$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa File: e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa (raw, json) Hash identifier: vZ1f04vcFgu5pxpOKVN1kUtjIinWiSa0ocAh5rdVzc4= Subject key identifier: CF:A9:BF:37:BD:FC:18:DD:A3:8F:76:28:B8:04:4E:67:D1:1B:AB:E2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB78FD726F70BEB708FC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:78:fd:72:6f:70:be:b7:08:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ccfda133-975c-4491-b015-f17c2d0124b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:50:f3:06:1b:30:3f:12:1b:4a:f7:0f:6f: f1:44:4e:5a:9a:68:34:3f:64:33:b8:38:35:87:a9: 79:d6:cf:7c:55:7f:6d:0a:9e:ca:3e:8a:47:d3:b9: a8:c7:b0:64:60:1d:01:78:19:e1:74:95:30:60:d1: 8d:d1:ea:16:bf:d9:eb:97:15:a8:5b:a1:41:ac:cf: dd:f0:fd:4f:01:bf:c7:b2:0e:0a:cf:86:ac:07:76: 79:69:4a:2b:62:8f:07:26:66:38:b8:69:c5:fa:24: d3:01:11:b9:60:ae:b4:4e:9b:39:0a:3e:13:57:b6: 61:16:0b:50:52:34:d4:62:04:06:02:84:2f:d3:a9: 82:87:39:16:3c:da:b1:13:ed:1f:81:c9:16:b7:43: 11:fa:3e:bd:b1:58:7a:87:27:cd:00:fa:c5:38:f9: 83:4a:4a:ab:4e:d4:fa:0b:68:c1:3f:83:9d:a3:1d: 53:7e:e4:3c:1c:9e:c7:40:0d:03:1c:78:30:02:0d: f9:03:8a:96:0c:4d:49:24:45:58:83:74:b3:2c:30: f3:a8:7f:dc:6f:70:94:e7:a0:7b:07:ea:6f:23:ee: 78:ad:f0:4b:30:bc:60:22:14:f2:3d:13:c0:17:a0: b2:90:4e:49:0d:37:66:51:16:04:07:f9:ab:e2:14: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:BF:37:BD:FC:18:DD:A3:8F:76:28:B8:04:4E:67:D1:1B:AB:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:97:83:09:7d:8a:f2:b4:b4:4e:1c:97:a2:8e:e7:9e:8d:ce: 71:63:1e:01:c3:2c:a1:61:08:c6:5a:3b:66:74:ed:6f:f5:f4: 31:ce:d7:e1:dc:25:53:d1:ee:5b:c0:2f:84:cc:a6:d1:e1:85: 5b:ea:4b:39:b9:47:89:4e:ec:71:77:9c:1a:26:bf:52:7f:ee: 46:72:46:4c:c1:f8:67:bf:08:6b:d9:89:5b:46:41:59:e3:00: 52:c2:e6:6a:68:e0:2e:61:0c:95:71:6f:c7:1f:8f:13:e6:d7: 5d:87:f5:0d:e4:21:e5:0a:ed:4c:54:f6:a8:b5:f8:d8:ba:62: 64:93:b9:d5:60:35:9f:3f:71:21:d3:d9:65:3c:b1:1b:20:bb: c3:f5:9f:24:16:0a:9a:de:e8:08:47:cd:9b:5e:38:dc:21:e6: c7:2f:01:69:42:41:6a:64:92:8b:bb:2e:50:14:fe:ce:ec:79: 0f:b2:95:09:0c:f9:e5:14:4b:fe:22:5b:82:19:34:e0:0e:7f: 52:67:70:85:7c:c3:97:02:2e:21:ad:07:51:b3:7c:98:90:94: d3:7c:0a:33:1f:0a:1f:5f:69:25:44:80:0e:76:cb:ed:8b:cc: ef:c1:cf:90:ff:b0:09:ec:5f:fa:10:f2:59:62:f8:f5:2e:94: ed:ee:b0:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23j9cm9wvrcI/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2NmZGExMzMtOTc1Yy00NDkxLWIwMTUtZjE3YzJkMDEyNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUhQ8wYbMD8SG0r3D2/xRE5ammg0P2QzuDg1 h6l51s98VX9tCp7KPopH07mox7BkYB0BeBnhdJUwYNGN0eoWv9nrlxWoW6FBrM/d 8P1PAb/Hsg4Kz4asB3Z5aUorYo8HJmY4uGnF+iTTARG5YK60Tps5Cj4TV7ZhFgtQ UjTUYgQGAoQv06mChzkWPNqxE+0fgckWt0MR+j69sVh6hyfNAPrFOPmDSkqrTtT6 C2jBP4Odox1TfuQ8HJ7HQA0DHHgwAg35A4qWDE1JJEVYg3SzLDDzqH/cb3CU56B7 B+pvI+54rfBLMLxgIhTyPRPAF6CykE5JDTdmURYEB/mr4hT/cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+pvze9/Bjdo492KLgETmfRG6viMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTc2YWMzYTQtOGNlZC0z MzRjLWIyOWUtNmI3OTNiNWYyNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqXgwl9ivK0tE4cl6KO556NznFjHgHDLKFhCMZaO2Z07W/19DHO1+Hc JVPR7lvAL4TMptHhhVvqSzm5R4lO7HF3nBomv1J/7kZyRkzB+Ge/CGvZiVtGQVnj AFLC5mpo4C5hDJVxb8cfjxPm112H9Q3kIeUK7UxU9qi1+Ni6YmSTudVgNZ8/cSHT 2WU8sRsgu8P1nyQWCpre6AhHzZteONwh5scvAWlCQWpkkou7LlAU/s7seQ+ylQkM +eUUS/4iW4IZNOAOf1JncIV8w5cCLiGtB1GzfJiQlNN8CjMfCh9faSVEgA52y+2L zO/Bz5D/sAnsX/oQ8lli+PUulO3usNQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:08 2025 by rpki-client