$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/edbce115-beb7-3b9a-b27f-35d1961413cc.roa File: edbce115-beb7-3b9a-b27f-35d1961413cc.roa (raw, json) Hash identifier: K7ObJNzwmtktOTc3Cq/wRUZklFAezNxE8ZmLh8EETVg= Subject key identifier: D3:99:0C:45:CA:6D:62:E7:5D:C5:F6:E3:8C:58:D7:3F:5E:98:0A:CA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DBAEE302BE55446F135D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/edbce115-beb7-3b9a-b27f-35d1961413cc.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 70.32.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:ae:e3:02:be:55:44:6f:13:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=abd91cfc-1522-45d0-9c9c-717871fc54ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:95:5f:b1:d2:b4:b3:a9:64:86:7f:a7:d5:98: 77:15:32:48:4d:ee:b2:0a:66:bd:52:43:56:56:e1: 66:67:33:ee:eb:12:12:3d:e2:cb:b4:bf:b9:fe:15: 47:bc:9f:b0:92:4f:bf:a7:69:d6:a4:42:a1:40:0d: 55:7e:d7:58:14:9c:d1:75:50:79:8e:d2:db:24:dc: 5d:5d:52:aa:c6:0e:7e:cc:ff:10:21:ee:79:ba:f6: 06:c1:fd:ae:c3:07:cf:8f:a0:0f:7b:15:de:e4:6f: 24:02:4f:f4:8c:82:02:20:7e:73:7f:64:4b:d4:0f: fd:b7:d8:0a:cd:ca:dc:15:40:2e:32:39:48:90:5d: 98:0f:80:0c:3c:a8:e4:15:45:8b:be:b9:04:33:7c: 7f:53:bf:5f:86:54:2a:8f:e6:5b:ba:e2:90:af:3f: 00:19:55:28:10:70:f5:e4:45:33:95:0e:f1:df:25: 5f:f7:61:e7:05:cc:46:4d:42:f2:9a:2c:b4:38:bd: d2:a2:ce:91:a1:e6:4a:45:c1:cc:e9:32:cb:f3:6e: 43:90:1d:0a:a3:0d:fb:52:8a:f3:9b:5a:78:5a:88: c6:29:1a:66:82:90:97:a1:91:5a:4c:65:39:74:e3: ea:50:a1:6a:37:e6:4c:7e:53:93:22:1e:f9:9d:dd: fa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:99:0C:45:CA:6D:62:E7:5D:C5:F6:E3:8C:58:D7:3F:5E:98:0A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/edbce115-beb7-3b9a-b27f-35d1961413cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0f:c3:c5:5f:ba:c6:3f:b2:d4:2f:cb:6e:71:94:95:62:f6: a2:25:e3:59:9e:29:a5:4c:90:39:ec:c5:f6:d6:f1:ba:57:93: e9:ba:e9:d3:b5:2f:fa:e7:be:f4:ce:f4:6a:df:f0:42:72:45: 4f:0e:98:12:1a:67:83:9e:bd:f7:52:81:cf:3f:b4:dd:7b:8b: d0:e9:95:3a:90:cf:68:1e:c8:15:bd:48:59:8d:f8:0d:01:5c: 09:95:ff:f7:ba:11:81:a7:8c:d6:b0:e2:5a:13:19:d3:f6:ef: 09:af:1a:a3:60:23:1c:ce:1d:96:95:fc:56:03:e3:00:d8:c7: 83:3b:ce:ad:38:36:36:16:6e:fc:92:aa:02:c9:83:02:77:f9: a4:91:d1:b9:4f:84:2a:64:98:a0:e1:85:a2:b4:86:5d:0d:1c: 8f:33:8c:36:6c:ae:a5:c4:6b:5b:1e:4e:c9:e1:fc:39:63:d7: 44:0b:08:ea:c6:86:e1:79:b3:6e:2f:43:64:2a:94:ed:4a:d2: ad:21:5e:fa:f1:bb:5f:00:6a:4a:c4:ac:c3:f3:ff:c4:a8:e3: 38:33:69:30:67:14:84:a4:7c:b4:4a:e9:d0:c1:36:3f:4e:4d: 19:9c:ad:06:d8:3c:ed:3e:f5:50:f1:df:13:53:5d:d9:b5:22: bc:37:43:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG267jAr5VRG8TXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YWJkOTFjZmMtMTUyMi00NWQwLTljOWMtNzE3ODcxZmM1NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJVfsdK0s6lkhn+n1Zh3FTJITe6yCma9UkNW VuFmZzPu6xISPeLLtL+5/hVHvJ+wkk+/p2nWpEKhQA1VftdYFJzRdVB5jtLbJNxd XVKqxg5+zP8QIe55uvYGwf2uwwfPj6APexXe5G8kAk/0jIICIH5zf2RL1A/9t9gK zcrcFUAuMjlIkF2YD4AMPKjkFUWLvrkEM3x/U79fhlQqj+ZbuuKQrz8AGVUoEHD1 5EUzlQ7x3yVf92HnBcxGTULymiy0OL3Sos6RoeZKRcHM6TLL825DkB0Kow37Uorz m1p4WojGKRpmgpCXoZFaTGU5dOPqUKFqN+ZMflOTIh75nd36sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOZDEXKbWLnXcX244xY1z9emArKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWRiY2UxMTUtYmViNy0z YjlhLWIyN2YtMzVkMTk2MTQxM2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEPw8VfusY/stQvy25xlJVi9qIl41meKaVMkDnsxfbW8bpXk+m66dO1 L/rnvvTO9Grf8EJyRU8OmBIaZ4OevfdSgc8/tN17i9DplTqQz2geyBW9SFmN+A0B XAmV//e6EYGnjNaw4loTGdP27wmvGqNgIxzOHZaV/FYD4wDYx4M7zq04NjYWbvyS qgLJgwJ3+aSR0blPhCpkmKDhhaK0hl0NHI8zjDZsrqXEa1seTsnh/Dlj10QLCOrG huF5s24vQ2QqlO1K0q0hXvrxu18AakrErMPz/8So4zgzaTBnFISkfLRK6dDBNj9O TRmcrQbYPO0+9VDx3xNTXdm1Irw3QyU= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:36 2025 by rpki-client