$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa File: 7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa (raw, json) Hash identifier: wNZqxQLberZszY6Rtq8Gr3wy20VEAywu1Wfnn6LQgQQ= Subject key identifier: A9:B3:73:76:08:A8:3E:CF:D8:90:B0:B1:27:5D:D3:9F:4F:5D:1D:E3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBBA3B9581C0E4AB5D2A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ba:3b:95:81:c0:e4:ab:5d:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=e47829a6-da66-4471-a0cc-48e36a3955b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:51:79:6b:ce:f2:0f:91:bc:ae:85:55:eb:6a: 4c:c8:38:ac:6f:a5:fd:64:42:2a:7d:53:da:b7:07: 27:c3:69:6f:f0:4a:ea:57:5a:68:b3:eb:4d:c4:23: ea:e8:45:fe:c1:a0:1a:36:b3:53:e9:41:b0:d6:5f: c6:d1:d0:bd:f9:2c:cc:fc:af:fa:93:12:ca:7b:c1: 0b:2d:88:42:49:86:b5:c3:36:c3:44:ef:11:26:61: 3a:00:6c:7b:37:ff:19:ed:e4:49:aa:1a:51:5d:8e: 8a:74:7e:e0:8f:39:8e:b6:dd:7e:7d:c2:b7:80:4a: ea:07:77:be:27:8a:ca:f0:5f:2a:04:4a:14:47:35: 9d:ac:7b:a4:67:fc:34:3c:f5:8e:75:70:23:ff:e7: 82:82:b3:2b:df:1f:a8:19:aa:11:3c:16:71:ad:c9: d8:4a:7d:3e:de:84:96:d6:5b:c1:43:28:4a:11:b9: 11:dd:39:ca:28:8f:12:37:b1:10:0a:e6:38:53:8e: 45:bd:a4:88:07:36:4f:93:87:0c:5e:9c:c7:80:f4: b9:0a:33:2c:c7:f1:1d:68:f4:50:0f:b6:13:91:18: b2:7a:59:3e:f2:5e:43:62:fe:1c:d3:44:87:c5:ab: 73:a9:c6:b8:c7:df:9b:d5:3d:78:00:9d:00:13:a9: fb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B3:73:76:08:A8:3E:CF:D8:90:B0:B1:27:5D:D3:9F:4F:5D:1D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f555ad1-051b-3e10-b3ec-785e6e326fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:9c:78:27:34:73:21:ef:11:4b:cd:aa:da:46:70:c9:77:52: 35:1c:92:b9:be:87:3b:47:b2:96:54:72:55:d2:a5:2c:3b:2f: be:25:cc:19:b8:80:a9:89:27:db:ea:6f:49:48:64:78:57:77: 53:19:08:53:fe:35:9e:c0:8d:c0:f7:74:d0:72:80:14:83:20: df:9c:54:63:a1:e8:ba:fb:81:ac:ee:f5:73:62:83:00:da:da: 03:2f:e5:97:5d:f4:2d:8f:14:1f:e8:06:8b:23:4c:b0:6f:a0: ad:49:10:c4:c4:f5:c7:28:f7:16:c0:57:63:a6:6d:e3:b5:ff: 72:c1:d8:0e:57:a9:96:99:aa:35:e9:4d:1b:48:ab:19:83:08: fa:57:84:c6:ce:80:1b:a1:da:8d:81:be:ef:f9:8f:53:09:81: 40:76:1a:18:02:95:8b:14:a0:cc:f0:ef:74:40:f6:e4:17:38: dc:07:b1:c7:24:74:41:44:d9:de:f0:20:a3:30:31:17:26:ea: c8:27:1a:91:dd:3d:eb:19:1b:98:39:4c:0b:c0:87:6b:39:97: 1c:e0:ae:69:59:99:4f:d4:f1:0a:22:10:23:dc:84:99:ce:ca: c4:6e:f3:03:c5:66:42:9b:22:92:02:3f:96:c7:09:95:dc:dd: 5d:87:fc:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27o7lYHA5KtdKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ZTQ3ODI5YTYtZGE2Ni00NDcxLWEwY2MtNDhlMzZhMzk1NWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FF5a87yD5G8roVV62pMyDisb6X9ZEIqfVPa twcnw2lv8ErqV1pos+tNxCPq6EX+waAaNrNT6UGw1l/G0dC9+SzM/K/6kxLKe8EL LYhCSYa1wzbDRO8RJmE6AGx7N/8Z7eRJqhpRXY6KdH7gjzmOtt1+fcK3gErqB3e+ J4rK8F8qBEoURzWdrHukZ/w0PPWOdXAj/+eCgrMr3x+oGaoRPBZxrcnYSn0+3oSW 1lvBQyhKEbkR3TnKKI8SN7EQCuY4U45FvaSIBzZPk4cMXpzHgPS5CjMsx/EdaPRQ D7YTkRiyelk+8l5DYv4c00SHxatzqca4x9+b1T14AJ0AE6n77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmzc3YIqD7P2JCwsSdd059PXR3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2Y1NTVhZDEtMDUxYi0z ZTEwLWIzZWMtNzg1ZTZlMzI2ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2ceCc0cyHvEUvNqtpGcMl3UjUckrm+hztHspZUclXSpSw7L74lzBm4 gKmJJ9vqb0lIZHhXd1MZCFP+NZ7AjcD3dNBygBSDIN+cVGOh6Lr7gazu9XNigwDa 2gMv5Zdd9C2PFB/oBosjTLBvoK1JEMTE9cco9xbAV2OmbeO1/3LB2A5XqZaZqjXp TRtIqxmDCPpXhMbOgBuh2o2Bvu/5j1MJgUB2GhgClYsUoMzw73RA9uQXONwHscck dEFE2d7wIKMwMRcm6sgnGpHdPesZG5g5TAvAh2s5lxzgrmlZmU/U8QoiECPchJnO ysRu8wPFZkKbIpICP5bHCZXc3V2H/HQ= -----END CERTIFICATE-----Generated at Tue Aug 5 20:06:01 2025 by rpki-client