$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa File: 7badf292-b07f-35cd-bc0c-51d535a17ae4.roa (raw, json) Hash identifier: 4xnrWWO3csx1ATQU6T7eZIvi4xhbpI64/5aAA1YzJK8= Subject key identifier: 29:58:65:F9:B4:CE:BF:49:CA:8B:0D:9A:95:F7:AE:FE:6B:19:80:3B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBB5633AEA4D67F13C4380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b5:63:3a:ea:4d:67:f1:3c:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=66e71e30-3e8b-47c2-9030-5612b0f76a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:72:5b:c7:0c:da:b9:31:b6:3e:46:6a:0f:e5: 7f:50:e8:7e:a5:fe:79:6a:8c:d5:e1:ab:f9:2a:25: 00:f8:67:e6:81:07:f4:90:0f:3e:55:d9:bf:57:2c: fb:7a:16:36:30:c6:05:2c:34:a0:98:07:f8:2e:3e: 03:f4:52:83:4c:9e:5b:34:e7:79:6d:0e:e9:01:ae: d8:0c:66:83:d5:68:b5:17:b7:d2:9a:91:fa:96:da: ed:70:03:7b:a3:06:be:e0:63:22:bd:91:b0:f8:6a: 04:86:07:eb:32:c8:34:e8:1d:8a:66:7e:35:10:0f: 44:1a:35:8b:93:da:68:3c:83:7f:66:1d:ae:5f:68: 2b:a2:d7:58:13:63:43:4e:a9:7a:be:a0:a1:7a:f6: 58:ee:32:c9:b5:5c:60:28:4b:bf:83:ce:9a:e3:a8: 90:bf:8b:ca:95:f1:62:b1:75:06:fd:be:b6:4a:64: e7:99:ab:b1:11:0a:9b:42:25:c8:94:0d:0f:6b:3a: 3c:3c:03:6b:49:45:e6:b2:e7:e6:fa:f4:08:bd:5c: c6:20:d9:29:da:72:cd:3c:e2:17:6c:90:b9:36:8e: 4b:f1:c4:00:11:33:41:92:fc:5e:95:75:5a:51:4f: 36:83:63:c0:43:ca:01:f8:b5:ba:fe:79:91:5d:9f: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:58:65:F9:B4:CE:BF:49:CA:8B:0D:9A:95:F7:AE:FE:6B:19:80:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:68:09:8f:a6:54:39:d6:23:49:48:27:d6:18:e2:72:a4:d1: d0:38:ae:b4:5a:ad:6f:c8:17:e3:4b:de:22:b4:b3:4f:9d:23: db:12:50:10:bf:24:17:6c:ed:90:38:b2:63:05:44:e5:40:a6: 36:8c:b1:cc:77:7a:c7:ef:f4:77:26:66:07:70:2e:47:c8:08: 8d:65:88:9b:05:f8:02:ed:ab:15:28:a2:7a:f7:a5:2a:f4:e2: 55:f2:90:83:1a:78:62:3d:5b:bb:7a:49:58:2e:8e:d5:b5:c5: 3a:01:88:d3:3b:98:d7:13:29:22:45:16:58:c4:2a:e7:69:04: e0:48:f6:a4:12:c8:d9:d2:c7:89:53:d0:41:b8:f5:9b:03:9a: 54:7f:c6:f9:5c:dd:1e:8b:28:fb:fd:1e:b1:0a:2c:6e:c5:94: 05:e9:28:5c:6b:5d:c5:96:b5:31:87:e2:a9:1a:ab:24:81:d8: f6:20:6c:da:df:d2:78:19:1e:39:a6:4e:6e:8e:04:a1:51:d6: 2b:b7:cd:bc:b1:38:36:c7:70:62:9e:48:f8:ec:58:31:36:e5: 74:72:b4:a7:bd:34:19:26:7e:9c:25:b5:4a:b9:4b:d2:e4:ab: ae:29:cd:bb:8b:a0:cc:ea:49:d5:15:80:44:b8:5c:cc:45:44: c3:1f:ef:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27VjOupNZ/E8Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjZlNzFlMzAtM2U4Yi00N2MyLTkwMzAtNTYxMmIwZjc2YTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHJbxwzauTG2PkZqD+V/UOh+pf55aozV4av5 KiUA+GfmgQf0kA8+Vdm/Vyz7ehY2MMYFLDSgmAf4Lj4D9FKDTJ5bNOd5bQ7pAa7Y DGaD1Wi1F7fSmpH6ltrtcAN7owa+4GMivZGw+GoEhgfrMsg06B2KZn41EA9EGjWL k9poPIN/Zh2uX2grotdYE2NDTql6vqChevZY7jLJtVxgKEu/g86a46iQv4vKlfFi sXUG/b62SmTnmauxEQqbQiXIlA0Pazo8PANrSUXmsufm+vQIvVzGINkp2nLNPOIX bJC5No5L8cQAETNBkvxelXVaUU82g2PAQ8oB+LW6/nmRXZ+LmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClYZfm0zr9JyosNmpX3rv5rGYA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2JhZGYyOTItYjA3Zi0z NWNkLWJjMGMtNTFkNTM1YTE3YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRoCY+mVDnWI0lIJ9YY4nKk0dA4rrRarW/IF+NL3iK0s0+dI9sSUBC/ JBds7ZA4smMFROVApjaMscx3esfv9HcmZgdwLkfICI1liJsF+ALtqxUoonr3pSr0 4lXykIMaeGI9W7t6SVgujtW1xToBiNM7mNcTKSJFFljEKudpBOBI9qQSyNnSx4lT 0EG49ZsDmlR/xvlc3R6LKPv9HrEKLG7FlAXpKFxrXcWWtTGH4qkaqySB2PYgbNrf 0ngZHjmmTm6OBKFR1iu3zbyxODbHcGKeSPjsWDE25XRytKe9NBkmfpwltUq5S9Lk q64pzbuLoMzqSdUVgES4XMxFRMMf7/U= -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:53 2025 by rpki-client