$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa File: eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa (raw, json) Hash identifier: 9kgy4ld63fcoHTsHEDlqxhH7wfgyCp5hheKnHldP0AU= Subject key identifier: FD:13:A3:B6:71:18:D9:CB:1B:E7:9D:2F:AF:28:D2:E5:09:94:F6:6B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBDD2EED6B1BD0DC07EF40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:dd:2e:ed:6b:1b:d0:dc:07:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=3bc7a2dd-c9b8-4e6b-aa09-81f45e530d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:8a:87:7c:ea:68:39:ca:cc:6a:fe:d8:61: 6d:33:33:62:6d:d1:ba:75:eb:51:4c:2e:72:bb:a1: a4:42:c3:8a:24:3f:b5:d7:4f:ff:f0:bd:f5:de:9d: 3d:7f:65:d1:d9:a4:99:0b:63:5f:ef:a3:3b:67:aa: 4f:81:b6:51:bf:05:c8:5c:60:f8:b5:d4:b1:06:c9: 49:1e:2a:05:78:8e:da:b8:c9:98:f0:b8:d7:d0:39: 81:8e:7b:04:b8:cc:50:c3:22:15:46:bf:f4:90:f6: 6a:f5:44:1c:b8:c9:25:ae:59:1b:a0:5a:39:45:92: 64:a1:bd:79:b3:af:eb:46:70:f5:cc:5f:fa:54:b7: 43:e9:78:4e:92:13:a7:bb:b1:87:1d:55:3d:88:c1: 43:5c:46:8f:44:98:f7:cd:f2:22:47:11:db:28:b5: aa:88:5f:12:2c:e3:2e:73:35:1a:8e:c6:7a:e9:9b: e9:a0:d3:d0:26:53:aa:86:73:17:3f:ed:6c:f1:a6: e8:2f:09:d2:38:68:73:49:d8:0a:d0:6b:3e:ce:72: 3a:2e:2b:fc:43:ff:9b:9b:d3:97:88:7f:8e:64:49: 63:19:ca:a5:17:72:10:5d:0c:ec:bf:05:ec:d4:bf: 5f:1a:07:c2:07:ca:44:64:10:35:52:90:3c:1f:a2: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:13:A3:B6:71:18:D9:CB:1B:E7:9D:2F:AF:28:D2:E5:09:94:F6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:e6:1f:85:94:30:4c:92:37:99:86:eb:44:38:2e:cf:0c:ff: f0:bf:a5:b5:e0:84:c5:50:c4:98:a7:e5:60:00:81:0e:c8:c0: c8:df:53:a3:84:31:10:39:87:c2:14:13:71:fa:80:38:05:d5: 1b:45:18:a2:f3:fa:4e:7b:5d:b8:3f:d8:92:ae:ef:c4:bf:9e: ae:ca:ba:3f:d8:98:d5:be:89:cc:8d:8c:68:e0:88:9f:8d:b2: 8d:8b:ea:76:a5:e3:ea:99:74:09:16:06:86:4f:b8:33:a6:52: 08:9e:25:e6:95:27:06:9d:23:75:60:bf:98:e9:46:24:94:9c: fc:c8:ee:53:ef:6d:ca:a7:ae:99:37:e2:2b:22:81:30:60:a9: 88:06:fd:cb:1a:d4:d9:98:d6:76:e9:92:fa:ee:b3:73:30:92: f3:ac:e0:d2:39:51:a0:ed:26:6f:b8:8b:16:78:26:21:81:ae: 9f:b8:5d:37:3e:3f:60:82:3b:6d:15:32:18:f1:9c:46:a4:26: 9f:a1:52:b4:0e:a0:6b:b9:34:0b:c5:f2:fc:3f:ab:cc:15:1f: 5e:56:db:38:e5:73:ab:95:bf:79:b9:b1:8e:e8:9b:90:de:49: 1e:db:ba:c7:5a:7c:c8:81:d1:49:51:00:8d:c1:b3:85:22:d1: 87:68:7b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG290u7Wsb0NwH70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk M2JjN2EyZGQtYzliOC00ZTZiLWFhMDktODFmNDVlNTMwZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGeKh3zqaDnKzGr+2GFtMzNibdG6detRTC5y u6GkQsOKJD+110//8L313p09f2XR2aSZC2Nf76M7Z6pPgbZRvwXIXGD4tdSxBslJ HioFeI7auMmY8LjX0DmBjnsEuMxQwyIVRr/0kPZq9UQcuMklrlkboFo5RZJkob15 s6/rRnD1zF/6VLdD6XhOkhOnu7GHHVU9iMFDXEaPRJj3zfIiRxHbKLWqiF8SLOMu czUajsZ66ZvpoNPQJlOqhnMXP+1s8aboLwnSOGhzSdgK0Gs+znI6Liv8Q/+bm9OX iH+OZEljGcqlF3IQXQzsvwXs1L9fGgfCB8pEZBA1UpA8H6JUfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0To7ZxGNnLG+edL68o0uUJlPZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWFmMjhlMGYtMDViZC0z MWEyLWI0YjAtY2IzNGU2MTk1ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbmH4WUMEySN5mG60Q4Ls8M//C/pbXghMVQxJin5WAAgQ7IwMjfU6OE MRA5h8IUE3H6gDgF1RtFGKLz+k57Xbg/2JKu78S/nq7Kuj/YmNW+icyNjGjgiJ+N so2L6nal4+qZdAkWBoZPuDOmUgieJeaVJwadI3Vgv5jpRiSUnPzI7lPvbcqnrpk3 4isigTBgqYgG/csa1NmY1nbpkvrus3MwkvOs4NI5UaDtJm+4ixZ4JiGBrp+4XTc+ P2CCO20VMhjxnEakJp+hUrQOoGu5NAvF8vw/q8wVH15W2zjlc6uVv3m5sY7om5De SR7busdafMiB0UlRAI3Bs4Ui0Ydoe8U= -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:39 2025 by rpki-client