$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa File: 76a5dcab-2690-3314-84c7-093cd93650a1.roa (raw, json) Hash identifier: ZST/+smfSzzi3AqpH4pcZ6z02pW2TRcOt/1nqTMcx3o= Subject key identifier: 45:68:3D:97:DB:9A:61:27:A1:57:65:A6:BC:0D:B5:11:E2:92:63:CC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBCF3C264237EC3BB14080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:cf:3c:26:42:37:ec:3b:b1:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b3b7c30c-56d9-4255-b89f-f94aff8e0c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:ac:88:4f:43:28:fa:ff:60:1e:51:d8:fa: 26:71:37:38:0b:e1:97:d4:4b:00:07:a9:36:08:e2: 95:4c:7f:42:03:12:e6:fc:99:f2:4b:08:7e:95:f6: b9:48:92:a4:4c:60:5a:f3:49:77:93:fe:6e:6b:76: ef:78:ba:f7:4f:ae:0e:a5:75:5d:e3:ad:03:db:3d: 87:ef:d6:ef:3f:ac:08:20:fb:1d:d1:f7:c0:b9:09: ed:3a:5e:3e:e9:df:82:66:7e:cf:a0:9d:0f:67:b0: 0d:b6:7d:7c:44:5d:4c:7c:90:c8:a8:75:63:ae:ee: f5:9b:20:2c:45:c6:e7:36:79:2e:a4:1e:16:ae:8a: d1:54:8d:8f:c0:76:ae:da:22:59:07:c7:18:d2:ee: dc:1f:f9:28:79:66:24:59:d5:a9:da:d8:a2:51:67: 01:b4:fd:9b:78:16:58:f2:72:e8:3d:07:9c:60:94: c5:ca:e8:c7:10:62:7c:14:e3:3d:c5:64:d8:69:7d: 9a:7a:86:5d:bb:bb:ec:50:e0:1b:b9:25:3f:3d:6a: f5:14:43:55:64:4e:85:85:ab:76:fa:e5:e9:18:be: 8e:19:da:89:53:03:dc:3d:c0:56:81:2f:60:ef:0d: 15:36:45:ba:46:cd:43:b5:c0:59:f4:25:f3:e4:c9: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:68:3D:97:DB:9A:61:27:A1:57:65:A6:BC:0D:B5:11:E2:92:63:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d1:e4:b4:cb:5a:b2:8e:dd:a7:86:ad:54:fd:80:92:61:d9: fd:bc:f4:7e:1f:2c:de:56:d5:48:a4:38:73:9b:77:e1:10:3f: 9d:28:50:29:fa:c8:a0:6e:5e:33:f0:47:bd:d4:ec:c5:68:86: 1f:b8:31:47:a9:b9:2e:7f:99:f4:b2:81:be:77:ce:30:ef:8b: b5:1e:f5:0e:aa:69:48:e8:86:70:ed:1b:0f:31:93:1d:19:8a: a8:54:5d:78:34:d1:c7:8c:d4:48:8f:29:47:4c:e1:77:09:49: 39:b9:9c:29:84:7a:5f:a5:25:b1:44:6f:4f:e9:2c:4d:02:b4: 97:a7:9c:45:ff:04:22:24:80:b0:2c:02:9e:2a:43:fc:80:7f: 6e:93:51:dd:80:71:32:d9:56:04:88:c1:c2:9b:9e:f7:64:fd: 85:6b:83:0a:a3:21:c1:3c:1d:a4:ea:6e:dc:ac:48:37:3a:c3: c5:92:f4:0f:ba:5f:fa:c3:8e:d1:c8:a8:26:fe:de:22:3d:05: c1:3b:ad:a4:d6:d9:d4:3e:15:77:87:de:19:57:f9:32:6f:2b: f8:ae:84:b3:f2:e0:12:5f:8b:e7:53:a6:52:e1:a3:52:09:56: 65:30:bf:17:e3:af:cd:5c:66:1e:35:6d:9d:88:7e:ed:85:6b: ff:c4:62:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2888JkI37DuxQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjNiN2MzMGMtNTZkOS00MjU1LWI4OWYtZjk0YWZmOGUwYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxusiE9DKPr/YB5R2PomcTc4C+GX1EsAB6k2 COKVTH9CAxLm/JnySwh+lfa5SJKkTGBa80l3k/5ua3bveLr3T64OpXVd460D2z2H 79bvP6wIIPsd0ffAuQntOl4+6d+CZn7PoJ0PZ7ANtn18RF1MfJDIqHVjru71myAs RcbnNnkupB4WrorRVI2PwHau2iJZB8cY0u7cH/koeWYkWdWp2tiiUWcBtP2beBZY 8nLoPQecYJTFyujHEGJ8FOM9xWTYaX2aeoZdu7vsUOAbuSU/PWr1FENVZE6Fhat2 +uXpGL6OGdqJUwPcPcBWgS9g7w0VNkW6Rs1DtcBZ9CXz5MmrEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVoPZfbmmEnoVdlprwNtRHikmPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzZhNWRjYWItMjY5MC0z MzE0LTg0YzctMDkzY2Q5MzY1MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7R5LTLWrKO3aeGrVT9gJJh2f289H4fLN5W1UikOHObd+EQP50oUCn6 yKBuXjPwR73U7MVohh+4MUepuS5/mfSygb53zjDvi7Ue9Q6qaUjohnDtGw8xkx0Z iqhUXXg00ceM1EiPKUdM4XcJSTm5nCmEel+lJbFEb0/pLE0CtJennEX/BCIkgLAs Ap4qQ/yAf26TUd2AcTLZVgSIwcKbnvdk/YVrgwqjIcE8HaTqbtysSDc6w8WS9A+6 X/rDjtHIqCb+3iI9BcE7raTW2dQ+FXeH3hlX+TJvK/iuhLPy4BJfi+dTplLho1IJ VmUwvxfjr81cZh41bZ2Ifu2Fa//EYrg= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:57 2025 by rpki-client