$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa File: bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa (raw, json) Hash identifier: O8CTQ3EPe4WOiIkmVOPgjrhyiGJhfwCSwQYOrO9UnWU= Subject key identifier: 2B:08:F8:B3:D0:B0:91:0C:97:3D:B2:BA:6E:5F:C9:BC:39:D1:8D:E1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBB1A92A4ED6863D457900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b1:a9:2a:4e:d6:86:3d:45:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c60bcec3-1301-4075-9ccc-d071119a8186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:a0:24:da:3d:8f:38:49:a8:16:f2:42:4d: 3f:d2:5a:96:ed:d8:67:18:fc:e9:30:83:0e:81:35: d3:3d:c3:7d:0d:5a:d9:df:fd:00:4c:09:ea:98:e3: fe:3a:17:bd:df:86:9a:0a:16:e1:27:46:d5:8c:c1: e7:2a:3d:ef:4e:49:7b:50:77:35:1f:07:74:70:1a: b2:2b:59:5b:e1:69:32:f2:fb:72:3f:ce:4d:a5:07: 69:68:32:f5:9b:6e:e6:3b:93:2a:92:e7:31:8d:7a: c6:94:2d:c7:35:00:7e:7b:b9:6e:98:59:c8:63:2a: 22:b1:ff:a0:9b:c7:df:d0:46:51:85:e9:da:58:39: a3:87:95:29:f9:41:e7:c2:a7:ee:b8:e2:43:2d:cd: a5:e5:df:9c:37:a3:ff:00:cc:0a:02:0d:58:7f:76: 65:64:46:c4:44:3d:ed:e1:46:f2:1e:4d:c6:68:15: 05:a8:30:56:bf:9b:26:16:57:72:12:01:14:25:41: 07:27:cd:e8:55:33:0d:6c:62:9c:26:fa:71:1b:d2: 0a:8c:7f:21:be:2b:4b:2b:e2:ec:6a:9e:75:06:1c: 60:06:ca:63:fe:b0:18:9c:9b:a7:25:88:c0:f1:1e: b7:48:a2:17:9b:48:c7:09:95:fd:5b:42:74:e5:30: 2d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:08:F8:B3:D0:B0:91:0C:97:3D:B2:BA:6E:5F:C9:BC:39:D1:8D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1e:ed:88:e3:d5:9d:26:eb:59:9a:03:0a:40:38:f3:3a:cd: d9:ee:7f:f8:2f:47:78:78:e5:9a:43:67:95:f2:1d:e8:db:f9: 64:d7:90:be:90:09:57:f3:5f:3a:b8:1b:17:0c:e0:b4:c4:b9: d8:63:43:b3:e5:e7:83:0c:63:7f:52:ef:d2:45:33:ee:5a:b3: 3b:81:9c:74:90:c8:82:c2:9f:36:0d:d7:10:ad:5c:5c:3a:f8: 16:5e:86:3a:92:ca:84:84:d5:6c:73:da:10:a8:6e:51:d7:0b: 0d:0a:03:2a:df:f3:97:1c:c3:ff:f4:e4:d1:28:05:06:52:ec: 16:8d:b3:2e:d2:ea:a0:83:38:83:db:15:97:9c:67:35:d5:13: 38:59:97:b5:42:57:6d:e9:0d:13:c5:71:0d:b2:6d:d4:da:fc: 40:ef:37:5b:21:2c:71:bb:fd:0a:ca:0c:fe:3e:0c:82:9e:8b: 5e:6a:c5:e4:c7:6b:a0:ad:9b:0f:e8:69:38:34:b5:41:c0:25: 5f:1b:a2:9c:cb:36:d7:58:b3:8a:99:bd:8a:cb:08:6c:54:0e: 83:3f:37:cd:86:aa:e3:04:43:bc:ef:ed:4e:3e:d1:66:d1:c1: 1d:0a:93:b8:f0:20:f5:c9:15:e7:ed:54:61:94:e2:f5:a0:59: e6:86:0e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG27GpKk7Whj1FeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzYwYmNlYzMtMTMwMS00MDc1LTljY2MtZDA3MTExOWE4MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunigJNo9jzhJqBbyQk0/0lqW7dhnGPzpMIMO gTXTPcN9DVrZ3/0ATAnqmOP+Ohe934aaChbhJ0bVjMHnKj3vTkl7UHc1Hwd0cBqy K1lb4Wky8vtyP85NpQdpaDL1m27mO5MqkucxjXrGlC3HNQB+e7lumFnIYyoisf+g m8ff0EZRhenaWDmjh5Up+UHnwqfuuOJDLc2l5d+cN6P/AMwKAg1Yf3ZlZEbERD3t 4UbyHk3GaBUFqDBWv5smFldyEgEUJUEHJ83oVTMNbGKcJvpxG9IKjH8hvitLK+Ls ap51BhxgBspj/rAYnJunJYjA8R63SKIXm0jHCZX9W0J05TAt6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsI+LPQsJEMlz2yum5fybw50Y3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmFiMzdiNWQtNTVkYi0z ZjU3LWEwYTYtNWQzM2MzZGRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGge7Yjj1Z0m61maAwpAOPM6zdnuf/gvR3h45ZpDZ5XyHejb+WTXkL6Q CVfzXzq4GxcM4LTEudhjQ7Pl54MMY39S79JFM+5aszuBnHSQyILCnzYN1xCtXFw6 +BZehjqSyoSE1Wxz2hCoblHXCw0KAyrf85ccw//05NEoBQZS7BaNsy7S6qCDOIPb FZecZzXVEzhZl7VCV23pDRPFcQ2ybdTa/EDvN1shLHG7/QrKDP4+DIKei15qxeTH a6Ctmw/oaTg0tUHAJV8bopzLNtdYs4qZvYrLCGxUDoM/N82GquMEQ7zv7U4+0WbR wR0Kk7jwIPXJFeftVGGU4vWgWeaGDvk= -----END CERTIFICATE-----Generated at Mon Aug 4 18:20:51 2025 by rpki-client