$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77d27394-8086-304a-bdc4-7aa129f0b398.roa File: 77d27394-8086-304a-bdc4-7aa129f0b398.roa (raw, json) Hash identifier: s+6ih/u/3NHcQiF8+Akq1v/grQwGNcmgGbzt0NKmx3Y= Subject key identifier: B8:9F:0B:61:67:6E:8E:7D:17:21:84:42:BC:A8:56:A8:7D:66:D2:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797B157149AEE42DBA24300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77d27394-8086-304a-bdc4-7aa129f0b398.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b1:57:14:9a:ee:42:db:a2:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=7e15cd72-57a3-4029-9341-1d2219d55cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cd:87:7a:3a:10:cc:50:a9:89:d9:c0:12:c1: fe:68:9b:12:ad:ba:2b:27:10:43:83:c5:f0:96:ee: e1:fd:05:4a:fc:f1:41:8d:18:52:94:f6:e4:c9:6b: e6:ef:f2:c8:a4:28:98:13:ea:1c:56:a6:a7:ce:e8: e2:fe:33:31:c8:cd:4b:53:e1:4e:76:70:a0:60:6e: 43:28:59:62:0e:dd:ea:7d:2a:37:25:04:5f:56:84: 63:e7:7f:a1:9c:5c:b5:ea:ae:a8:29:68:71:d6:46: fb:3c:8e:d4:96:50:fd:21:01:0a:29:9c:51:d3:70: 21:32:8c:85:e7:d4:4e:07:b1:f5:70:a8:9f:2b:cc: 6a:7b:a5:41:78:cb:4b:71:da:ac:bc:aa:47:e6:b5: 7d:10:25:12:81:d1:1a:e8:f4:33:80:61:2d:7b:8d: a1:6b:63:64:03:83:1a:d4:3d:f9:aa:07:bd:94:5c: e5:fe:98:09:b4:ab:99:40:f5:6d:ab:a4:ce:98:4c: 13:92:90:cc:02:21:fb:20:58:a0:f3:0f:dd:24:11: 0a:c0:65:f9:95:8d:d5:d3:13:30:c0:2f:8b:43:73: d7:b1:af:c6:54:2e:78:91:5d:41:5e:ef:9e:b6:55: 64:4c:48:40:c1:9a:ec:46:0f:af:da:19:fd:13:a7: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:0B:61:67:6E:8E:7D:17:21:84:42:BC:A8:56:A8:7D:66:D2:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77d27394-8086-304a-bdc4-7aa129f0b398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5c:2d:ad:79:47:c6:21:ff:4a:b7:b5:5c:91:65:9c:ba:ea: 96:76:e3:d4:3f:53:d8:a2:34:6d:07:98:b0:88:8b:be:4e:5f: eb:ac:2f:a7:7b:6d:81:5e:cc:6c:e6:50:6c:0a:c0:83:8b:f9: 2a:55:82:62:56:56:c8:57:59:ec:8e:27:e0:79:a9:fa:7d:02: 8e:6b:be:9c:8d:6d:32:cf:b2:17:b4:57:ff:23:60:96:32:df: 35:c3:53:89:48:9a:40:8b:be:35:2b:93:9f:9e:c2:73:da:a7: 4a:d7:65:d8:3e:e8:be:28:50:72:6b:b2:a3:5c:9b:c5:3a:7c: e3:12:cc:e5:d5:4f:6c:88:59:a5:85:99:ba:53:a3:84:4c:4a: 6a:dc:24:bd:8c:df:e1:70:22:a5:01:72:69:18:4b:fc:c6:3c: f4:ff:35:d6:7b:43:b4:6c:7d:19:0f:d7:17:97:53:d8:8e:6e: ba:1d:cf:bc:a7:ae:97:34:d1:66:61:a6:a8:9c:42:d1:30:17: ce:50:e7:b8:6f:d5:ba:fb:ed:76:47:52:b4:e2:fd:55:51:82: 39:e3:67:90:7b:26:08:9b:b9:88:58:5d:8d:2b:d2:3a:13:a1: fb:47:5a:aa:7f:9c:21:6e:b6:24:85:94:f2:6d:db:ac:6c:fd: 96:bc:55:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7FXFJruQtuiQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk N2UxNWNkNzItNTdhMy00MDI5LTkzNDEtMWQyMjE5ZDU1Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM2HejoQzFCpidnAEsH+aJsSrborJxBDg8Xw lu7h/QVK/PFBjRhSlPbkyWvm7/LIpCiYE+ocVqanzuji/jMxyM1LU+FOdnCgYG5D KFliDt3qfSo3JQRfVoRj53+hnFy16q6oKWhx1kb7PI7UllD9IQEKKZxR03AhMoyF 59ROB7H1cKifK8xqe6VBeMtLcdqsvKpH5rV9ECUSgdEa6PQzgGEte42ha2NkA4Ma 1D35qge9lFzl/pgJtKuZQPVtq6TOmEwTkpDMAiH7IFig8w/dJBEKwGX5lY3V0xMw wC+LQ3PXsa/GVC54kV1BXu+etlVkTEhAwZrsRg+v2hn9E6c8bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLifC2Fnbo59FyGEQryoVqh9ZtIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzdkMjczOTQtODA4Ni0z MDRhLWJkYzQtN2FhMTI5ZjBiMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdcLa15R8Yh/0q3tVyRZZy66pZ249Q/U9iiNG0HmLCIi75OX+usL6d7 bYFezGzmUGwKwIOL+SpVgmJWVshXWeyOJ+B5qfp9Ao5rvpyNbTLPshe0V/8jYJYy 3zXDU4lImkCLvjUrk5+ewnPap0rXZdg+6L4oUHJrsqNcm8U6fOMSzOXVT2yIWaWF mbpTo4RMSmrcJL2M3+FwIqUBcmkYS/zGPPT/NdZ7Q7RsfRkP1xeXU9iObrodz7yn rpc00WZhpqicQtEwF85Q57hv1br77XZHUrTi/VVRgjnjZ5B7JgibuYhYXY0r0joT oftHWqp/nCFutiSFlPJt26xs/Za8VUc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:34:14 2025 by rpki-client