$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa File: 5f1246fe-5889-33b0-9a38-bc38ab95466d.roa (raw, json) Hash identifier: tQLzAvY1biFGSb1hW9JyOMMJb7MDzEa6CzXylDqV55U= Subject key identifier: E3:4C:43:6C:FD:06:1C:F2:01:E9:FB:96:A1:6C:5E:49:93:A5:BC:52 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB7F9D23BEF93C94652780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 70.32.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:7f:9d:23:be:f9:3c:94:65:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=167c20b2-657f-4a5e-ab57-8da2a35213f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:86:7c:93:cd:20:ce:35:0d:2f:9e:cc:02: 31:74:38:42:2f:67:3c:d1:98:ff:ef:6c:f4:bf:3d: a5:3f:29:03:e4:15:94:1d:30:bc:ad:a0:0c:4e:fd: a6:16:6f:fe:b8:4f:72:99:40:45:a8:53:2f:d0:56: 16:5e:0b:1c:32:18:91:65:19:c4:e0:11:cd:3a:b5: 0f:84:be:e6:48:6b:94:0f:45:69:a5:3d:31:03:10: dc:26:7b:e3:d0:93:ef:75:62:68:2d:cb:3b:d5:4a: 6c:32:d9:b9:bb:14:68:2d:b8:81:e7:2a:37:e8:23: f4:6e:37:bf:86:29:5a:37:45:77:c2:1e:aa:b2:22: ba:75:de:b6:3e:50:a2:b1:b6:fe:8d:81:ed:85:d3: bb:90:f9:15:39:32:b3:fe:b4:f4:49:f6:4a:8d:54: 76:fa:7e:e3:3e:34:d8:6c:e7:c6:13:07:5b:f0:26: cc:ce:e9:42:34:a0:98:05:43:e2:38:fc:91:79:25: 70:db:99:03:f6:a8:53:a3:82:b4:a9:76:2d:0f:68: dc:8d:59:5e:05:89:af:1d:8c:15:45:c2:9f:c0:55: e2:29:ec:ff:c8:51:c3:bc:b6:2e:9a:71:bd:ff:42: 8b:39:40:63:fe:75:18:2d:cf:8f:59:83:34:47:5a: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4C:43:6C:FD:06:1C:F2:01:E9:FB:96:A1:6C:5E:49:93:A5:BC:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:fa:47:c3:47:ab:76:4e:f0:26:46:ad:20:8b:d3:f8:e4:e2: ae:7b:63:bd:88:39:cd:68:4c:ce:90:e4:e0:d0:7c:0d:4b:f4: 4c:5e:e0:a0:4c:db:a3:d8:d3:2c:ee:7c:e4:c3:db:67:53:bf: 66:a1:af:ef:a5:da:b1:2c:b7:ab:50:f7:da:36:84:86:74:40: e7:da:91:bd:5e:32:67:50:d1:78:9a:75:2f:f0:82:27:56:59: d3:83:0d:5a:e9:f2:bd:e4:86:b9:62:17:10:39:de:df:ff:cc: 5a:44:40:40:b0:ec:de:51:a3:38:d2:3a:8f:b5:e2:2f:49:54: d4:ff:b3:cd:94:bc:4c:44:cf:c1:e6:b8:e9:b2:4f:68:c6:61: 44:23:6d:4c:07:08:7a:5a:6b:33:9b:8e:a5:3f:46:fa:4a:38: 2a:45:e0:69:ec:8f:40:45:cf:1a:cd:e8:28:85:3c:a7:ed:68: e3:8c:27:38:e8:19:86:ac:9c:bc:db:85:4d:42:54:48:87:42: cf:37:fb:22:a0:71:0b:b3:b7:6e:cd:15:91:30:2e:d7:d0:3f: 1a:ae:14:65:07:82:af:0f:e0:d3:59:a5:a2:96:f6:47:b7:cf: 06:dc:b5:96:15:ab:b6:56:0f:2b:5b:12:9c:c3:b9:41:d7:b5: 9c:83:fb:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23+dI775PJRlJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MTY3YzIwYjItNjU3Zi00YTVlLWFiNTctOGRhMmEzNTIxM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj56GfJPNIM41DS+ezAIxdDhCL2c80Zj/72z0 vz2lPykD5BWUHTC8raAMTv2mFm/+uE9ymUBFqFMv0FYWXgscMhiRZRnE4BHNOrUP hL7mSGuUD0VppT0xAxDcJnvj0JPvdWJoLcs71UpsMtm5uxRoLbiB5yo36CP0bje/ hilaN0V3wh6qsiK6dd62PlCisbb+jYHthdO7kPkVOTKz/rT0SfZKjVR2+n7jPjTY bOfGEwdb8CbMzulCNKCYBUPiOPyReSVw25kD9qhTo4K0qXYtD2jcjVleBYmvHYwV RcKfwFXiKez/yFHDvLYumnG9/0KLOUBj/nUYLc+PWYM0R1omPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONMQ2z9BhzyAen7lqFsXkmTpbxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWYxMjQ2ZmUtNTg4OS0z M2IwLTlhMzgtYmMzOGFiOTU0NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr6R8NHq3ZO8CZGrSCL0/jk4q57Y72IOc1oTM6Q5ODQfA1L9Exe4KBM 26PY0yzufOTD22dTv2ahr++l2rEst6tQ99o2hIZ0QOfakb1eMmdQ0XiadS/wgidW WdODDVrp8r3khrliFxA53t//zFpEQECw7N5RozjSOo+14i9JVNT/s82UvExEz8Hm uOmyT2jGYUQjbUwHCHpaazObjqU/RvpKOCpF4Gnsj0BFzxrN6CiFPKftaOOMJzjo GYasnLzbhU1CVEiHQs83+yKgcQuzt27NFZEwLtfQPxquFGUHgq8P4NNZpaKW9ke3 zwbctZYVq7ZWDytbEpzDuUHXtZyD+/o= -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:45 2025 by rpki-client