$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa File: cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa (raw, json) Hash identifier: TwVcxOvf3hRAH2wTQZ0rCOTQx3tT4RL4JmYhp4hgjCQ= Subject key identifier: 55:D6:DC:61:F2:56:7D:15:59:04:E9:F4:08:E2:4B:F2:47:E4:46:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797A3C06430CD374AB70240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a3:c0:64:30:cd:37:4a:b7:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=99f4b884-f027-48ee-97c0-f82f8b12efff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:f2:da:82:92:2a:92:ea:5b:d9:80:ae:77: b8:9b:ab:07:cc:6c:c2:3d:1f:89:29:ee:b9:e4:dd: 62:1e:b0:2f:3c:f3:8d:96:36:0f:14:07:ab:f6:af: 64:e7:13:0e:14:5d:ba:b9:74:9a:24:57:56:bf:18: 21:5a:06:6d:c2:3a:4f:a0:33:7e:06:72:1d:d1:eb: 4a:17:df:dc:7b:46:d0:57:90:28:e3:3b:40:2f:6e: d5:57:d2:32:4d:57:f6:ee:51:2d:e9:ec:39:a4:cb: 24:66:03:4b:c4:87:06:18:37:8e:c8:2f:c1:8f:b6: 9d:9f:8a:fc:4d:19:26:87:de:e8:6a:c2:9e:07:c0: 06:71:61:71:1b:f9:e7:7b:fd:3a:0b:bc:35:f7:f0: a6:c8:93:5b:14:5e:2a:b1:c9:1e:67:bf:d4:a4:0c: eb:70:a2:aa:d9:61:56:f3:6b:71:58:bd:d6:52:04: 18:7a:c6:1b:59:03:0f:e6:82:0d:ec:50:85:96:95: 22:12:97:c6:ff:d0:47:41:8c:57:78:3c:84:e3:81: 45:d5:37:52:57:50:fb:75:52:f9:43:62:c5:13:b2: ab:41:32:f1:ee:b2:e1:12:03:cf:78:54:fa:77:b1: 41:f8:b8:95:8e:ee:e6:29:5e:24:15:51:2e:be:44: b4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D6:DC:61:F2:56:7D:15:59:04:E9:F4:08:E2:4B:F2:47:E4:46:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6c:56:bb:30:fd:b7:8e:00:5c:d8:bb:9c:d0:57:6f:16:bc: a8:8a:3d:4a:af:6d:c2:8c:7b:42:85:b8:3a:62:99:43:ff:35: 95:cf:b7:26:4f:78:55:4d:22:43:96:43:5e:20:80:9a:ca:08: 66:26:35:22:45:90:81:68:16:11:d9:eb:05:e6:bb:de:cc:e3: ca:03:49:36:4d:06:21:7d:0b:54:aa:42:59:81:ce:54:34:51: 6b:00:cf:e6:d2:db:c0:82:2d:1d:62:aa:6a:8e:05:c4:c1:a0: a8:44:e2:22:48:dc:df:b2:99:2c:50:33:92:76:da:85:aa:25: 50:fe:6a:af:78:c9:02:47:44:e3:21:c8:8e:0c:5e:db:1d:f9: 32:c7:86:15:8f:b8:51:74:8b:b0:c8:7e:4c:71:66:a7:dd:ac: e8:ae:47:10:bc:34:c7:5e:f4:7a:c4:e1:fa:12:c4:a2:d0:d6: d9:5a:09:57:b9:8d:78:75:c8:d2:ef:49:8a:e1:b4:1e:da:c2: fa:55:12:25:b1:71:5e:33:ae:1c:f6:18:0b:c3:c0:53:f4:04: 12:e5:65:39:7c:78:af:15:6b:2b:2f:e7:7e:dc:9d:73:e4:7f: 42:b3:cc:d2:8e:5c:ea:ec:72:2b:63:10:c4:dc:51:0a:6f:e4: 6a:43:39:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6PAZDDNN0q3AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OTlmNGI4ODQtZjAyNy00OGVlLTk3YzAtZjgyZjhiMTJlZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRby2oKSKpLqW9mArne4m6sHzGzCPR+JKe65 5N1iHrAvPPONljYPFAer9q9k5xMOFF26uXSaJFdWvxghWgZtwjpPoDN+BnId0etK F9/ce0bQV5Ao4ztAL27VV9IyTVf27lEt6ew5pMskZgNLxIcGGDeOyC/Bj7adn4r8 TRkmh97oasKeB8AGcWFxG/nne/06C7w19/CmyJNbFF4qsckeZ7/UpAzrcKKq2WFW 82txWL3WUgQYesYbWQMP5oIN7FCFlpUiEpfG/9BHQYxXeDyE44FF1TdSV1D7dVL5 Q2LFE7KrQTLx7rLhEgPPeFT6d7FB+LiVju7mKV4kFVEuvkS0/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXW3GHyVn0VWQTp9AjiS/JH5EaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Y2YjBkNjAtMTlmZi0z NzQyLTlkNjctZDRkNzNhYWJmOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxsVrsw/beOAFzYu5zQV28WvKiKPUqvbcKMe0KFuDpimUP/NZXPtyZP eFVNIkOWQ14ggJrKCGYmNSJFkIFoFhHZ6wXmu97M48oDSTZNBiF9C1SqQlmBzlQ0 UWsAz+bS28CCLR1iqmqOBcTBoKhE4iJI3N+ymSxQM5J22oWqJVD+aq94yQJHROMh yI4MXtsd+TLHhhWPuFF0i7DIfkxxZqfdrOiuRxC8NMde9HrE4foSxKLQ1tlaCVe5 jXh1yNLvSYrhtB7awvpVEiWxcV4zrhz2GAvDwFP0BBLlZTl8eK8Vaysv537cnXPk f0KzzNKOXOrscitjEMTcUQpv5GpDOYU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:12 2025 by rpki-client