$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa File: dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa (raw, json) Hash identifier: LlWpBR5rECr4Pn8zHLF7n/qa7paNxlhhVL2FcCGDXfM= Subject key identifier: 8C:1D:71:DB:CD:C4:53:FE:20:A9:71:6B:FB:43:1A:96:25:4C:00:54 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBE7BE6A07E337B8E39E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:e7:be:6a:07:e3:37:b8:e3:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=265ac437-51a6-44b0-acb0-6811211d5221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a5:60:b1:89:d0:b9:50:70:ae:02:1e:8c:86: 1e:2f:f2:97:70:e7:28:bb:48:ab:48:c8:67:54:2e: e3:39:23:6b:98:a2:ea:95:20:c7:6c:9a:fd:71:8d: 83:33:63:92:0c:8b:c8:b7:a3:75:e9:36:d9:3b:de: 52:75:61:ce:28:e8:43:f2:fb:9c:e8:85:23:6b:f5: b2:20:07:5f:ee:4d:10:87:0c:89:92:fb:6f:ec:12: eb:b4:32:cb:d5:de:b8:9a:42:98:f3:b1:d9:29:01: 09:2c:de:14:a8:6a:c2:5e:73:e2:73:56:e1:82:1f: 3f:4f:4d:0c:b2:0e:fa:87:64:67:a2:91:e2:0f:e4: 6e:10:9a:a8:49:11:59:5f:bb:ec:0c:aa:8c:0f:80: 42:3a:43:7a:77:92:13:ae:0a:6d:73:a8:b2:b2:f7: 5a:13:3e:8f:11:70:fd:27:d9:eb:6a:bb:f5:b0:71: 73:ef:f2:cb:d8:1d:60:3b:6b:d7:8e:ea:4a:29:3e: 5d:29:be:e4:24:42:cc:54:29:1c:b4:07:9b:14:cd: e4:83:48:6c:0a:a8:c7:de:58:f0:b0:eb:9b:73:44: 06:53:9a:5c:6b:12:92:3c:2a:a9:43:54:08:71:86: 1b:08:1d:7f:99:65:ac:b5:15:8c:28:9a:5d:30:b0: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1D:71:DB:CD:C4:53:FE:20:A9:71:6B:FB:43:1A:96:25:4C:00:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:2c:ca:fa:8b:5f:97:11:21:23:5e:01:1c:50:52:95:42:cd: 54:ee:28:92:12:0e:fd:d9:f4:89:d1:4e:88:ee:eb:9e:5a:9e: 09:d2:7e:f8:f9:94:40:8f:b3:16:2d:2b:16:80:d7:a6:96:65: e3:38:45:32:00:86:5d:63:67:f6:61:7e:38:5e:91:b3:75:fd: 28:a6:45:14:eb:3d:7c:e6:28:bd:b8:04:5d:2b:65:9d:49:70: 30:c1:5f:25:83:9d:d2:02:fb:5b:93:be:cc:93:86:d7:29:e4: 5f:ce:e9:16:13:b3:ea:4b:99:5a:e5:39:62:8d:fb:fb:97:d7: 91:0f:ff:b8:45:41:bc:6e:59:e3:de:c6:8e:8b:86:bd:20:7e: d6:44:4e:d2:df:34:7d:c5:5e:47:14:47:02:b7:41:bb:6d:8a: 9c:3f:da:ae:35:b7:5e:38:41:46:9c:69:b4:4f:1d:33:33:33: 22:34:b3:18:e9:75:c1:e2:c3:ef:ff:90:f0:4e:63:06:d0:c9: 7a:db:2a:1c:30:9e:37:ca:b2:c1:ca:50:1a:a9:65:9b:27:1a: 99:82:bc:76:43:4b:2d:1c:1e:2c:a7:46:39:a9:18:27:87:e3: 3d:28:ae:18:ce:d3:73:f2:54:07:f5:28:9b:09:d5:38:72:03: 7a:5f:7c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2+e+agfjN7jjngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MjY1YWM0MzctNTFhNi00NGIwLWFjYjAtNjgxMTIxMWQ1MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKVgsYnQuVBwrgIejIYeL/KXcOcou0irSMhn VC7jOSNrmKLqlSDHbJr9cY2DM2OSDIvIt6N16TbZO95SdWHOKOhD8vuc6IUja/Wy IAdf7k0QhwyJkvtv7BLrtDLL1d64mkKY87HZKQEJLN4UqGrCXnPic1bhgh8/T00M sg76h2RnopHiD+RuEJqoSRFZX7vsDKqMD4BCOkN6d5ITrgptc6iysvdaEz6PEXD9 J9nrarv1sHFz7/LL2B1gO2vXjupKKT5dKb7kJELMVCkctAebFM3kg0hsCqjH3ljw sOubc0QGU5pcaxKSPCqpQ1QIcYYbCB1/mWWstRWMKJpdMLAz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwdcdvNxFP+IKlxa/tDGpYlTABUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQ0ZTU1NTktY2ZmMC0z MzEzLWFmYzgtZmRjZGFmM2Q5ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAsyvqLX5cRISNeARxQUpVCzVTuKJISDv3Z9InRToju655angnSfvj5 lECPsxYtKxaA16aWZeM4RTIAhl1jZ/ZhfjhekbN1/SimRRTrPXzmKL24BF0rZZ1J cDDBXyWDndIC+1uTvsyThtcp5F/O6RYTs+pLmVrlOWKN+/uX15EP/7hFQbxuWePe xo6Lhr0gftZETtLfNH3FXkcURwK3Qbttipw/2q41t144QUacabRPHTMzMyI0sxjp dcHiw+//kPBOYwbQyXrbKhwwnjfKssHKUBqpZZsnGpmCvHZDSy0cHiynRjmpGCeH 4z0orhjO03PyVAf1KJsJ1ThyA3pffPI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:15:12 2025 by rpki-client