$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa File: 3821e3dc-b2a8-348a-8401-999696cbb28c.roa (raw, json) Hash identifier: 5aMREx1S2WXrUUYV9npayu9DQ1N6vFybbKX1WCxQ1pM= Subject key identifier: 86:14:B1:3C:EC:AC:72:C4:F9:C6:6E:FF:1D:E3:84:66:C4:17:0A:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B679762A010736B61FA0D4240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:62:a0:10:73:6b:61:fa:0d:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=77c6d235-e741-418d-a0ce-727f5914d289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:df:c9:d4:04:1b:1d:da:75:90:0a:64:96:dd: 90:e5:f4:76:dd:1a:5d:09:89:60:70:f8:45:a6:3d: 3d:6d:6b:2d:88:5f:db:ef:48:13:5b:84:08:92:64: 70:7a:41:ab:ea:1b:dc:15:9b:6c:9c:3c:28:4a:b9: 2e:65:bd:ce:02:e2:63:a0:dd:34:34:9e:eb:c7:6b: 93:b1:98:37:17:b3:cb:03:92:6e:44:00:a5:93:9e: 7a:47:ad:b2:04:ea:42:94:e3:32:4e:17:d2:26:8f: 3d:72:39:f4:b8:a5:d7:3f:14:d6:d2:b4:4c:30:cc: 48:cf:03:48:51:05:69:b5:dd:a0:53:f2:39:e2:9a: c5:be:03:7a:ca:01:56:36:d5:d7:1b:ca:1b:a8:22: 3e:eb:69:f4:e2:67:95:c6:79:97:f1:52:ab:1e:12: 63:be:4b:18:ff:00:c5:f0:2b:4e:b9:7f:de:02:47: 22:b8:ce:90:ea:af:78:c3:8c:4a:08:f3:41:0b:b2: 93:33:3c:4b:bd:95:66:5f:c7:02:a8:32:7b:ab:3f: d7:2b:14:e5:f9:d6:fa:69:17:ac:12:01:77:02:88: 7c:c7:78:36:0c:cb:b7:91:56:d8:74:0f:f7:08:f9: a7:44:76:b7:b7:81:a3:a4:1d:67:f2:08:86:58:d5: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:14:B1:3C:EC:AC:72:C4:F9:C6:6E:FF:1D:E3:84:66:C4:17:0A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9a:ab:ee:29:ac:fd:0f:5b:80:ce:97:59:02:a4:e9:1b:6b: ba:71:26:25:07:dd:47:2e:1c:82:2e:5a:60:00:55:d2:ea:85: ce:15:bd:14:e9:1c:f2:3b:18:f1:4a:4e:12:eb:6b:f8:79:59: 5b:69:20:33:95:72:58:72:98:17:28:90:2d:f1:32:c8:85:e4: 4f:ae:5f:c0:48:8e:e9:76:71:5c:3b:df:26:e7:7e:0e:42:a6: da:aa:27:bf:08:35:12:55:e1:ea:8b:84:5f:11:ab:60:f9:bf: 8f:cd:97:5f:b3:ff:6a:9b:c7:a8:71:11:cd:65:61:da:53:97: 85:d3:bb:21:e8:95:22:52:89:cf:cc:74:41:a3:41:42:22:cb: 82:17:ef:b2:cf:3b:53:43:a7:65:20:8f:18:20:aa:df:d8:57: 01:a2:28:8c:99:d8:91:9a:4f:99:70:75:f9:14:8c:30:4a:03: 2e:c7:c8:8c:97:0d:82:09:25:6f:71:fb:79:46:16:dc:37:ca: a1:a1:cb:2b:f3:73:a6:cf:b7:dc:a0:43:3c:78:ac:73:65:2e: d6:84:79:26:1f:79:18:bc:e1:f3:35:a3:7c:be:44:f6:4d:e4: 4c:5a:91:78:d7:ff:b0:3e:e6:d2:4d:55:91:0d:5b:3d:9c:40: 72:ec:e8:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2KgEHNrYfoNQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzdjNmQyMzUtZTc0MS00MThkLWEwY2UtNzI3ZjU5MTRkMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N/J1AQbHdp1kApklt2Q5fR23RpdCYlgcPhF pj09bWstiF/b70gTW4QIkmRwekGr6hvcFZtsnDwoSrkuZb3OAuJjoN00NJ7rx2uT sZg3F7PLA5JuRAClk556R62yBOpClOMyThfSJo89cjn0uKXXPxTW0rRMMMxIzwNI UQVptd2gU/I54prFvgN6ygFWNtXXG8obqCI+62n04meVxnmX8VKrHhJjvksY/wDF 8CtOuX/eAkciuM6Q6q94w4xKCPNBC7KTMzxLvZVmX8cCqDJ7qz/XKxTl+db6aRes EgF3Aoh8x3g2DMu3kVbYdA/3CPmnRHa3t4GjpB1n8giGWNUulQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYUsTzsrHLE+cZu/x3jhGbEFwpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzgyMWUzZGMtYjJhOC0z NDhhLTg0MDEtOTk5Njk2Y2JiMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqaq+4prP0PW4DOl1kCpOkba7pxJiUH3UcuHIIuWmAAVdLqhc4VvRTp HPI7GPFKThLra/h5WVtpIDOVclhymBcokC3xMsiF5E+uX8BIjul2cVw73ybnfg5C ptqqJ78INRJV4eqLhF8Rq2D5v4/Nl1+z/2qbx6hxEc1lYdpTl4XTuyHolSJSic/M dEGjQUIiy4IX77LPO1NDp2Ugjxggqt/YVwGiKIyZ2JGaT5lwdfkUjDBKAy7HyIyX DYIJJW9x+3lGFtw3yqGhyyvzc6bPt9ygQzx4rHNlLtaEeSYfeRi84fM1o3y+RPZN 5ExakXjX/7A+5tJNVZENWz2cQHLs6Pk= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:04 2025 by rpki-client