$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa File: 555e037a-a202-3c23-9d76-142b857e9d3c.roa (raw, json) Hash identifier: B9pg5sgmf1pBqVO0HsiqrUlmmWieLCf6L3FjWgsCi8c= Subject key identifier: A8:4F:27:AD:E0:8D:DA:28:0A:67:B7:4C:27:A6:2D:08:A8:D8:76:F8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBC4F895843568DED05700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c4:f8:95:84:35:68:de:d0:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=7f6dd19d-dc56-42c9-a56b-a61c079fe628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:41:7f:56:75:75:b9:e4:e9:67:9c:da:cc:30: 6b:d1:43:1a:23:e2:4b:b3:6f:be:ae:cc:9a:1b:c0: 1c:7b:c7:7c:6e:44:f4:60:83:dd:34:64:92:6d:0e: 82:11:09:a1:d4:d7:33:03:dc:32:d8:31:6a:0d:73: a1:f1:41:3a:84:c5:a5:00:77:f3:01:39:71:86:99: f4:e9:cd:9c:ed:f8:68:3b:c6:ed:a6:8c:b9:ed:24: 32:5e:53:c8:0b:39:ba:92:b9:1f:c5:4c:7f:9b:2e: bc:02:49:55:76:96:af:14:65:68:c4:4b:c9:2e:7c: f8:05:f6:42:b1:7b:8d:88:53:5f:78:d9:aa:01:0f: c6:ee:5f:ad:69:f3:88:01:a9:46:c0:91:29:d8:32: 95:c0:db:57:da:df:a8:9d:0f:14:ee:10:82:63:97: dd:73:d9:f4:d5:a3:c0:a0:a2:f7:36:d0:68:e7:ca: 07:45:a9:e1:6d:67:d5:10:43:a3:f3:f1:af:40:da: 56:7d:0f:c1:c2:f0:54:0f:88:ce:de:7e:ab:b0:74: 61:5a:93:dc:51:ee:1b:61:51:4d:0a:b5:ef:49:f5: e2:cb:94:03:c5:42:bd:bc:03:a6:1f:59:d0:02:55: 96:37:2b:ce:e9:90:cd:38:e7:34:06:5c:02:2b:07: b9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4F:27:AD:E0:8D:DA:28:0A:67:B7:4C:27:A6:2D:08:A8:D8:76:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:01:00:b4:38:44:59:47:e7:a8:ba:59:6b:07:3f:34:1e:ad: 23:97:ac:b3:e0:92:a1:8f:f9:0b:76:81:76:7e:89:8c:22:7e: a0:ce:63:57:d7:77:b0:35:22:a9:f5:78:22:88:d0:be:b4:20: 68:ef:23:cd:88:6c:e6:5a:93:b0:d7:e0:f1:4e:00:62:83:08: 10:bf:b0:4d:e9:ed:55:da:da:fd:f1:21:8f:a8:bf:f8:2d:5b: 95:66:54:ff:03:e6:02:ce:0f:1e:25:38:2e:95:f4:23:18:5c: 4c:f9:a8:62:a6:60:9b:8d:23:b3:9d:2b:37:85:d0:b8:f1:bb: 5e:51:14:04:fa:79:4c:5e:03:a1:fb:4f:89:36:6d:cd:2f:ec: 9d:de:34:82:fb:1f:2e:06:42:34:0d:c0:72:48:05:cb:fc:7e: a9:7c:11:7e:3e:ab:87:90:8a:f1:9f:ae:aa:73:6d:b8:e2:e5: 8d:4a:12:20:c5:28:70:30:a2:a7:f0:53:b4:05:77:f0:2f:9b: 50:76:2a:18:c8:90:2a:8e:98:e3:19:0c:84:3b:0a:e2:05:b8: 1b:fc:43:ad:ab:77:0b:80:17:0a:8b:06:43:64:8f:fd:12:ec: da:7b:ec:c6:07:d6:72:2c:bb:78:e8:32:7e:ee:83:f6:5b:e6: 23:a0:d4:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28T4lYQ1aN7QVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk N2Y2ZGQxOWQtZGM1Ni00MmM5LWE1NmItYTYxYzA3OWZlNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEF/VnV1ueTpZ5zazDBr0UMaI+JLs2++rsya G8Ace8d8bkT0YIPdNGSSbQ6CEQmh1NczA9wy2DFqDXOh8UE6hMWlAHfzATlxhpn0 6c2c7fhoO8btpoy57SQyXlPICzm6krkfxUx/my68AklVdpavFGVoxEvJLnz4BfZC sXuNiFNfeNmqAQ/G7l+tafOIAalGwJEp2DKVwNtX2t+onQ8U7hCCY5fdc9n01aPA oKL3NtBo58oHRanhbWfVEEOj8/GvQNpWfQ/BwvBUD4jO3n6rsHRhWpPcUe4bYVFN CrXvSfXiy5QDxUK9vAOmH1nQAlWWNyvO6ZDNOOc0BlwCKwe5owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhPJ63gjdooCme3TCemLQio2Hb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU1ZTAzN2EtYTIwMi0z YzIzLTlkNzYtMTQyYjg1N2U5ZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQBALQ4RFlH56i6WWsHPzQerSOXrLPgkqGP+Qt2gXZ+iYwifqDOY1fX d7A1Iqn1eCKI0L60IGjvI82IbOZak7DX4PFOAGKDCBC/sE3p7VXa2v3xIY+ov/gt W5VmVP8D5gLODx4lOC6V9CMYXEz5qGKmYJuNI7OdKzeF0Ljxu15RFAT6eUxeA6H7 T4k2bc0v7J3eNIL7Hy4GQjQNwHJIBcv8fql8EX4+q4eQivGfrqpzbbji5Y1KEiDF KHAwoqfwU7QFd/Avm1B2KhjIkCqOmOMZDIQ7CuIFuBv8Q62rdwuAFwqLBkNkj/0S 7Np77MYH1nIsu3joMn7ug/Zb5iOg1Bw= -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:18 2025 by rpki-client