$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa File: 56a1775b-c9a6-31aa-9040-b34009d9f364.roa (raw, json) Hash identifier: 2vPBsnmuOltW8sb7hc2D63mEgOZAgBkb+i8TlMCAQgc= Subject key identifier: F0:5B:06:FE:C7:12:26:FC:F1:A5:AD:D6:2A:5E:51:64:0F:EC:C5:E5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBAED7A189233224918780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ae:d7:a1:89:23:32:24:91:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=fac50597-6328-4d69-a663-c493b4b88f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:42:82:57:b2:aa:24:0f:88:3b:02:7f:38:16: e6:27:f9:eb:4a:4f:84:3d:e2:cd:2a:f0:0a:fb:b9: 0e:af:1a:ab:13:8e:98:6e:be:1b:d5:07:ba:23:d1: d7:97:08:66:68:d6:4b:5d:b9:e1:75:57:f8:51:b9: 56:d5:9a:74:9b:94:ec:a8:07:0d:a4:b7:53:d1:d4: f4:7d:7e:99:b3:8e:f3:c9:0a:b1:f0:05:34:10:e4: 40:41:f6:68:98:7c:c1:34:32:5a:8d:cd:39:38:1f: 1b:a0:46:c2:86:b0:91:af:db:3e:f3:2f:ab:93:56: a4:52:62:7f:13:95:a4:f4:65:5d:6c:8c:ba:0e:34: a2:dd:90:02:02:f7:be:02:0f:ba:4f:19:f4:32:c3: 3b:3c:89:04:a3:4d:2c:2d:8c:32:e1:3a:1d:03:82: 69:d9:96:9a:21:b1:80:d3:8b:61:cb:2a:69:a4:5e: 9f:6f:bc:1a:7f:af:10:10:2c:6f:40:49:73:1e:a7: 29:ab:66:bb:7d:60:be:f9:59:3d:73:5c:6f:60:ff: a2:56:10:8e:63:f3:70:02:e1:32:95:cd:a4:e3:2e: 15:27:e9:3e:ad:fa:e5:53:3a:a7:a5:96:ab:7d:64: 5e:ac:32:62:50:72:db:ee:0a:4c:14:ed:d9:9d:37: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5B:06:FE:C7:12:26:FC:F1:A5:AD:D6:2A:5E:51:64:0F:EC:C5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:15:6b:2a:82:79:94:f4:b8:62:c7:91:27:88:cd:eb:c3:91: ba:ab:b9:d1:aa:b8:62:d1:66:ff:bc:4b:23:ad:e4:11:07:4e: 0d:42:1f:9a:89:ed:21:07:fa:5f:2e:40:80:d9:fd:06:10:60: 60:1b:61:9b:20:2c:5c:57:7e:05:4f:7b:a6:6e:55:e3:64:df: 22:bd:3e:5a:37:cc:43:27:cf:45:49:22:63:5c:e8:b0:c9:71: b1:3b:7b:05:1e:a5:b5:80:ee:6b:9b:04:a8:d1:af:51:d9:cf: e4:1d:1a:f5:1a:5b:6e:05:79:27:88:78:1f:06:35:5f:2a:07: 7b:db:10:ad:fc:0b:ad:68:24:86:8e:85:02:08:92:01:08:c0: 8d:83:3d:f7:50:91:8b:5a:71:5d:c7:a5:79:9e:5a:fb:41:f8: 82:38:9a:d6:64:50:cd:61:b9:c2:5a:ba:7a:7f:94:26:53:ce: 57:1b:57:a4:4f:e7:12:bd:9f:c0:ba:e7:b3:37:b4:eb:a2:3a: c6:cb:85:08:fe:47:8c:f5:11:5a:85:e8:9e:3b:a5:a8:66:be: 8a:bd:8b:2e:78:43:e7:af:7a:a7:cc:57:ee:81:43:21:5e:a5: 0b:29:bd:31:eb:52:40:7d:c8:69:7c:3f:9c:89:78:48:f1:a9: b5:a0:74:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG267XoYkjMiSRh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZmFjNTA1OTctNjMyOC00ZDY5LWE2NjMtYzQ5M2I0Yjg4ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0KCV7KqJA+IOwJ/OBbmJ/nrSk+EPeLNKvAK +7kOrxqrE46Ybr4b1Qe6I9HXlwhmaNZLXbnhdVf4UblW1Zp0m5TsqAcNpLdT0dT0 fX6Zs47zyQqx8AU0EORAQfZomHzBNDJajc05OB8boEbChrCRr9s+8y+rk1akUmJ/ E5Wk9GVdbIy6DjSi3ZACAve+Ag+6Txn0MsM7PIkEo00sLYwy4TodA4Jp2ZaaIbGA 04thyypppF6fb7waf68QECxvQElzHqcpq2a7fWC++Vk9c1xvYP+iVhCOY/NwAuEy lc2k4y4VJ+k+rfrlUzqnpZarfWRerDJiUHLb7gpMFO3ZnTfyYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBbBv7HEib88aWt1ipeUWQP7MXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTZhMTc3NWItYzlhNi0z MWFhLTkwNDAtYjM0MDA5ZDlmMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQVayqCeZT0uGLHkSeIzevDkbqrudGquGLRZv+8SyOt5BEHTg1CH5qJ 7SEH+l8uQIDZ/QYQYGAbYZsgLFxXfgVPe6ZuVeNk3yK9Plo3zEMnz0VJImNc6LDJ cbE7ewUepbWA7mubBKjRr1HZz+QdGvUaW24FeSeIeB8GNV8qB3vbEK38C61oJIaO hQIIkgEIwI2DPfdQkYtacV3HpXmeWvtB+II4mtZkUM1hucJaunp/lCZTzlcbV6RP 5xK9n8C657M3tOuiOsbLhQj+R4z1EVqF6J47pahmvoq9iy54Q+eveqfMV+6BQyFe pQspvTHrUkB9yGl8P5yJeEjxqbWgdLY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:57 2025 by rpki-client