$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa File: fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa (raw, json) Hash identifier: BM2rYgPZHTE5/P9KkLH5psblWEbMkYbLmI0baXu+5As= Subject key identifier: AD:74:86:3A:5E:6D:79:B4:E8:BB:B2:F1:9E:C5:50:6F:FC:EF:4F:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB8BD5946C35911817D640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:8b:d5:94:6c:35:91:18:17:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=5f7692de-9683-4d53-a07c-fab8cc7f5b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:7c:49:9f:da:05:38:fa:ab:f6:19:56:b1: 0d:55:f6:d5:c3:60:a7:5d:29:e0:e5:2f:2f:7a:56: d2:c1:a1:dc:02:e5:45:53:ac:b0:10:eb:21:1f:41: 09:97:fa:e6:5b:ad:d2:a8:b7:1f:f9:7a:7e:5a:95: 9a:54:fd:d3:e6:e3:c5:fc:2a:17:a9:6d:b0:7a:a5: cc:9b:2f:ba:2f:37:b4:d6:20:fd:bc:3d:ba:ff:b9: 27:24:ff:6b:70:ad:c6:c9:8c:eb:09:8b:c8:cc:f0: c1:ae:df:fa:9b:b3:79:d3:81:5f:6a:55:3e:28:15: 2f:2e:ba:a7:1a:a0:32:6e:c1:e2:90:aa:bb:07:5a: 2b:9c:c2:3e:0d:92:6f:1e:85:3e:76:00:e1:d3:46: f2:72:a7:ae:ef:8b:e3:78:1f:e7:15:dd:80:cb:39: 0f:63:24:4e:df:ee:9f:cc:3b:9b:b8:1d:73:7c:31: db:40:94:ac:be:13:49:d5:17:c2:72:6b:d8:59:9c: 7d:74:13:f0:8e:8d:d2:98:cb:c4:a2:50:08:24:9a: 40:d6:86:cd:ef:d5:11:41:fc:61:c3:ef:b7:7e:9a: 3f:36:44:84:8f:c8:2a:db:da:9b:7b:35:05:40:64: 72:3f:4d:34:97:30:a9:65:28:6d:98:c6:a8:97:e1: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:74:86:3A:5E:6D:79:B4:E8:BB:B2:F1:9E:C5:50:6F:FC:EF:4F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:51:62:ad:9f:03:fc:91:04:40:b0:6a:87:6c:ff:b2:27:59: a4:dc:e7:b4:fe:37:6d:bb:24:c9:6c:6e:35:e6:74:3b:e4:81: dc:07:4e:4c:da:9f:42:17:8b:bc:16:08:35:40:29:0d:ad:de: 8e:37:1e:f2:e7:82:68:55:e3:5d:9b:04:30:ce:99:c4:e7:23: ef:26:00:bb:c9:ba:90:fa:ba:eb:c5:0c:6f:f4:d3:42:80:df: 17:81:a6:0b:21:d2:ff:f3:f9:75:89:fa:09:59:93:ff:40:9a: 03:c6:eb:68:23:b9:03:27:0f:1a:15:28:a2:85:0f:d8:14:5e: 78:67:25:ca:48:e3:57:2e:6d:a5:89:ae:06:d4:1c:02:75:c1: b7:11:70:88:01:92:73:f0:e7:86:e5:e8:2a:f4:de:f4:a7:b8: f6:32:46:c7:ed:58:12:54:72:63:cc:7f:e6:87:f8:10:8f:19: d1:c5:be:e4:82:cf:c3:bd:e4:29:62:3b:1d:4d:e6:05:6f:cb: a7:18:a5:8a:a8:31:95:ed:e7:0a:f5:c7:94:36:22:8a:c7:de: 19:ef:34:bc:94:b5:7f:14:42:6a:14:02:df:3f:93:fe:fd:2c: 74:dc:1e:58:27:ee:ae:02:66:9e:9e:6e:93:1c:e7:a1:e2:89: 11:17:cb:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24vVlGw1kRgX1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NWY3NjkyZGUtOTY4My00ZDUzLWEwN2MtZmFiOGNjN2Y1YjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypR8SZ/aBTj6q/YZVrENVfbVw2CnXSng5S8v elbSwaHcAuVFU6ywEOshH0EJl/rmW63SqLcf+Xp+WpWaVP3T5uPF/CoXqW2weqXM my+6Lze01iD9vD26/7knJP9rcK3GyYzrCYvIzPDBrt/6m7N504FfalU+KBUvLrqn GqAybsHikKq7B1ornMI+DZJvHoU+dgDh00bycqeu74vjeB/nFd2AyzkPYyRO3+6f zDubuB1zfDHbQJSsvhNJ1RfCcmvYWZx9dBPwjo3SmMvEolAIJJpA1obN79URQfxh w++3fpo/NkSEj8gq29qbezUFQGRyP000lzCpZShtmMaol+FngwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK10hjpebXm06Luy8Z7FUG/870/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmU0MzE5NmQtMGQ1ZC0z ZDhiLThiYjctNjQzNTZmYmE4NzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVRYq2fA/yRBECwaods/7InWaTc57T+N227JMlsbjXmdDvkgdwHTkza n0IXi7wWCDVAKQ2t3o43HvLngmhV412bBDDOmcTnI+8mALvJupD6uuvFDG/000KA 3xeBpgsh0v/z+XWJ+glZk/9AmgPG62gjuQMnDxoVKKKFD9gUXnhnJcpI41cubaWJ rgbUHAJ1wbcRcIgBknPw54bl6Cr03vSnuPYyRsftWBJUcmPMf+aH+BCPGdHFvuSC z8O95CliOx1N5gVvy6cYpYqoMZXt5wr1x5Q2IorH3hnvNLyUtX8UQmoUAt8/k/79 LHTcHlgn7q4CZp6ebpMc56HiiREXy1g= -----END CERTIFICATE-----Generated at Mon Aug 4 18:57:22 2025 by rpki-client