$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa File: cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa (raw, json) Hash identifier: vcpR5Pn2+TNp7khafRaChHFLA1TP7ATPHFeYxxwMjlw= Subject key identifier: 09:03:CD:C3:29:F9:69:0C:55:01:1D:2E:FF:AB:FF:68:51:4E:4B:5F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBC5073537230E797C3700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:c5:07:35:37:23:0e:79:7c:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=6096028f-9226-4ed0-b970-e582cc9c9ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:03:08:b0:85:b2:dd:a6:64:57:bf:ea:06: ba:3e:5f:0f:38:41:78:f9:64:49:24:43:9a:6d:d7: e6:7d:58:8e:66:80:90:b2:91:f0:45:f7:be:6b:42: d8:ac:db:76:46:f7:ac:21:b5:1b:04:65:14:01:b8: 87:0e:55:19:e5:d2:b2:c2:ae:20:3e:83:00:a0:b0: 7f:e1:a0:72:67:21:66:ed:f3:cf:52:0c:e7:d8:7c: 75:1f:a5:54:df:79:d7:64:4d:df:fa:1a:3e:e2:5b: 9b:b4:14:99:a6:30:7e:88:77:42:61:56:7c:dd:15: 4b:d7:e6:ad:97:ea:cd:64:5f:d8:04:a7:42:9e:4a: 97:65:e1:34:66:d9:0f:5f:11:2b:83:09:81:48:a9: 74:df:bb:59:82:c8:7d:c2:05:60:cb:b1:e7:53:ec: 45:d4:eb:f5:c7:38:a8:74:ab:76:83:35:b1:0f:a8: 39:52:3b:f8:07:94:b3:c1:01:ee:a4:3c:5c:49:92: 7d:aa:8d:52:a1:e0:06:9b:dc:23:f2:ad:7b:7c:f7: 3c:61:89:7f:11:cc:dd:1f:01:34:82:e2:41:d7:af: d2:ae:df:d0:b7:03:c1:8a:f6:8e:da:2a:8b:80:4e: b9:13:63:e0:81:d3:4e:00:05:24:11:47:8f:46:5b: 32:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:03:CD:C3:29:F9:69:0C:55:01:1D:2E:FF:AB:FF:68:51:4E:4B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b4:08:4c:51:24:40:77:de:15:2e:5d:7b:1e:a5:e0:cc:2e: ff:4a:e8:c5:8b:51:4b:0a:b7:4c:9f:6c:3e:1a:92:61:91:1d: 04:9a:96:d4:4f:14:9c:9e:f0:4e:a0:ef:e2:a8:9b:7e:d8:b1: 1e:54:10:22:9d:44:ac:62:c0:00:1f:af:a2:59:14:08:82:e0: 21:f6:3c:44:7d:ea:df:2d:c5:d1:f6:38:9c:98:89:89:2b:d9: 7f:2d:80:53:17:f0:51:9b:63:76:c6:17:27:3b:b0:42:63:49: 50:3c:b0:fb:61:67:2b:07:6f:71:68:4d:bb:86:c5:60:60:5a: a6:76:dd:4a:5b:ed:da:83:c5:55:24:e1:18:e7:18:50:0e:69: 20:c8:99:f4:3d:51:0d:67:9d:81:dd:6e:c6:b6:d0:8c:e1:cb: 01:8c:a5:a0:7a:35:12:61:42:cc:70:c7:23:7e:8a:b8:fc:f4: e2:d5:a8:9b:2e:ec:96:ec:02:80:f8:81:05:ab:12:88:1d:cc: 96:48:5b:28:22:86:22:c4:e9:1e:e8:0a:33:12:c5:5e:4b:8a: a0:b4:82:c4:4c:93:86:e2:71:5b:7e:9f:78:3b:d7:b4:6e:b3: 5a:bc:71:17:55:82:b6:01:60:8a:6a:f1:75:6a:cb:61:07:cd: 82:6d:10:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28UHNTcjDnl8NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NjA5NjAyOGYtOTIyNi00ZWQwLWI5NzAtZTU4MmNjOWM5Y2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhngDCLCFst2mZFe/6ga6Pl8POEF4+WRJJEOa bdfmfViOZoCQspHwRfe+a0LYrNt2RvesIbUbBGUUAbiHDlUZ5dKywq4gPoMAoLB/ 4aByZyFm7fPPUgzn2Hx1H6VU33nXZE3f+ho+4lubtBSZpjB+iHdCYVZ83RVL1+at l+rNZF/YBKdCnkqXZeE0ZtkPXxErgwmBSKl037tZgsh9wgVgy7HnU+xF1Ov1xzio dKt2gzWxD6g5Ujv4B5SzwQHupDxcSZJ9qo1SoeAGm9wj8q17fPc8YYl/EczdHwE0 guJB16/Srt/QtwPBivaO2iqLgE65E2PggdNOAAUkEUePRlsy8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkDzcMp+WkMVQEdLv+r/2hRTktfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Y2YjBkNjAtMTlmZi0z NzQyLTlkNjctZDRkNzNhYWJmOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm0CExRJEB33hUuXXsepeDMLv9K6MWLUUsKt0yfbD4akmGRHQSaltRP FJye8E6g7+Kom37YsR5UECKdRKxiwAAfr6JZFAiC4CH2PER96t8txdH2OJyYiYkr 2X8tgFMX8FGbY3bGFyc7sEJjSVA8sPthZysHb3FoTbuGxWBgWqZ23Upb7dqDxVUk 4RjnGFAOaSDImfQ9UQ1nnYHdbsa20IzhywGMpaB6NRJhQsxwxyN+irj89OLVqJsu 7JbsAoD4gQWrEogdzJZIWygihiLE6R7oCjMSxV5LiqC0gsRMk4bicVt+n3g717Ru s1q8cRdVgrYBYIpq8XVqy2EHzYJtEGc= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:27 2025 by rpki-client