$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa File: c50cd811-3be7-377f-aad6-f7366be2a40b.roa (raw, json) Hash identifier: 2QISTw/vLCwFG4zmCGfEli/uQ59eTOB/+HVomI0n7pw= Subject key identifier: 41:3A:A4:B2:EA:C0:9D:20:9C:1A:23:C5:3E:15:BB:4D:05:30:0F:C6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBF3285369F6680B8C3DC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f3:28:53:69:f6:68:0b:8c:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=641608da-4240-4c98-a7be-cdf2d57be976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:68:d6:45:a5:57:bc:38:35:57:ae:88:7f:ac: 1c:a7:6d:d1:d8:59:b4:51:99:2b:5e:c7:cd:fc:34: b7:1a:62:ba:b5:ed:a3:04:73:50:28:ce:30:11:cf: c4:9f:60:45:2a:b8:9f:79:93:0e:41:65:8f:95:56: 44:08:e8:fe:ed:e0:ce:a0:60:a0:c0:ea:f0:64:bc: e1:16:e9:e6:a8:f4:43:69:a9:29:dd:3b:a0:11:b2: c3:50:4b:5e:9a:9b:76:af:54:06:f2:3d:0c:e6:89: c6:db:95:34:f5:6a:cf:76:4e:18:58:cd:1d:bf:8f: ce:78:30:0c:e4:d3:25:24:cc:69:21:84:ac:61:fd: e3:87:51:11:25:e0:5f:ce:07:41:0f:f8:4e:fd:e5: 9b:a1:8d:e0:d1:46:e2:df:5d:81:93:9a:ec:f7:0f: 37:d9:cf:d5:09:4a:14:3e:6d:71:2a:5c:4a:a6:8e: de:f9:b1:29:c8:8a:fa:d8:5b:3f:1a:e5:c7:3d:df: 9c:f2:05:54:ff:7c:39:e7:eb:30:28:60:24:df:47: f3:b8:96:24:72:0a:82:30:cf:1a:31:2b:c8:ce:5f: 55:58:66:e3:ec:47:a7:9c:f6:a3:dc:10:c6:b5:a4: 42:c0:e2:68:15:02:ce:2d:48:7d:7e:e9:d0:f0:be: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3A:A4:B2:EA:C0:9D:20:9C:1A:23:C5:3E:15:BB:4D:05:30:0F:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ab:ab:35:6f:64:41:e5:e1:26:60:c3:6e:81:08:a8:2b:47: a3:b2:15:df:8f:31:1c:a6:a1:5b:ca:74:55:e8:8c:c8:73:5f: 3d:30:1b:20:ef:62:1a:83:6b:4a:8a:06:2c:be:2b:1e:bf:ca: 90:81:ae:72:08:cb:16:b9:f9:3f:09:5f:0b:ec:39:c6:61:18: 5a:99:13:fd:83:26:3e:c7:65:2b:1e:b7:0e:2d:b0:5f:49:1f: 79:1c:4d:77:93:01:1b:8b:57:39:0a:4d:63:48:2e:a0:fd:03: fd:8d:bd:78:e5:12:4e:cf:da:c6:6c:f9:4d:8c:3d:c3:a4:f8: 59:0c:83:9c:24:07:53:30:3b:8b:c5:cd:e4:ea:53:1e:70:b3: 56:f3:16:42:fd:45:38:bd:65:87:ff:67:2e:d7:69:4a:8a:ce: 4c:d0:08:3a:1e:f6:05:13:b8:8e:a2:91:08:88:a9:0b:16:7d: 37:8c:9b:33:e1:d2:16:d9:02:09:fb:a7:20:95:cc:3f:8e:a0: a5:b9:23:69:e1:be:96:9a:59:e2:ac:53:40:00:fc:ec:4b:58: 5d:a4:6a:7c:01:fa:0d:a9:4c:04:a4:24:27:74:05:57:a2:06: 4c:b8:26:1d:5a:b1:72:f4:9b:6f:55:d9:29:75:9e:32:31:3c: f8:df:42:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/MoU2n2aAuMPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjQxNjA4ZGEtNDI0MC00Yzk4LWE3YmUtY2RmMmQ1N2JlOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWjWRaVXvDg1V66If6wcp23R2Fm0UZkrXsfN /DS3GmK6te2jBHNQKM4wEc/En2BFKrifeZMOQWWPlVZECOj+7eDOoGCgwOrwZLzh FunmqPRDaakp3TugEbLDUEtempt2r1QG8j0M5onG25U09WrPdk4YWM0dv4/OeDAM 5NMlJMxpIYSsYf3jh1ERJeBfzgdBD/hO/eWboY3g0Ubi312Bk5rs9w832c/VCUoU Pm1xKlxKpo7e+bEpyIr62Fs/GuXHPd+c8gVU/3w55+swKGAk30fzuJYkcgqCMM8a MSvIzl9VWGbj7EennPaj3BDGtaRCwOJoFQLOLUh9funQ8L6lhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE6pLLqwJ0gnBojxT4Vu00FMA/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzUwY2Q4MTEtM2JlNy0z NzdmLWFhZDYtZjczNjZiZTJhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKrqzVvZEHl4SZgw26BCKgrR6OyFd+PMRymoVvKdFXojMhzXz0wGyDv YhqDa0qKBiy+Kx6/ypCBrnIIyxa5+T8JXwvsOcZhGFqZE/2DJj7HZSsetw4tsF9J H3kcTXeTARuLVzkKTWNILqD9A/2NvXjlEk7P2sZs+U2MPcOk+FkMg5wkB1MwO4vF zeTqUx5ws1bzFkL9RTi9ZYf/Zy7XaUqKzkzQCDoe9gUTuI6ikQiIqQsWfTeMmzPh 0hbZAgn7pyCVzD+OoKW5I2nhvpaaWeKsU0AA/OxLWF2kanwB+g2pTASkJCd0BVei Bky4Jh1asXL0m29V2Sl1njIxPPjfQqE= -----END CERTIFICATE-----Generated at Mon Aug 4 14:04:46 2025 by rpki-client