$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa File: 694ba017-8f45-370a-b378-b1d875587774.roa (raw, json) Hash identifier: nxbFbVktCm2O24AieZVHVS/4CRbRKIoCH1+jaxYKsrk= Subject key identifier: CB:68:2A:5A:47:C8:03:7E:9E:88:C3:F8:F1:AC:77:50:99:33:F9:24 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBD759FE930577312D9E40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:d7:59:fe:93:05:77:31:2d:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=4a8aa16d-f973-4fd9-a6ff-2e8851443b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:6d:97:57:84:c2:a6:c9:d2:90:08:09:80: d8:d3:8a:a8:51:33:b9:0a:be:fc:54:d5:79:dc:94: 05:c7:07:53:52:16:3c:15:51:66:1b:a7:a5:37:16: 52:cc:1e:13:28:02:d7:22:11:24:61:05:4f:62:3b: bc:5d:ee:7c:66:30:4a:89:0a:c3:d8:51:eb:a0:1f: cf:f8:de:b3:b0:ff:fa:09:64:9b:19:62:5b:4a:ed: b8:ba:4e:e2:7b:42:d2:b4:0b:51:c0:8c:22:b4:fc: 45:0d:25:09:13:df:fc:a2:b9:8a:e6:a0:cb:61:05: 54:2c:b5:26:3b:a0:c2:29:e7:50:dc:f9:d6:9d:53: 37:8b:4b:cd:00:9a:14:ee:dc:46:9a:77:09:64:2e: 53:75:96:86:e2:86:be:06:8d:f7:49:7f:8a:46:d0: b3:0b:93:78:0f:70:de:a8:c6:35:e5:93:07:02:bb: 45:7c:70:1c:10:3c:3c:bb:5d:b8:82:3b:76:c9:d7: 56:5e:26:4b:ba:88:8f:25:61:2e:9f:55:b8:46:7e: d6:30:cc:d2:73:f3:e5:a6:cb:d5:6e:57:92:a6:ab: 76:a4:89:70:f1:cf:4a:3d:8a:46:a5:e7:24:b4:13: ae:62:56:e9:a9:4e:5a:26:c6:48:f9:87:61:22:ad: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:68:2A:5A:47:C8:03:7E:9E:88:C3:F8:F1:AC:77:50:99:33:F9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:dd:f5:39:82:ee:d5:a1:ee:1b:f1:14:cf:2f:c0:0b:f5:bf: 6f:45:88:23:db:0a:2d:a1:45:22:0a:fb:5e:5b:85:dc:05:f2: d4:d1:7f:c6:5b:09:d2:82:3e:a6:01:ff:24:5a:a6:dd:94:f0: d9:ed:0e:f2:84:ef:1f:2f:fd:48:7c:41:fd:57:ee:61:9b:89: 44:a5:02:d9:8d:02:a3:ae:4e:be:21:01:67:86:a2:54:35:4b: 1e:df:62:b2:4c:a2:91:44:d2:ff:05:b7:16:82:0b:a7:ef:89: b8:58:df:5d:b5:43:44:51:2c:2b:b3:8c:7a:5c:d4:cd:6b:64: 07:97:f1:2e:1d:09:49:90:da:e9:f3:30:33:22:1e:4a:5a:70: 78:75:a2:38:f0:0b:ae:20:d5:a1:c3:25:0e:a9:14:54:da:70: 6e:0d:0d:38:10:64:ab:e1:e0:20:d6:ab:07:c5:05:72:99:1b: 7f:7c:e3:0e:96:f2:42:91:61:3a:c5:08:3b:d2:d3:f8:4a:72: 98:33:5f:10:3f:01:5c:17:b4:83:e1:ae:a1:59:59:fb:ad:fa: 1b:38:c3:29:5d:9b:a2:a5:06:21:e1:e7:52:74:1b:a6:f1:86: 1b:82:1d:23:62:d2:5a:d3:97:18:fc:7f:2d:c6:6a:da:c8:71: a9:b7:1d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG29dZ/pMFdzEtnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NGE4YWExNmQtZjk3My00ZmQ5LWE2ZmYtMmU4ODUxNDQzYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiJtl1eEwqbJ0pAICYDY04qoUTO5Cr78VNV5 3JQFxwdTUhY8FVFmG6elNxZSzB4TKALXIhEkYQVPYju8Xe58ZjBKiQrD2FHroB/P +N6zsP/6CWSbGWJbSu24uk7ie0LStAtRwIwitPxFDSUJE9/8ormK5qDLYQVULLUm O6DCKedQ3PnWnVM3i0vNAJoU7txGmncJZC5TdZaG4oa+Bo33SX+KRtCzC5N4D3De qMY15ZMHArtFfHAcEDw8u124gjt2yddWXiZLuoiPJWEun1W4Rn7WMMzSc/PlpsvV bleSpqt2pIlw8c9KPYpGpecktBOuYlbpqU5aJsZI+YdhIq0jiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtoKlpHyAN+nojD+PGsd1CZM/kkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjk0YmEwMTctOGY0NS0z NzBhLWIzNzgtYjFkODc1NTg3Nzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPd9TmC7tWh7hvxFM8vwAv1v29FiCPbCi2hRSIK+15bhdwF8tTRf8Zb CdKCPqYB/yRapt2U8NntDvKE7x8v/Uh8Qf1X7mGbiUSlAtmNAqOuTr4hAWeGolQ1 Sx7fYrJMopFE0v8FtxaCC6fvibhY3121Q0RRLCuzjHpc1M1rZAeX8S4dCUmQ2unz MDMiHkpacHh1ojjwC64g1aHDJQ6pFFTacG4NDTgQZKvh4CDWqwfFBXKZG3984w6W 8kKRYTrFCDvS0/hKcpgzXxA/AVwXtIPhrqFZWfut+hs4wyldm6KlBiHh51J0G6bx hhuCHSNi0lrTlxj8fy3GatrIcam3HXs= -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:57 2025 by rpki-client