$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa File: 2917b113-9e5f-3763-84e3-6da8775eeb3e.roa (raw, json) Hash identifier: okb8pi/7RycVunwWQhU36WnsuSrOrVTqqz2erTNrj34= Subject key identifier: 46:31:23:39:25:F3:4B:6A:E9:35:99:7B:EB:28:70:BF:D6:43:5B:CF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67977FE1BAE41E3BBF785600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:7f:e1:ba:e4:1e:3b:bf:78:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2d9d406e-ce13-4c9e-837b-d95102dfb37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:54:ae:58:e4:e4:73:e3:ee:4a:6b:69:bb: 0e:60:9a:86:63:33:7b:de:ac:90:fd:5e:6b:49:ce: ae:2c:df:3d:80:f8:c5:22:31:63:a3:a2:18:b3:4e: 18:9f:2b:2a:4b:28:f0:38:2a:3a:04:b8:ed:31:ab: 59:c2:2a:e4:86:1a:e2:35:c8:bc:21:be:da:73:29: ef:bb:c6:7b:fa:99:4c:ef:91:94:c2:6a:26:81:c1: 64:4a:db:6c:66:d9:2a:bb:97:2c:2d:8d:17:2e:15: ae:f8:44:43:cb:de:58:4c:fd:14:db:6a:ea:bc:e4: 46:d9:16:73:b4:7c:8b:96:57:6b:44:65:57:66:6f: da:f2:11:3c:8c:b9:4c:ba:af:84:01:60:dc:fb:78: 1b:7c:3f:8c:75:97:a7:3a:d5:61:71:eb:41:a8:38: 3e:15:a7:4e:bc:cf:ab:a1:f8:74:8c:f1:13:95:4c: fa:44:fc:60:af:3f:b4:43:06:3e:57:c6:b9:5d:35: 6c:30:57:fa:f1:1c:df:c6:1e:75:32:96:09:a3:5d: 46:bb:fa:5d:43:16:73:ab:88:f3:a1:f8:f2:e5:30: 21:7e:24:73:4f:f2:dc:b2:b7:42:7a:02:9b:c6:d8: 77:6c:aa:62:5b:9e:d3:c4:00:2e:0f:29:83:ee:ed: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:31:23:39:25:F3:4B:6A:E9:35:99:7B:EB:28:70:BF:D6:43:5B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:28:19:ca:0a:34:70:80:6b:62:db:85:65:30:01:c7:ec:60: 3a:f7:d9:83:b4:b7:bc:a7:05:2f:c0:d9:05:60:ea:c9:75:8c: 4c:0e:9a:33:1d:cf:91:d2:da:29:a6:53:ae:24:aa:a2:57:fd: d5:cd:6c:3f:55:23:83:45:25:00:bd:87:36:32:a7:70:46:c6: a7:6d:5c:06:0c:a6:9a:3b:7f:70:7a:eb:fb:93:86:e9:cd:f1: ce:98:2f:c6:d3:81:f0:c8:b2:13:01:46:30:46:cf:64:f9:ba: 82:1a:41:13:23:32:c5:7e:e4:72:f8:e5:91:5f:1a:99:35:09: 0e:ec:fb:ee:70:a2:53:17:77:63:71:21:6b:f8:18:68:e8:b3: 86:7c:49:89:6b:87:b8:98:2f:41:00:4c:4a:04:e6:37:89:85: 46:9e:c4:a3:6e:6b:11:6f:4a:68:e7:44:ee:07:43:a5:95:d4: d0:9c:cd:97:32:10:13:19:7e:1f:02:ac:a2:f3:8b:98:aa:80: ad:37:6b:ac:4a:2e:3c:fe:b2:14:5a:e2:d9:15:76:38:94:e6: ee:07:50:83:4c:ca:25:d9:72:2f:29:9b:59:1e:04:2f:4f:6b: 28:14:7c:5c:63:85:14:b5:94:84:56:e2:e8:d7:63:46:b4:f6: 07:d2:50:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3/huuQeO794VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmQ5ZDQwNmUtY2UxMy00YzllLTgzN2ItZDk1MTAyZGZiMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSpUrljk5HPj7kprabsOYJqGYzN73qyQ/V5r Sc6uLN89gPjFIjFjo6IYs04YnysqSyjwOCo6BLjtMatZwirkhhriNci8Ib7acynv u8Z7+plM75GUwmomgcFkSttsZtkqu5csLY0XLhWu+ERDy95YTP0U22rqvORG2RZz tHyLlldrRGVXZm/a8hE8jLlMuq+EAWDc+3gbfD+MdZenOtVhcetBqDg+FadOvM+r ofh0jPETlUz6RPxgrz+0QwY+V8a5XTVsMFf68Rzfxh51MpYJo11Gu/pdQxZzq4jz ofjy5TAhfiRzT/LcsrdCegKbxth3bKpiW57TxAAuDymD7u1KowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYxIzkl80tq6TWZe+socL/WQ1vPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjkxN2IxMTMtOWU1Zi0z NzYzLTg0ZTMtNmRhODc3NWVlYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcoGcoKNHCAa2LbhWUwAcfsYDr32YO0t7ynBS/A2QVg6sl1jEwOmjMd z5HS2immU64kqqJX/dXNbD9VI4NFJQC9hzYyp3BGxqdtXAYMppo7f3B66/uThunN 8c6YL8bTgfDIshMBRjBGz2T5uoIaQRMjMsV+5HL45ZFfGpk1CQ7s++5wolMXd2Nx IWv4GGjos4Z8SYlrh7iYL0EATEoE5jeJhUaexKNuaxFvSmjnRO4HQ6WV1NCczZcy EBMZfh8CrKLzi5iqgK03a6xKLjz+shRa4tkVdjiU5u4HUINMyiXZci8pm1keBC9P aygUfFxjhRS1lIRW4ujXY0a09gfSUGA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:04 2025 by rpki-client