$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa File: 3af32542-c9f5-3111-92af-80e94a931b6a.roa (raw, json) Hash identifier: +YF/raepDJE3qZJ188ZA/jLhRczDwI1I1j4HZPZ1xKQ= Subject key identifier: E8:C8:33:42:4D:8C:D0:A5:EE:BE:BD:EE:46:D8:F6:49:64:0C:5F:16 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B679756E6FF7D0351CC000A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:56:e6:ff:7d:03:51:cc:00:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d864f3c0-d4de-4933-82bc-c084ffddefe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:74:f2:4c:b2:5f:e7:ba:51:43:22:1d:6d:cd: 98:ee:13:ff:f5:20:5e:c2:2f:6c:04:5e:f3:a9:2d: 9a:2c:89:84:95:8f:73:73:ec:57:e6:9d:e5:03:47: 56:e2:e0:82:00:5f:4f:22:a8:5c:72:99:25:ef:ec: a9:d6:21:2a:f7:9c:f6:8f:7f:8a:61:af:d9:4f:54: 46:fc:55:5d:3c:8c:bf:3d:b5:50:bf:06:0d:dd:41: 2c:b7:21:32:49:f6:47:3e:9f:da:ac:43:1a:89:95: b9:94:0f:8c:64:28:4f:65:c4:af:79:87:87:51:3f: cd:31:61:31:d9:a0:4e:ae:73:b1:ec:c7:09:dc:ae: cf:ad:f0:93:28:94:39:ea:d7:c2:a5:9c:84:89:c0: a9:1c:7d:4d:25:34:6b:f7:55:73:5e:a5:2d:60:57: 14:a1:89:e1:27:81:c8:05:eb:97:a1:20:82:af:49: a0:76:e1:b2:55:1a:f3:4c:88:7e:6d:59:68:4c:03: 5e:38:19:d8:82:24:10:22:f0:a9:c4:07:4c:6c:05: 0a:ca:0c:46:19:db:37:32:8d:8b:f6:cf:99:9a:42: 0e:35:fe:da:0e:87:56:dd:52:72:69:84:80:24:0f: 1c:81:48:ed:34:78:88:58:8d:cd:eb:53:6d:74:f5: f8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C8:33:42:4D:8C:D0:A5:EE:BE:BD:EE:46:D8:F6:49:64:0C:5F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3c:bf:29:91:d0:dc:0c:6b:91:a1:a0:d3:85:0b:91:1f:d3: b5:cb:2f:15:f7:35:9b:3d:67:4a:50:1c:60:bf:12:24:0e:d6: 2d:7a:40:b0:21:13:37:39:e7:7b:65:4f:fe:f3:1e:17:8f:82: 88:0b:4b:f4:2a:d2:e6:9b:85:d9:c3:bb:22:c4:17:a7:44:35: 70:b9:2c:f9:a6:f2:46:c0:61:ab:a4:d3:54:ed:ac:ee:1f:26: 0e:36:e8:49:b0:b0:c5:1c:d8:a0:7c:70:d8:3c:05:b6:a5:26: 22:ec:d7:7f:64:45:9d:a4:2b:3e:84:35:8f:d1:e3:a6:20:53: 75:55:ac:d9:61:49:9f:00:1c:eb:35:a5:83:d4:f0:1c:53:66: 77:00:d5:3e:d7:8f:63:fa:00:4f:e5:21:d5:46:98:b8:2a:ec: cb:aa:ea:95:10:1c:90:7c:f1:c1:65:8f:90:69:50:4f:59:0a: e6:ec:d8:4b:c7:79:04:dc:05:6d:2e:b9:aa:f6:7a:24:e6:79: 3d:8b:63:98:b6:6f:cd:e0:39:ee:70:54:da:f4:72:9c:52:7a: 87:55:3e:4c:a9:dd:2c:53:fc:d9:4b:de:1c:9c:81:07:1e:59: b2:aa:51:18:fb:52:36:c5:fe:58:10:2a:50:6c:55:84:dc:f6: fd:84:bd:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1bm/30DUcwACoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDg2NGYzYzAtZDRkZS00OTMzLTgyYmMtYzA4NGZmZGRlZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXTyTLJf57pRQyIdbc2Y7hP/9SBewi9sBF7z qS2aLImElY9zc+xX5p3lA0dW4uCCAF9PIqhccpkl7+yp1iEq95z2j3+KYa/ZT1RG /FVdPIy/PbVQvwYN3UEstyEySfZHPp/arEMaiZW5lA+MZChPZcSveYeHUT/NMWEx 2aBOrnOx7McJ3K7PrfCTKJQ56tfCpZyEicCpHH1NJTRr91VzXqUtYFcUoYnhJ4HI BeuXoSCCr0mgduGyVRrzTIh+bVloTANeOBnYgiQQIvCpxAdMbAUKygxGGds3Mo2L 9s+ZmkIONf7aDodW3VJyaYSAJA8cgUjtNHiIWI3N61NtdPX4HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjIM0JNjNCl7r697kbY9klkDF8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FmMzI1NDItYzlmNS0z MTExLTkyYWYtODBlOTRhOTMxYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw8vymR0NwMa5GhoNOFC5Ef07XLLxX3NZs9Z0pQHGC/EiQO1i16QLAh Ezc553tlT/7zHhePgogLS/Qq0uabhdnDuyLEF6dENXC5LPmm8kbAYauk01TtrO4f Jg426EmwsMUc2KB8cNg8BbalJiLs139kRZ2kKz6ENY/R46YgU3VVrNlhSZ8AHOs1 pYPU8BxTZncA1T7Xj2P6AE/lIdVGmLgq7Muq6pUQHJB88cFlj5BpUE9ZCubs2EvH eQTcBW0uuar2eiTmeT2LY5i2b83gOe5wVNr0cpxSeodVPkyp3SxT/NlL3hycgQce WbKqURj7UjbF/lgQKlBsVYTc9v2Evfc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:06 2025 by rpki-client