$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa File: 1846a1ae-e4b1-342c-a08f-173f928c2d62.roa (raw, json) Hash identifier: fMCzMGPOlx0a5/bpRccnvCh58bWbV8uAWHj07hsmvhs= Subject key identifier: 8C:12:7E:0F:74:DD:87:65:4E:B7:B6:C2:12:9C:17:07:40:A6:4C:51 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797AF7158E054409770F680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:af:71:58:e0:54:40:97:70:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=92b57a1b-98e3-4c68-9835-3b74c5633436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:4d:7e:f6:c1:0e:e1:3b:4f:f2:00:64:01: b3:1a:aa:c4:81:c3:6e:a6:7e:83:bb:dc:78:57:73: fa:a0:77:a8:40:60:50:44:83:f8:b3:84:6f:ed:5c: dd:97:a6:75:e6:16:dd:6d:ba:74:74:b6:04:73:d4: 88:77:38:f4:d7:78:77:d6:e4:06:6c:f4:d3:aa:04: 62:a7:3c:64:d1:3c:66:79:b0:e0:da:57:49:7a:29: 81:9d:57:b4:3f:49:2a:5d:2f:8f:00:8d:cc:17:96: 0a:de:0c:bf:9c:23:47:e3:ba:fe:f7:3d:c7:94:76: 18:eb:06:53:c0:bf:c5:5f:e4:88:e8:ee:2e:7c:fb: 0c:51:fd:99:3a:75:3f:c0:4e:65:57:83:57:92:99: 63:fb:a4:4a:10:6e:89:67:e6:a2:02:3f:6f:2b:ef: 47:fc:2c:0f:f8:d7:66:4b:2d:a4:76:d3:44:01:71: d2:ed:98:90:93:7f:22:dc:21:7c:81:63:60:eb:36: 7c:9e:12:f6:a8:57:4c:cc:90:c8:4b:c5:a4:d9:ec: 97:de:ce:75:72:94:67:57:18:0c:e7:86:c6:99:f1: 76:2d:f5:4b:1b:9b:33:00:e9:6d:5d:bf:2c:4e:2a: fb:60:83:f2:82:aa:1d:fe:6b:d5:1a:24:b8:45:b1: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:12:7E:0F:74:DD:87:65:4E:B7:B6:C2:12:9C:17:07:40:A6:4C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9b:de:dd:34:06:ae:38:65:1c:1a:ba:a9:15:5e:fc:82:1b: 1e:8d:d9:2c:1c:95:03:ef:e0:21:67:b9:85:75:c6:67:e4:8f: 6d:04:8d:7f:10:2b:d9:8d:ef:01:ca:50:92:b6:b0:97:d7:83: 5c:5e:a9:6a:a1:6b:a2:65:89:82:db:e7:3c:24:7c:0e:09:ed: 92:ff:cd:d8:23:0d:be:ae:25:87:3e:27:94:06:ba:8d:6c:c6: f8:6e:36:e3:ed:50:4c:70:62:d1:a9:f8:e5:7a:aa:4c:6e:1a: 9b:82:80:89:91:40:eb:69:2d:85:7f:b1:f9:8b:9d:18:31:5d: 89:f6:bc:87:59:ad:7e:94:27:4e:80:9b:2b:6c:78:de:20:9a: a2:87:d9:42:e5:ea:1e:53:2f:80:23:10:f7:86:85:d8:0f:e1: a2:9c:34:68:86:6f:74:ba:6a:7a:d5:e4:b3:9b:31:7d:f6:1d: 33:fc:8b:9a:89:cf:cd:29:98:db:99:e0:1a:09:7a:a5:ce:8f: 2f:eb:98:29:51:ce:d1:25:c9:75:72:4d:8e:51:3f:3e:5d:80: 48:15:4e:1b:47:ee:0b:b8:99:a3:54:04:18:84:f9:ea:c6:e0: 25:3a:84:5c:e6:9c:81:f3:72:79:c8:dd:90:80:79:cf:21:93: 02:f0:6b:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl69xWOBUQJdw9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OTJiNTdhMWItOThlMy00YzY4LTk4MzUtM2I3NGM1NjMzNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt1NfvbBDuE7T/IAZAGzGqrEgcNupn6Du9x4 V3P6oHeoQGBQRIP4s4Rv7Vzdl6Z15hbdbbp0dLYEc9SIdzj013h31uQGbPTTqgRi pzxk0TxmebDg2ldJeimBnVe0P0kqXS+PAI3MF5YK3gy/nCNH47r+9z3HlHYY6wZT wL/FX+SI6O4ufPsMUf2ZOnU/wE5lV4NXkplj+6RKEG6JZ+aiAj9vK+9H/CwP+Ndm Sy2kdtNEAXHS7ZiQk38i3CF8gWNg6zZ8nhL2qFdMzJDIS8Wk2eyX3s51cpRnVxgM 54bGmfF2LfVLG5szAOltXb8sTir7YIPygqod/mvVGiS4RbGzWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwSfg903YdlTre2whKcFwdApkxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTg0NmExYWUtZTRiMS0z NDJjLWEwOGYtMTczZjkyOGMyZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyb3t00Bq44ZRwauqkVXvyCGx6N2SwclQPv4CFnuYV1xmfkj20EjX8Q K9mN7wHKUJK2sJfXg1xeqWqha6JliYLb5zwkfA4J7ZL/zdgjDb6uJYc+J5QGuo1s xvhuNuPtUExwYtGp+OV6qkxuGpuCgImRQOtpLYV/sfmLnRgxXYn2vIdZrX6UJ06A mytseN4gmqKH2ULl6h5TL4AjEPeGhdgP4aKcNGiGb3S6anrV5LObMX32HTP8i5qJ z80pmNuZ4BoJeqXOjy/rmClRztElyXVyTY5RPz5dgEgVThtH7gu4maNUBBiE+erG 4CU6hFzmnIHzcnnI3ZCAec8hkwLwa2g= -----END CERTIFICATE-----Generated at Fri Oct 17 10:44:35 2025 by rpki-client