$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47f00eea-8294-3e3d-9faa-2c41705d6f53.roa File: 47f00eea-8294-3e3d-9faa-2c41705d6f53.roa (raw, json) Hash identifier: WiFi6sJBPajDG+SQchKazGaH6HTu3BFiijal3xJMpKg= Subject key identifier: CA:D2:6D:8F:26:7E:3E:36:22:D0:5F:A6:19:01:FE:54:CE:F4:E0:C7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBDD9C715AA0DCE30114C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47f00eea-8294-3e3d-9faa-2c41705d6f53.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:dd:9c:71:5a:a0:dc:e3:01:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=bf009aef-6743-47b9-8740-1abb812c4d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:31:6b:c9:fe:41:d5:c8:52:05:44:59:06: 5f:a1:2a:1c:ec:a5:da:12:51:1b:e2:17:1f:e3:6d: 98:39:f0:3a:54:1d:91:8b:59:d7:63:c2:4c:40:2d: fd:73:f2:08:22:27:ad:88:7d:86:28:2e:e5:4b:79: 2c:3c:91:00:56:d8:84:b2:9b:ef:f9:81:81:d5:0d: bd:84:3b:61:32:00:8a:34:67:e0:25:48:87:d7:da: 86:b3:4d:5f:41:a8:8b:e4:98:08:b1:85:5c:42:6e: 4e:e6:92:63:65:89:61:83:29:ce:a6:f3:f1:7e:9f: db:83:6f:b5:ae:76:0e:3e:2d:8e:81:a9:aa:23:a1: 82:d9:44:a1:73:9f:21:87:39:12:2c:20:bf:eb:4a: 16:ca:7f:26:01:9e:4b:68:38:b0:fe:c2:3e:38:67: d8:fd:0a:3b:d5:a4:e3:79:63:bd:38:9b:18:e8:fe: c8:6e:33:fc:0c:bb:7e:74:e8:2e:e7:1e:32:67:a8: 52:a5:16:1d:c7:83:75:8c:b1:6e:20:a3:20:5f:99: a5:36:a0:d7:16:f1:e5:62:81:d6:08:c2:4a:2f:9d: a2:12:21:b9:d2:14:11:09:b7:91:65:1a:de:02:6a: 1e:48:aa:c0:33:2c:5a:ed:cb:dc:2c:d4:a6:34:64: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D2:6D:8F:26:7E:3E:36:22:D0:5F:A6:19:01:FE:54:CE:F4:E0:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47f00eea-8294-3e3d-9faa-2c41705d6f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f1:52:32:01:62:a3:fe:2c:70:a3:c0:cb:61:4b:81:b2:c5: c8:ee:74:d6:4f:fa:92:ef:0f:8a:ce:ef:8f:34:95:21:b3:ba: 7a:c1:f9:5c:09:0e:a4:88:75:f4:b9:a3:6d:0c:32:04:4f:88: e3:e6:85:c5:a7:e4:7e:cc:1d:47:14:40:8d:b2:91:7e:ee:41: 51:6a:22:e4:a1:f5:f4:88:20:e2:96:31:37:07:b4:dc:11:1e: 37:5a:ba:ef:20:c1:a6:5e:f5:fe:3c:ce:dd:6b:22:42:f6:61: f5:0a:07:c6:6f:b5:88:73:3d:c8:47:04:d0:46:c4:74:89:f0: dc:56:60:6e:2e:24:42:3a:cc:70:0a:9f:04:50:2c:33:54:09: 1b:31:3b:65:85:1c:3c:68:8b:66:98:b0:3d:7e:00:85:1a:c0: 66:1c:77:bc:1d:39:9d:f1:8c:74:5b:96:e9:8f:78:a3:80:4d: e5:72:35:49:99:73:3b:5b:73:fd:10:18:ca:df:98:28:48:a1: 47:2a:12:7f:75:7e:be:d6:de:5f:73:95:5d:70:c9:b6:c2:36: 60:69:59:b3:9e:bf:8c:1f:10:91:9e:79:0b:fb:43:77:a9:4e: c2:49:81:ba:c0:4a:cc:7d:f4:81:33:74:eb:a4:a3:9c:1a:9d: ee:e4:5f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG292ccVqg3OMBFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YmYwMDlhZWYtNjc0My00N2I5LTg3NDAtMWFiYjgxMmM0ZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkcxa8n+QdXIUgVEWQZfoSoc7KXaElEb4hcf 422YOfA6VB2Ri1nXY8JMQC39c/IIIietiH2GKC7lS3ksPJEAVtiEspvv+YGB1Q29 hDthMgCKNGfgJUiH19qGs01fQaiL5JgIsYVcQm5O5pJjZYlhgynOpvPxfp/bg2+1 rnYOPi2OgamqI6GC2UShc58hhzkSLCC/60oWyn8mAZ5LaDiw/sI+OGfY/Qo71aTj eWO9OJsY6P7IbjP8DLt+dOgu5x4yZ6hSpRYdx4N1jLFuIKMgX5mlNqDXFvHlYoHW CMJKL52iEiG50hQRCbeRZRreAmoeSKrAMyxa7cvcLNSmNGQLvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrSbY8mfj42ItBfphkB/lTO9ODHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDdmMDBlZWEtODI5NC0z ZTNkLTlmYWEtMmM0MTcwNWQ2ZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvxUjIBYqP+LHCjwMthS4GyxcjudNZP+pLvD4rO7480lSGzunrB+VwJ DqSIdfS5o20MMgRPiOPmhcWn5H7MHUcUQI2ykX7uQVFqIuSh9fSIIOKWMTcHtNwR Hjdauu8gwaZe9f48zt1rIkL2YfUKB8ZvtYhzPchHBNBGxHSJ8NxWYG4uJEI6zHAK nwRQLDNUCRsxO2WFHDxoi2aYsD1+AIUawGYcd7wdOZ3xjHRblumPeKOATeVyNUmZ cztbc/0QGMrfmChIoUcqEn91fr7W3l9zlV1wybbCNmBpWbOev4wfEJGeeQv7Q3ep TsJJgbrASsx99IEzdOuko5wane7kX48= -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:27 2025 by rpki-client