$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46f9df07-36a0-3c65-a35e-145db3b8735f.roa File: 46f9df07-36a0-3c65-a35e-145db3b8735f.roa (raw, json) Hash identifier: IDS2fRPyufKFzSfB5ElRIGLeU80iU1HCrILJiFy1gyI= Subject key identifier: 58:3A:F8:A0:60:EA:64:3C:48:83:AD:26:90:1B:E9:AC:95:EA:26:C4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797B765FEE60E947D235A60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46f9df07-36a0-3c65-a35e-145db3b8735f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b7:65:fe:e6:0e:94:7d:23:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=6bc92e93-3ece-435e-afa4-6d2458d10e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d6:a6:68:e1:02:fa:03:83:dd:c6:96:4e:e0: 26:ec:26:42:89:be:43:63:4a:b2:a0:75:a3:b1:e0: 54:64:88:86:cd:c2:92:e2:b6:c7:87:77:01:42:dc: 9c:4e:72:0b:e9:0b:8a:97:a8:a6:29:21:6a:fd:f9: bc:18:77:8f:1c:04:1b:91:a8:fd:9a:e0:ac:31:ab: ff:59:d4:51:c2:48:16:ef:7a:aa:32:11:e0:f3:9e: 5b:5a:a1:a8:73:11:09:eb:13:cf:da:35:78:3b:af: f7:b2:8d:3f:2c:2c:28:1e:18:5f:12:a1:36:be:2f: 61:b2:72:93:75:86:e2:59:c6:5c:3a:35:b8:cf:35: d3:7f:69:f8:15:75:88:b5:ac:16:6b:cc:1a:de:d3: ea:90:f0:96:b2:2a:c8:27:3a:10:0a:de:02:80:eb: 0f:13:4e:dd:69:ae:5e:70:af:f4:85:97:72:84:e7: a3:fc:00:5c:83:e3:6d:0d:e5:6d:3c:00:f7:37:95: a5:e3:57:8a:eb:f6:f0:66:b2:75:0b:ff:a9:b0:45: a8:84:36:e4:4a:e7:9c:d6:07:50:03:42:55:f5:11: e8:cb:d2:26:62:fd:31:20:d3:55:63:ff:30:3c:a7: 71:05:5a:65:af:53:85:b6:67:e7:c8:27:e7:a1:e7: 3f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:F8:A0:60:EA:64:3C:48:83:AD:26:90:1B:E9:AC:95:EA:26:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46f9df07-36a0-3c65-a35e-145db3b8735f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1e:97:f0:c6:90:50:40:b6:23:5a:4b:ce:0b:e7:f4:31:76: 59:fe:69:f7:0c:34:3b:15:df:0a:0f:d8:09:ef:4f:73:33:32: 01:23:6d:6e:2a:e3:ee:b1:51:da:d6:f9:c1:a5:d3:e5:0d:05: 74:2d:6f:30:bf:54:16:63:37:95:c4:82:a8:a9:a4:3d:15:4a: fd:a8:f2:0d:d9:6a:de:9f:31:8d:e7:a1:12:b6:de:6a:c5:40: c5:e7:d6:b7:75:fb:c7:a1:b0:20:43:62:7f:8f:e3:d5:b6:8f: 4c:f1:4b:55:3d:f8:ad:46:38:26:a0:d8:15:52:4d:65:76:06: e7:95:c2:3e:17:42:17:ab:33:fc:5b:b7:76:49:54:84:f1:f2: 59:fb:43:8b:82:8c:e0:06:f3:85:ed:fc:e5:08:b9:43:2f:1b: e3:31:be:af:64:8e:74:93:50:8e:76:d9:a8:e3:f2:ac:05:dd: 68:30:4f:0a:8a:cc:7c:81:25:43:3b:fc:71:70:a0:72:80:2d: 02:ef:de:1b:b7:01:2d:1e:0e:6d:6d:47:a6:26:6f:51:84:fc: ab:5b:4a:1e:3b:16:8e:0e:56:e8:b3:68:52:a6:75:5d:0d:79: 6b:7c:2c:99:63:7d:b6:9a:e6:fa:92:c7:61:41:4a:4e:15:29: 90:8f:94:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7dl/uYOlH0jWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NmJjOTJlOTMtM2VjZS00MzVlLWFmYTQtNmQyNDU4ZDEwZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNamaOEC+gOD3caWTuAm7CZCib5DY0qyoHWj seBUZIiGzcKS4rbHh3cBQtycTnIL6QuKl6imKSFq/fm8GHePHAQbkaj9muCsMav/ WdRRwkgW73qqMhHg855bWqGocxEJ6xPP2jV4O6/3so0/LCwoHhhfEqE2vi9hsnKT dYbiWcZcOjW4zzXTf2n4FXWItawWa8wa3tPqkPCWsirIJzoQCt4CgOsPE07daa5e cK/0hZdyhOej/ABcg+NtDeVtPAD3N5Wl41eK6/bwZrJ1C/+psEWohDbkSuec1gdQ A0JV9RHoy9ImYv0xINNVY/8wPKdxBVplr1OFtmfnyCfnoec/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg6+KBg6mQ8SIOtJpAb6ayV6ibEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDZmOWRmMDctMzZhMC0z YzY1LWEzNWUtMTQ1ZGIzYjg3MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4el/DGkFBAtiNaS84L5/Qxdln+afcMNDsV3woP2AnvT3MzMgEjbW4q 4+6xUdrW+cGl0+UNBXQtbzC/VBZjN5XEgqippD0VSv2o8g3Zat6fMY3noRK23mrF QMXn1rd1+8ehsCBDYn+P49W2j0zxS1U9+K1GOCag2BVSTWV2BueVwj4XQherM/xb t3ZJVITx8ln7Q4uCjOAG84Xt/OUIuUMvG+Mxvq9kjnSTUI522ajj8qwF3WgwTwqK zHyBJUM7/HFwoHKALQLv3hu3AS0eDm1tR6Ymb1GE/KtbSh47Fo4OVuizaFKmdV0N eWt8LJljfbaa5vqSx2FBSk4VKZCPlJI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:19:10 2025 by rpki-client