$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738ca01d-c305-33d7-9286-16441f2c8e35.roa File: 738ca01d-c305-33d7-9286-16441f2c8e35.roa (raw, json) Hash identifier: mVm/Ja8Zfm4oBGrHSZ66J9D1QFCkhTpnqe280VBrMoI= Subject key identifier: BB:B3:C9:CF:1F:9E:AC:55:07:F7:D2:85:34:9E:AE:04:ED:A7:49:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB9B879EF6E215BFF01D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738ca01d-c305-33d7-9286-16441f2c8e35.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:9b:87:9e:f6:e2:15:bf:f0:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1ea0790e-d0a4-4b7b-aeba-9cdfa8cd4c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0a:ef:c4:5c:b9:8c:66:00:e4:77:b8:f0:ad: 7a:f7:a4:d3:ec:cc:1c:94:aa:40:e5:ab:91:4a:c8: e6:8b:1d:b2:c8:d4:91:1c:ef:36:a9:90:f7:5a:79: 05:0c:6e:28:b4:dc:a6:ea:83:09:72:21:b0:37:c1: af:41:ee:d1:f0:94:a8:d4:27:82:de:7b:2d:4c:ec: 33:0b:b3:9f:59:fc:9b:b8:50:0d:95:65:3f:d9:9e: 77:23:fd:f0:21:bb:16:8a:85:59:7e:23:0b:21:8e: ef:a0:bb:93:d1:b7:c5:e9:e1:9a:12:99:24:e0:ee: a9:21:0e:87:fc:e0:4e:d9:4d:b6:ce:d6:d0:84:87: 6d:c7:c8:06:1e:4c:b9:a8:cf:e0:72:4b:79:bd:f3: 38:80:af:eb:27:55:04:d6:68:33:3a:4b:31:ee:05: af:48:83:3b:55:20:2f:9b:03:44:22:8d:e5:be:82: 25:2f:a7:3b:67:d0:77:fa:79:c3:6e:55:f5:e8:12: f0:a1:c4:95:be:4b:74:04:02:1e:9e:27:2b:63:ca: 8e:ce:a9:0a:8b:f1:43:6d:f7:f2:3f:16:10:cf:cc: db:9a:4b:0b:23:ce:3f:d5:d1:61:ee:15:1a:fc:99: b1:a2:8b:ce:f8:56:3b:ec:36:17:66:d9:13:89:2a: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B3:C9:CF:1F:9E:AC:55:07:F7:D2:85:34:9E:AE:04:ED:A7:49:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738ca01d-c305-33d7-9286-16441f2c8e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:70:b9:56:b6:7a:56:77:78:74:d4:4c:fd:49:e3:57:8c:f3: c7:a1:e7:68:48:30:34:e1:8f:56:4f:cd:f2:89:dd:f6:f9:f9: 85:d5:fa:a8:fe:8e:13:1b:7a:c3:50:32:f3:1b:a7:a9:01:1f: b6:b9:b8:2f:54:2c:8d:91:2c:bc:d9:f1:09:4b:ab:84:63:7a: bf:73:ed:a1:22:06:b3:36:2c:c5:8a:89:61:f2:d6:28:fe:c9: 44:68:d2:af:1f:d3:95:2d:58:9c:b9:59:e5:74:1f:bc:c1:7e: 11:79:91:73:9b:d1:00:b5:d5:91:c8:0c:fe:64:75:47:72:eb: 9a:e7:c6:41:36:31:c7:e0:a1:77:16:2c:ec:6a:33:25:2b:2d: ca:6d:1f:0c:b7:e1:a7:30:fc:aa:56:5f:42:15:6f:7c:3f:91: 48:80:86:0f:35:a4:17:04:e1:7d:d3:02:11:d0:30:ac:42:af: 8f:8e:4a:1f:17:2f:27:ee:58:6f:4b:24:89:7a:b9:c8:4a:55: f9:d3:9c:09:21:3c:cd:68:fa:3e:39:4e:9b:16:eb:bd:2a:7c: 50:69:f7:be:a7:03:98:0b:d5:16:ce:fa:36:dc:45:70:72:51: 60:01:e9:61:9d:95:6b:8d:25:58:e6:d8:10:76:7a:c8:45:91: de:b9:ee:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25uHnvbiFb/wHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MWVhMDc5MGUtZDBhNC00YjdiLWFlYmEtOWNkZmE4Y2Q0Yzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QrvxFy5jGYA5He48K1696TT7MwclKpA5auR Ssjmix2yyNSRHO82qZD3WnkFDG4otNym6oMJciGwN8GvQe7R8JSo1CeC3nstTOwz C7OfWfybuFANlWU/2Z53I/3wIbsWioVZfiMLIY7voLuT0bfF6eGaEpkk4O6pIQ6H /OBO2U22ztbQhIdtx8gGHky5qM/gckt5vfM4gK/rJ1UE1mgzOksx7gWvSIM7VSAv mwNEIo3lvoIlL6c7Z9B3+nnDblX16BLwocSVvkt0BAIenicrY8qOzqkKi/FDbffy PxYQz8zbmksLI84/1dFh7hUa/JmxoovO+FY77DYXZtkTiSpytwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuzyc8fnqxVB/fShTSergTtp0lXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzM4Y2EwMWQtYzMwNS0z M2Q3LTkyODYtMTY0NDFmMmM4ZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdwuVa2elZ3eHTUTP1J41eM88eh52hIMDThj1ZPzfKJ3fb5+YXV+qj+ jhMbesNQMvMbp6kBH7a5uC9ULI2RLLzZ8QlLq4Rjer9z7aEiBrM2LMWKiWHy1ij+ yURo0q8f05UtWJy5WeV0H7zBfhF5kXOb0QC11ZHIDP5kdUdy65rnxkE2McfgoXcW LOxqMyUrLcptHwy34acw/KpWX0IVb3w/kUiAhg81pBcE4X3TAhHQMKxCr4+OSh8X LyfuWG9LJIl6uchKVfnTnAkhPM1o+j45TpsW670qfFBp976nA5gL1RbO+jbcRXBy UWAB6WGdlWuNJVjm2BB2eshFkd657rY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:31:52 2025 by rpki-client