$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa File: 16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa (raw, json) Hash identifier: Ir/BVBdNMuxTDJsEXthPSmMM7XINk0on9QgEFQx9dig= Subject key identifier: 04:DF:3C:D2:6F:67:9C:E0:D5:E2:73:87:25:85:C8:40:BA:C7:36:95 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B679782D2B7A1187AC0DA7C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:82:d2:b7:a1:18:7a:c0:da:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2d218561-bc90-40ac-bcbc-c247d35d25b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:86:aa:ef:17:7c:81:4e:81:64:98:11:86:01: 58:60:56:6b:bf:d0:4f:48:68:34:32:df:ff:b7:27: e6:6c:9f:29:9c:ba:2a:c1:ec:72:59:68:a8:17:fe: 35:cd:5d:0e:b1:36:ff:f0:92:f4:6b:20:66:9d:2b: 1f:ab:6b:97:94:6f:99:a8:05:a5:57:c3:9d:f2:65: 9c:7c:f4:fc:dc:11:5d:59:e4:75:23:12:a4:d4:df: 88:23:84:9a:04:30:b4:82:d4:3d:13:4a:56:ec:86: 65:d7:42:a9:68:f7:32:28:1d:57:f0:9c:37:a9:e2: 4e:c2:8d:c3:5a:0f:4f:f4:65:49:31:c9:ed:a3:f3: b3:7a:a3:50:41:f2:b8:8b:32:b0:55:48:3b:0d:ff: a9:aa:37:ca:e7:2c:01:7b:4a:a9:b8:bb:62:6f:e9: b5:a2:e8:61:5a:0f:0a:5f:70:55:51:9f:7e:ab:cd: 5c:b8:9e:a9:21:41:bd:c8:91:19:9e:c7:25:51:96: 53:73:30:85:9f:ea:59:85:87:f7:ce:28:8d:4d:8a: f3:fc:c3:9f:93:1b:ad:68:f7:9c:5c:f0:e5:b4:38: 6f:cd:84:d7:98:e6:0a:c0:4f:9b:6b:37:f3:d2:6e: 05:94:87:db:5f:65:87:43:73:2a:04:a7:21:ed:ca: 0b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DF:3C:D2:6F:67:9C:E0:D5:E2:73:87:25:85:C8:40:BA:C7:36:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:22:d0:71:bc:78:e2:cd:0e:51:37:5b:3f:2c:b3:33:37:f4: f4:5f:8a:24:f2:9f:9d:4a:1c:76:eb:d6:09:07:42:43:93:c5: be:4e:f9:3e:1e:22:42:b3:ab:3d:21:a3:58:43:24:77:93:41: ae:34:31:7e:cf:95:34:ce:f9:de:f5:e4:8c:ca:28:d5:92:79: 1e:79:47:0b:27:4f:e2:76:fa:ef:ea:48:ec:fb:a4:1f:51:75: da:83:46:21:d4:c4:e8:d0:25:2c:bd:03:a9:47:11:0c:fd:fd: 6e:b8:58:f7:cc:99:ad:e3:78:86:fc:62:eb:4d:dc:8c:34:a0: 2c:c3:16:9a:61:e7:41:7a:7a:af:c3:e4:c9:ca:fd:52:88:9a: c1:b0:b5:fd:88:17:03:83:b8:98:c2:c9:52:00:d2:a0:6d:ef: 9a:58:56:ab:8e:84:f5:6c:ee:d9:3e:9f:5f:d1:a6:00:46:fd: 0f:3c:a2:5e:59:6b:82:8a:16:10:17:04:52:1a:a2:03:57:35: 0a:eb:7a:49:95:09:9c:e0:f0:a2:cb:7c:ff:9f:ff:1e:c2:50: 11:a4:db:44:ab:25:b1:f5:55:a5:26:47:8d:63:26:ac:7b:33: 19:f7:c0:00:0f:65:83:76:28:bf:50:0b:48:fb:44:3c:7d:13: 48:80:7c:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4LSt6EYesDafIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmQyMTg1NjEtYmM5MC00MGFjLWJjYmMtYzI0N2QzNWQyNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYaq7xd8gU6BZJgRhgFYYFZrv9BPSGg0Mt// tyfmbJ8pnLoqwexyWWioF/41zV0OsTb/8JL0ayBmnSsfq2uXlG+ZqAWlV8Od8mWc fPT83BFdWeR1IxKk1N+II4SaBDC0gtQ9E0pW7IZl10KpaPcyKB1X8Jw3qeJOwo3D Wg9P9GVJMcnto/OzeqNQQfK4izKwVUg7Df+pqjfK5ywBe0qpuLtib+m1ouhhWg8K X3BVUZ9+q81cuJ6pIUG9yJEZnsclUZZTczCFn+pZhYf3ziiNTYrz/MOfkxutaPec XPDltDhvzYTXmOYKwE+bazfz0m4FlIfbX2WHQ3MqBKch7coL4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATfPNJvZ5zg1eJzhyWFyEC6xzaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTZlMWFjODEtODBhOS0z ZGVlLTliZmEtYThhMGQzMjg1MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoi0HG8eOLNDlE3Wz8sszM39PRfiiTyn51KHHbr1gkHQkOTxb5O+T4e IkKzqz0ho1hDJHeTQa40MX7PlTTO+d715IzKKNWSeR55RwsnT+J2+u/qSOz7pB9R ddqDRiHUxOjQJSy9A6lHEQz9/W64WPfMma3jeIb8YutN3Iw0oCzDFpph50F6eq/D 5MnK/VKImsGwtf2IFwODuJjCyVIA0qBt75pYVquOhPVs7tk+n1/RpgBG/Q88ol5Z a4KKFhAXBFIaogNXNQrrekmVCZzg8KLLfP+f/x7CUBGk20SrJbH1VaUmR41jJqx7 Mxn3wAAPZYN2KL9QC0j7RDx9E0iAfHU= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:02 2025 by rpki-client