$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa File: c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa (raw, json) Hash identifier: X5Av+b0mqWAVZMOpNM/ywsQ1L2KMAK0sEkTaennHWnY= Subject key identifier: 1A:32:E2:0D:27:D6:E6:5E:CB:05:7F:3B:E1:1A:FC:8A:EB:EB:60:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB8F8E94282726139F61D0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:8f:8e:94:28:27:26:13:9f:61:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=6fc78720-76d9-4d1b-bd19-a1209514bf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:76:e1:75:67:af:16:41:ec:81:15:70:01:9b: ed:49:d0:a9:7f:94:22:89:7f:c5:c2:7a:d1:c3:31: e9:29:1a:50:da:ba:db:01:c1:82:fc:d1:f6:e7:bc: a9:ae:61:8a:7d:ff:4e:a9:37:63:e3:5d:4b:e5:8b: 60:81:59:49:3c:57:6b:77:36:53:53:06:de:52:7b: b8:b3:39:ab:4d:e2:5f:1b:a6:19:26:57:c8:15:e6: a2:1d:2b:0d:67:be:20:c8:b3:99:93:e6:db:3f:75: 44:cc:fc:86:46:c0:bb:5f:0b:ce:ed:bd:df:bd:7c: c3:3c:cc:63:d9:6c:df:38:d7:15:91:f7:2a:7b:24: b4:c0:d5:b0:8c:ef:84:b2:39:c7:e8:ff:03:25:1f: 75:82:7c:7e:a2:fa:85:72:6e:13:f3:f1:ac:d3:c0: b6:24:84:2f:59:69:70:7d:63:5e:c5:15:0a:6e:03: 41:36:d9:4e:18:f1:10:f4:18:dc:14:f9:76:bd:e6: 0e:38:99:c8:f9:f5:45:ee:c4:84:a0:c4:13:34:93: 6c:54:bc:ca:3d:17:43:a3:55:54:11:68:d9:0a:bb: 78:09:57:7b:80:73:2a:7b:9f:1a:b5:d0:e1:5f:7c: 17:cd:52:36:22:45:d3:7d:1b:5e:45:d1:01:4c:d2: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:E2:0D:27:D6:E6:5E:CB:05:7F:3B:E1:1A:FC:8A:EB:EB:60:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:61:b2:ce:59:00:9c:8c:b6:fa:47:29:b1:ef:57:77:27:a0: 93:04:b7:31:33:af:87:7b:fe:2d:68:6f:d1:49:5c:0d:a7:9f: 79:55:d6:93:30:f8:2e:6b:cb:73:d6:b8:1c:98:4e:8e:13:e7: b1:66:5f:fd:fd:e7:6b:b2:a9:84:bf:50:07:a3:73:2a:25:e1: ce:5c:2a:2b:ed:91:a5:73:10:b2:e5:41:fd:08:41:b4:09:ca: 3d:58:d2:84:9a:8a:77:57:85:9f:a8:58:79:03:0a:43:26:25: a1:6c:0c:0f:72:1a:64:89:96:12:38:15:7c:4a:bf:3c:4a:af: b0:c0:26:85:ab:35:e9:ad:06:45:e0:80:08:e4:ad:d7:a9:fc: 2f:ea:6c:7c:1d:4c:89:48:36:9b:68:c6:11:88:9e:0d:48:c0: 7e:41:c1:06:cb:07:36:80:fb:3f:ee:a6:30:f3:4e:a7:7a:38: d9:44:c4:84:ab:d9:54:84:08:09:5d:4f:ae:57:30:4b:ac:12: fc:b7:69:81:58:f6:eb:75:87:3d:68:ba:b1:c7:eb:72:03:4a: 1d:73:4a:dc:36:05:6a:8f:89:a0:b4:d2:dc:ba:9e:71:98:72: e1:55:18:db:80:e1:05:c5:d9:65:92:9a:67:f9:1f:3f:bc:d0: a4:e9:c6:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24+OlCgnJhOfYdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NmZjNzg3MjAtNzZkOS00ZDFiLWJkMTktYTEyMDk1MTRiZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XbhdWevFkHsgRVwAZvtSdCpf5QiiX/FwnrR wzHpKRpQ2rrbAcGC/NH257yprmGKff9OqTdj411L5YtggVlJPFdrdzZTUwbeUnu4 szmrTeJfG6YZJlfIFeaiHSsNZ74gyLOZk+bbP3VEzPyGRsC7XwvO7b3fvXzDPMxj 2WzfONcVkfcqeyS0wNWwjO+EsjnH6P8DJR91gnx+ovqFcm4T8/Gs08C2JIQvWWlw fWNexRUKbgNBNtlOGPEQ9BjcFPl2veYOOJnI+fVF7sSEoMQTNJNsVLzKPRdDo1VU EWjZCrt4CVd7gHMqe58atdDhX3wXzVI2IkXTfRteRdEBTNJjEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoy4g0n1uZeywV/O+Ea/Irr62BIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzRlNWRjMjYtMjM0OC0z NGM1LThhMGQtOGVkNzFlMDJmNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACphss5ZAJyMtvpHKbHvV3cnoJMEtzEzr4d7/i1ob9FJXA2nn3lV1pMw +C5ry3PWuByYTo4T57FmX/3952uyqYS/UAejcyol4c5cKivtkaVzELLlQf0IQbQJ yj1Y0oSaindXhZ+oWHkDCkMmJaFsDA9yGmSJlhI4FXxKvzxKr7DAJoWrNemtBkXg gAjkrdep/C/qbHwdTIlINptoxhGIng1IwH5BwQbLBzaA+z/upjDzTqd6ONlExISr 2VSECAldT65XMEusEvy3aYFY9ut1hz1ourHH63IDSh1zStw2BWqPiaC00ty6nnGY cuFVGNuA4QXF2WWSmmf5Hz+80KTpxpk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:37 2025 by rpki-client