$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa File: cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa (raw, json) Hash identifier: iqqSoIq60pu1/vSrMfYqNKNEyQKg29q3mD5ptwAeycw= Subject key identifier: 18:DF:DA:5E:8D:52:00:5D:28:3B:C5:46:54:43:B2:33:0C:32:B5:E6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB8241A7BE3CA659F74AE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:82:41:a7:be:3c:a6:59:f7:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=79c81f85-0efb-4018-8d87-5e58e464f21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:cb:fb:46:d3:4c:6f:db:3e:7d:1d:fe:ea: 7e:26:08:21:17:07:80:8c:c8:10:23:11:0a:38:2a: 70:82:80:f1:16:bc:c0:63:95:26:d6:bd:5f:dc:0a: 37:ea:26:37:34:11:4e:53:4f:3a:9c:7e:d6:97:9a: 01:87:1d:e6:55:d5:58:fd:f5:02:0a:14:a3:45:58: 70:e5:34:1c:52:8c:35:ff:13:cd:b9:6a:4b:86:37: 9e:c9:6a:6b:57:33:87:54:ee:2c:dd:d0:f9:c0:af: 33:c5:27:3d:9f:05:6f:9f:f6:47:14:16:95:72:5f: 4f:5b:b8:24:5e:b9:58:41:ce:51:46:c0:b7:e1:a2: 6a:85:40:87:91:28:5e:cb:ad:9d:29:21:18:00:24: ce:68:66:0d:8f:d2:18:36:ee:09:40:24:95:47:5b: 0c:0c:b1:fd:27:59:81:b8:9f:3f:42:51:ed:e1:4c: a1:06:ed:00:df:c3:3b:9e:d6:2f:31:68:a7:03:3d: b8:e2:84:89:59:db:88:a6:78:cd:cb:bf:0c:72:92: d4:13:56:de:2c:72:d3:86:cb:33:be:15:6d:93:80: 82:b5:bb:29:4a:f1:08:4e:44:be:58:af:a2:e6:92: b6:cb:15:69:c1:eb:72:7f:1b:e5:ec:5a:a9:cc:79: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DF:DA:5E:8D:52:00:5D:28:3B:C5:46:54:43:B2:33:0C:32:B5:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:c5:ba:af:10:36:d0:be:0d:05:e7:30:39:ff:07:c8:2b:0d: e2:3a:dc:19:a4:4a:b0:f5:98:8f:76:90:4a:d3:4b:12:ef:82: 87:ef:5a:a4:6c:a2:95:be:08:68:d3:25:2a:c6:6c:f5:25:a8: 5e:c7:d4:11:22:38:36:5f:b1:02:7d:43:50:63:7e:14:bf:24: dc:9a:70:40:50:c3:09:fe:ae:16:7b:5b:e9:28:9e:45:10:94: e7:91:5f:27:8e:b7:79:1f:bc:5c:3f:0f:65:04:6c:7c:ba:bd: ce:9d:e7:bc:29:7f:cd:2e:90:7b:80:a0:a7:8a:57:25:93:20: 51:f1:07:19:d2:85:e4:64:bb:0a:a8:66:0e:6b:01:60:a6:85: b0:17:dc:4b:36:d0:7a:57:9d:67:08:81:e0:7a:db:bd:72:e1: fe:d6:6b:7c:15:ce:5c:c8:17:99:38:3c:52:18:f9:56:96:ad: b6:00:f4:67:03:63:82:c9:c7:1f:13:46:22:28:11:87:41:b5: 96:6d:33:e0:f4:d4:0e:0c:ef:ce:0a:3a:59:58:3a:ca:8c:07: 78:7d:30:a8:b7:c6:c3:db:bc:fa:a8:cf:13:5d:25:0e:4c:04: 83:b9:0a:b3:55:29:fd:26:a8:74:a2:df:7a:43:57:78:cf:e9: b6:69:fa:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24JBp748pln3SuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NzljODFmODUtMGVmYi00MDE4LThkODctNWU1OGU0NjRmMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3/L+0bTTG/bPn0d/up+JgghFweAjMgQIxEK OCpwgoDxFrzAY5Um1r1f3Ao36iY3NBFOU086nH7Wl5oBhx3mVdVY/fUCChSjRVhw 5TQcUow1/xPNuWpLhjeeyWprVzOHVO4s3dD5wK8zxSc9nwVvn/ZHFBaVcl9PW7gk XrlYQc5RRsC34aJqhUCHkShey62dKSEYACTOaGYNj9IYNu4JQCSVR1sMDLH9J1mB uJ8/QlHt4UyhBu0A38M7ntYvMWinAz244oSJWduIpnjNy78McpLUE1beLHLThssz vhVtk4CCtbspSvEITkS+WK+i5pK2yxVpwetyfxvl7FqpzHmxBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjf2l6NUgBdKDvFRlRDsjMMMrXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Q4NmJkNjUtNjlkYS0z NjhjLTlkYzItODQzNWYxZmY5Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7Fuq8QNtC+DQXnMDn/B8grDeI63BmkSrD1mI92kErTSxLvgofvWqRs opW+CGjTJSrGbPUlqF7H1BEiODZfsQJ9Q1BjfhS/JNyacEBQwwn+rhZ7W+konkUQ lOeRXyeOt3kfvFw/D2UEbHy6vc6d57wpf80ukHuAoKeKVyWTIFHxBxnSheRkuwqo Zg5rAWCmhbAX3Es20HpXnWcIgeB6271y4f7Wa3wVzlzIF5k4PFIY+VaWrbYA9GcD Y4LJxx8TRiIoEYdBtZZtM+D01A4M784KOllYOsqMB3h9MKi3xsPbvPqozxNdJQ5M BIO5CrNVKf0mqHSi33pDV3jP6bZp+ls= -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:47 2025 by rpki-client