$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa File: 1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa (raw, json) Hash identifier: eSrX7MzbjtD22lOgfE8QSdpyXxktMawO82x6Ws1c2Mg= Subject key identifier: E8:2F:7E:3C:94:94:46:94:5D:3A:D9:44:E3:91:3C:3E:45:62:39:FE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797652A9C10010301952280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:65:2a:9c:10:01:03:01:95:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=eb8004e3-2413-4f5d-84bc-f4ed960d1b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:ab:0c:bb:69:e9:8c:2d:6a:74:2e:fd:79: cd:0e:42:2c:82:78:a3:8d:fc:05:d1:09:b7:63:30: c5:98:01:c3:91:90:90:80:0f:2d:bb:3b:91:3e:5a: 40:ae:4c:f0:b0:e7:9a:c8:5f:a3:c6:12:91:57:1a: 03:9d:3f:4c:e1:50:74:86:7a:35:9d:18:da:4d:8c: 5c:98:09:d0:84:d7:b5:76:11:a1:db:6c:31:e3:a2: a8:66:82:12:8f:b9:8b:f2:68:65:3e:6e:2b:16:c2: 10:43:b8:bb:d1:78:48:e3:f4:5e:45:2c:8f:31:18: 9c:fe:8b:68:95:cc:6a:ac:f1:d9:f4:87:30:d2:20: f7:93:73:b8:51:55:b5:45:d7:65:ae:b0:92:44:ed: 86:e3:90:89:24:8d:dd:75:ca:b0:90:68:b4:ee:a4: b9:85:12:61:21:3e:98:ae:6a:40:1c:d9:92:76:6f: 88:38:28:cf:ea:6e:69:25:f2:0e:c4:51:30:69:f8: 5f:39:d9:5c:cf:d5:ba:1b:ed:df:40:ea:c9:85:ba: 38:39:d3:59:a1:e8:d9:ac:63:73:e0:02:0a:c6:3e: 0b:ac:77:c6:e2:ff:03:3b:95:03:de:d8:14:de:64: ed:9a:5f:f3:a9:50:92:ae:5a:c8:ab:0a:01:bf:2c: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2F:7E:3C:94:94:46:94:5D:3A:D9:44:E3:91:3C:3E:45:62:39:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:49:45:c8:a6:34:ba:08:d6:69:d6:e9:e5:b0:8e:ca:f5:1f: 05:de:79:85:61:72:92:44:6b:fb:8f:60:aa:45:89:a7:61:1a: 95:45:ae:32:15:47:a1:d0:5a:4a:86:22:fc:11:ed:47:7c:d4: 06:32:3c:a8:c7:02:e8:f1:d4:46:83:fb:af:e8:e3:db:2f:11: 0e:2b:84:f9:64:e1:94:c1:89:6e:52:cc:de:25:3a:8d:83:a4: be:5f:1d:4c:39:19:19:e2:8e:70:2a:3e:04:56:f8:50:bb:60: eb:3f:21:97:94:ff:9e:ea:50:e7:04:9f:af:17:ed:b7:a8:5f: 82:f2:4e:4e:c3:30:dc:8e:d5:36:8b:6f:a1:4c:ae:21:ae:ec: 00:db:d0:70:16:1f:66:a3:57:f0:ff:4b:d6:3d:2d:53:6c:d8: cd:49:47:ad:d3:99:28:e6:52:91:6b:93:fd:15:35:82:fd:d7: e5:66:1e:26:5a:51:e5:56:7e:63:0a:9e:22:40:4e:56:f2:31: d9:0d:e4:72:07:0a:39:39:18:3a:13:0e:89:f1:ac:ea:7e:1c: 3b:4c:49:fc:25:fc:07:77:f4:45:80:ad:c6:83:a1:53:d5:74: 7d:28:c3:07:16:97:5b:ee:56:8f:c2:ac:84:05:6a:8e:92:e0: 78:d2:7d:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2UqnBABAwGVIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWI4MDA0ZTMtMjQxMy00ZjVkLTg0YmMtZjRlZDk2MGQxYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9irDLtp6YwtanQu/XnNDkIsgnijjfwF0Qm3 YzDFmAHDkZCQgA8tuzuRPlpArkzwsOeayF+jxhKRVxoDnT9M4VB0hno1nRjaTYxc mAnQhNe1dhGh22wx46KoZoISj7mL8mhlPm4rFsIQQ7i70XhI4/ReRSyPMRic/oto lcxqrPHZ9Icw0iD3k3O4UVW1RddlrrCSRO2G45CJJI3ddcqwkGi07qS5hRJhIT6Y rmpAHNmSdm+IOCjP6m5pJfIOxFEwafhfOdlcz9W6G+3fQOrJhbo4OdNZoejZrGNz 4AIKxj4LrHfG4v8DO5UD3tgU3mTtml/zqVCSrlrIqwoBvyx4HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgvfjyUlEaUXTrZROORPD5FYjn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTEwOGM1NWEtZDJjMC0z Y2YyLWE2NmItODY3NGE3MGU0Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJJRcimNLoI1mnW6eWwjsr1HwXeeYVhcpJEa/uPYKpFiadhGpVFrjIV R6HQWkqGIvwR7Ud81AYyPKjHAujx1EaD+6/o49svEQ4rhPlk4ZTBiW5SzN4lOo2D pL5fHUw5GRnijnAqPgRW+FC7YOs/IZeU/57qUOcEn68X7beoX4LyTk7DMNyO1TaL b6FMriGu7ADb0HAWH2ajV/D/S9Y9LVNs2M1JR63TmSjmUpFrk/0VNYL91+VmHiZa UeVWfmMKniJATlbyMdkN5HIHCjk5GDoTDonxrOp+HDtMSfwl/Ad39EWArcaDoVPV dH0owwcWl1vuVo/CrIQFao6S4HjSfXI= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:08 2025 by rpki-client