$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa File: 5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa (raw, json) Hash identifier: Sx36FXI7jCQWc5oZGrtcoX4z/5YBJ2Kn9E9lwZgboTM= Subject key identifier: DC:AB:01:AE:26:50:9D:F1:99:E9:1F:DE:58:8C:66:4B:A4:A7:C3:7D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBA1DBF9C436C7CE7D9D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:a1:db:f9:c4:36:c7:ce:7d:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=0c0a07fd-0fc3-41ed-a6a1-dd52d9ebf967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7b:8b:c9:58:37:cf:21:62:56:74:7a:21:14: b0:8f:ab:24:7e:8a:a5:ad:dc:b6:68:8a:bb:d9:af: ef:ba:e4:3c:df:21:8c:64:0a:f5:d7:2d:8f:5f:aa: e2:db:f6:47:44:89:9e:99:bd:a0:1d:22:22:72:ed: be:3c:1e:92:3f:1d:01:df:14:db:a1:46:9c:a4:d6: ba:9f:55:f7:6e:ae:42:5a:f8:f6:c1:74:60:ec:87: a8:59:96:cf:83:9c:72:56:c1:d6:80:c9:17:f6:d3: ad:eb:9e:2a:c3:67:f1:2e:43:c3:c5:7e:a0:27:3f: c4:a5:46:da:12:83:1f:bf:07:18:42:e1:62:89:4c: 7f:91:13:51:3d:7e:cb:c9:00:ae:78:a2:bb:2e:45: f7:39:08:76:ff:9f:1d:41:06:1f:8f:a1:09:55:28: 8c:1f:a8:de:6b:70:00:e1:25:ef:78:42:fd:00:73: 30:48:7d:04:c7:43:aa:26:48:b9:2b:60:0c:34:a9: 47:12:4f:cd:af:0c:9d:e4:91:95:b3:c0:86:be:4b: fc:ed:83:49:72:d5:ff:51:07:1f:37:e8:99:00:00: c9:63:bb:50:b7:b1:c3:e3:d8:39:4f:83:91:21:be: 08:97:7b:43:8b:39:2e:6f:5a:5b:e2:83:3c:4d:75: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AB:01:AE:26:50:9D:F1:99:E9:1F:DE:58:8C:66:4B:A4:A7:C3:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:a0:c5:22:84:e2:56:8d:75:cd:48:16:74:00:1a:e4:12:8e: 2b:08:d1:f9:bc:ae:a1:a2:1c:9f:08:f1:c6:dd:cb:ed:67:29: fc:db:97:4a:e4:4f:42:8d:98:e1:9b:02:85:1c:69:e7:0b:b3: a3:7b:7a:6c:71:f7:44:d3:33:20:67:69:24:d0:d5:42:9a:38: f0:94:c8:a2:51:73:44:2f:2b:9f:c1:73:7f:46:52:e1:a9:5b: 35:72:1e:0e:c7:00:bf:49:2e:ed:1a:09:6a:d3:d4:b8:ae:c8: cb:68:9e:cd:b8:24:c8:f6:1c:94:38:e3:20:da:47:f4:94:d0: b5:ea:2e:16:54:89:2d:1f:fe:19:0a:20:e5:48:d4:4e:e5:e4: 55:ab:82:1f:75:e0:d0:8a:ae:ee:e8:d0:5c:16:13:09:80:b3: 1a:5b:a8:4b:8a:d9:77:58:ce:bf:9f:95:55:f4:70:a7:94:69: 93:43:cb:00:18:7f:b5:3d:e6:5e:2f:31:ef:66:22:36:8e:cd: 31:bb:99:24:49:47:9c:d6:93:b1:2c:b6:70:de:73:99:e6:65: 4d:52:b7:51:dc:c3:d5:1b:40:9f:de:94:09:c5:89:f1:0f:21: c8:cd:ce:ce:60:f9:fe:2c:c8:ea:cd:f8:8e:d7:89:71:eb:50: f4:d7:f2:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG26Hb+cQ2x859nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MGMwYTA3ZmQtMGZjMy00MWVkLWE2YTEtZGQ1MmQ5ZWJmOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XuLyVg3zyFiVnR6IRSwj6skfoqlrdy2aIq7 2a/vuuQ83yGMZAr11y2PX6ri2/ZHRImemb2gHSIicu2+PB6SPx0B3xTboUacpNa6 n1X3bq5CWvj2wXRg7IeoWZbPg5xyVsHWgMkX9tOt654qw2fxLkPDxX6gJz/EpUba EoMfvwcYQuFiiUx/kRNRPX7LyQCueKK7LkX3OQh2/58dQQYfj6EJVSiMH6jea3AA 4SXveEL9AHMwSH0Ex0OqJki5K2AMNKlHEk/Nrwyd5JGVs8CGvkv87YNJctX/UQcf N+iZAADJY7tQt7HD49g5T4ORIb4Il3tDizkub1pb4oM8TXUakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyrAa4mUJ3xmekf3liMZkukp8N9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTkzMzg4NGUtZTFkZC0z YWI1LTlmMmYtNjFlM2QyMDIxZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWgxSKE4laNdc1IFnQAGuQSjisI0fm8rqGiHJ8I8cbdy+1nKfzbl0rk T0KNmOGbAoUcaecLs6N7emxx90TTMyBnaSTQ1UKaOPCUyKJRc0QvK5/Bc39GUuGp WzVyHg7HAL9JLu0aCWrT1LiuyMtons24JMj2HJQ44yDaR/SU0LXqLhZUiS0f/hkK IOVI1E7l5FWrgh914NCKru7o0FwWEwmAsxpbqEuK2XdYzr+flVX0cKeUaZNDywAY f7U95l4vMe9mIjaOzTG7mSRJR5zWk7EstnDec5nmZU1St1Hcw9UbQJ/elAnFifEP IcjNzs5g+f4syOrN+I7XiXHrUPTX8nI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:43:24 2025 by rpki-client