3e:b1:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=9eddd440-bc65-48aa-b372-2f664bc1580d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:0b:e5:27:b2:7c:d7:d9:29:3a:4d:bb:cb: 18:98:4a:0c:b8:44:93:b5:b2:64:b3:60:c1:2d:57: 4f:02:3b:ef:0a:94:04:da:d9:0f:a0:7a:d4:55:97: 6a:92:5c:4c:59:1e:4b:cc:7e:08:ae:3a:8b:7b:d5: bc:e1:08:a2:ee:c7:6e:6d:b6:e1:90:53:a6:74:1f: af:e3:a2:4e:8e:d1:17:99:22:6d:f6:09:ed:97:cc: 5d:95:20:04:55:a2:ce:43:d8:19:6f:a9:36:c8:a2: 99:04:4e:d2:52:93:d5:05:b5:a2:59:cf:40:1e:70: b2:0a:5d:df:07:73:c9:fc:ce:65:ba:e2:75:4c:61: f1:63:e0:d4:e5:42:1e:9b:fa:7d:b2:e2:df:5d:84: c1:dd:9b:05:1a:97:aa:6e:04:e4:c3:9d:56:cf:08: 18:a2:fd:2a:5f:58:b8:5d:da:d4:91:b2:ec:df:bb: 61:b9:4e:ab:db:f3:90:39:95:63:e5:be:9f:f0:52: 2f:77:7c:6c:e9:80:34:ec:c3:09:cf:a5:9f:69:a3: 7d:0d:4a:b9:41:95:2a:93:c6:7f:a2:07:25:ce:f5: bd:af:a7:67:b8:88:a4:af:6b:fb:4a:d3:a5:c1:14: bf:71:78:76:80:6f:c2:98:20:7d:75:13:a2:56:18: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:61:C5:DB:9F:7B:B9:C2:5A:6F:0F:EE:BF:95:83:0D:6C:B8:2D:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ad:5f:d6:37:80:59:ff:b8:1f:6c:d5:8c:82:a9:bf:09:bd: 15:ba:0e:df:1c:2a:32:24:f6:a8:ac:c8:d3:2f:74:4d:9b:96: 25:14:f7:5b:ec:3f:4b:8f:37:20:a2:0e:7b:61:13:7f:9e:88: be:12:a8:f4:f8:f0:3e:c1:bb:81:68:e7:86:27:1f:1e:ac:bd: d8:68:d7:0f:83:b5:e0:b2:30:83:8e:0f:20:94:43:98:a6:10: e4:35:f4:a4:cb:33:92:b0:9c:27:e2:ae:c4:8f:9d:33:86:e0: 5a:af:48:e6:f1:67:ca:6b:27:3b:59:ac:cd:ef:f8:1e:94:05: 41:80:6d:99:c2:c0:a2:8b:93:81:8d:d0:0e:68:1a:8b:55:4b: 8b:47:44:ec:1d:8f:0e:92:51:7f:2a:0b:8b:e0:57:9d:b0:88: 74:9e:18:25:dd:74:a3:56:e0:6c:d9:3a:72:31:10:cc:fc:92: 53:e6:a3:7c:93:28:bd:ca:4c:b7:a7:4d:ea:a1:5d:a1:85:5b: 24:88:7d:ad:7b:13:d5:cb:35:6c:d6:93:ec:4b:5e:1e:dc:0c: 5b:78:e9:b4:6d:53:71:45:cd:f0:81:93:2e:44:6f:5b:4f:bc: bc:06:bc:c8:b9:3e:33:83:34:70:0a:98:a0:a4:23:e9:33:d5: ed:c9:85:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29pjXMBBgj6xxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OWVkZGQ0NDAtYmM2NS00OGFhLWIzNzItMmY2NjRiYzE1ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggYL5SeyfNfZKTpNu8sYmEoMuESTtbJks2DB LVdPAjvvCpQE2tkPoHrUVZdqklxMWR5LzH4IrjqLe9W84Qii7sdubbbhkFOmdB+v 46JOjtEXmSJt9gntl8xdlSAEVaLOQ9gZb6k2yKKZBE7SUpPVBbWiWc9AHnCyCl3f B3PJ/M5luuJ1TGHxY+DU5UIem/p9suLfXYTB3ZsFGpeqbgTkw51WzwgYov0qX1i4 XdrUkbLs37thuU6r2/OQOZVj5b6f8FIvd3xs6YA07MMJz6WfaaN9DUq5QZUqk8Z/ ogclzvW9r6dnuIikr2v7StOlwRS/cXh2gG/CmCB9dROiVhh7IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEthxdufe7nCWm8P7r+Vgw1suC18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDM2NTkzMzctZDNhOS0z OWEyLTkwODEtYmJjYWZlYjBkNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6tX9Y3gFn/uB9s1YyCqb8JvRW6Dt8cKjIk9qisyNMvdE2bliUU91vs P0uPNyCiDnthE3+eiL4SqPT48D7Bu4Fo54YnHx6svdho1w+DteCyMIOODyCUQ5im EOQ19KTLM5KwnCfirsSPnTOG4FqvSObxZ8prJztZrM3v+B6UBUGAbZnCwKKLk4GN 0A5oGotVS4tHROwdjw6SUX8qC4vgV52wiHSeGCXddKNW4GzZOnIxEMz8klPmo3yT KL3KTLenTeqhXaGFWySIfa17E9XLNWzWk+xLXh7cDFt46bRtU3FFzfCBky5Eb1tP vLwGvMi5PjODNHAKmKCkI+kz1e3JhY0= -----END CERTIFICATE-----Generated at Wed Aug 6 05:12:12 2025 by rpki-client