$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa File: 6801e350-c9f9-3400-a69b-b70a48ee4a10.roa (raw, json) Hash identifier: eo5vMO7CdcSrHiqfTBR6h0R9w+KEiu9LkPCkjWI/zT4= Subject key identifier: E5:6D:F2:9A:EC:03:65:1D:18:53:7F:CB:B2:91:26:AF:38:AC:9B:25 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB9A2E56D94226B30BCE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9a:2e:56:d9:42:26:b3:0b:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ce2a56e8-dcde-40f1-b37f-d1d17703d5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d5:84:86:34:53:80:3c:1d:56:60:59:f8:b5: e6:25:ef:f3:b0:ce:dd:28:7d:1e:7f:8d:11:81:fc: 27:0e:9c:21:97:c1:08:8c:75:ff:2c:36:29:3b:aa: 7a:51:e7:98:c0:13:c6:77:5e:36:b4:ae:40:10:7e: 58:aa:97:a9:11:4c:c7:92:de:b9:4c:d1:99:cd:e9: e4:d2:55:88:b1:63:b6:ca:ef:f2:95:30:d4:95:51: 8c:64:82:5f:39:39:d3:9c:74:72:80:6b:6c:2c:08: c9:f0:34:11:c4:1c:a5:95:0b:10:9c:9e:06:a8:fd: d2:1d:38:4a:69:14:29:69:5b:07:74:a4:8b:d9:aa: 86:87:72:21:37:f5:a6:0c:6d:34:30:a9:6d:c2:24: be:9b:88:5c:bd:bc:7e:ee:de:18:66:c2:69:06:51: c8:39:1f:37:c8:6c:3f:ca:67:b6:da:f3:0e:2e:19: 45:20:25:8e:67:15:2a:00:0d:2b:57:87:b3:c0:34: 4b:eb:e8:5a:01:6a:1e:27:85:89:5a:e1:4d:44:f7: cb:91:64:ef:19:75:54:19:e3:d4:4f:96:6c:c8:02: 6d:bd:66:f8:42:ee:4b:c9:6f:48:29:b5:f9:26:48: 81:0e:92:7a:49:94:26:d3:d1:40:92:2a:4d:a2:ec: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6D:F2:9A:EC:03:65:1D:18:53:7F:CB:B2:91:26:AF:38:AC:9B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:43:58:08:67:5d:f3:2c:5a:47:b3:cd:b1:78:fb:5e:7b:5f: 01:e1:0d:b3:3b:09:2a:3a:b5:59:ec:bb:73:26:68:a3:f4:9d: ce:f7:f7:80:6b:ac:42:e6:d7:13:b3:a6:1b:89:a3:b1:fa:ef: 4c:d4:fb:2b:25:5a:32:51:5f:e8:7d:6a:47:a1:03:e9:0e:d5: 6a:d4:0f:72:e0:9f:83:9f:9d:a6:5e:ad:7c:b0:b4:50:26:9f: 8c:fb:99:3f:31:da:63:f1:35:dc:0d:12:08:4a:68:f0:da:1d: d6:6c:2f:aa:ad:ee:80:e7:6d:e5:e5:21:b9:70:70:1a:87:e1: 70:35:99:4f:69:1a:f4:69:56:2f:56:3c:37:b2:24:11:a7:28: 04:d8:0d:06:3b:d6:65:16:2f:e4:31:d1:c7:29:db:8f:c5:e5: 27:07:5d:48:57:12:ba:56:8a:cb:26:84:bf:96:6c:86:7a:10: 90:69:f0:44:41:12:33:22:42:e2:af:fe:ba:8b:75:a0:8d:de: 15:d5:9c:94:33:29:a6:46:15:81:e8:04:16:df:37:65:e3:40: b4:22:e1:2e:e5:f2:05:6d:04:ba:2d:c4:9f:47:6b:ad:ca:d4: 68:5b:25:83:09:d7:ef:62:f0:d0:e0:9e:7c:ea:31:aa:fe:46: d2:0a:b7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25ouVtlCJrMLzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2UyYTU2ZTgtZGNkZS00MGYxLWIzN2YtZDFkMTc3MDNkNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNWEhjRTgDwdVmBZ+LXmJe/zsM7dKH0ef40R gfwnDpwhl8EIjHX/LDYpO6p6UeeYwBPGd142tK5AEH5YqpepEUzHkt65TNGZzenk 0lWIsWO2yu/ylTDUlVGMZIJfOTnTnHRygGtsLAjJ8DQRxByllQsQnJ4GqP3SHThK aRQpaVsHdKSL2aqGh3IhN/WmDG00MKltwiS+m4hcvbx+7t4YZsJpBlHIOR83yGw/ yme22vMOLhlFICWOZxUqAA0rV4ezwDRL6+haAWoeJ4WJWuFNRPfLkWTvGXVUGePU T5ZsyAJtvWb4Qu5LyW9IKbX5JkiBDpJ6SZQm09FAkipNouwJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVt8prsA2UdGFN/y7KRJq84rJslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjgwMWUzNTAtYzlmOS0z NDAwLWE2OWItYjcwYTQ4ZWU0YTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9DWAhnXfMsWkezzbF4+157XwHhDbM7CSo6tVnsu3MmaKP0nc7394Br rELm1xOzphuJo7H670zU+yslWjJRX+h9akehA+kO1WrUD3Lgn4OfnaZerXywtFAm n4z7mT8x2mPxNdwNEghKaPDaHdZsL6qt7oDnbeXlIblwcBqH4XA1mU9pGvRpVi9W PDeyJBGnKATYDQY71mUWL+Qx0ccp24/F5ScHXUhXErpWissmhL+WbIZ6EJBp8ERB EjMiQuKv/rqLdaCN3hXVnJQzKaZGFYHoBBbfN2XjQLQi4S7l8gVtBLotxJ9Ha63K 1GhbJYMJ1+9i8NDgnnzqMar+RtIKt9Y= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:22 2025 by rpki-client