$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa File: 3da83a5f-2475-344d-bc7c-33066927f827.roa (raw, json) Hash identifier: ahoVxfuhJRZCZA5xI4M4GVIEy4zyEOX+0PsR1q24Wbs= Subject key identifier: 9C:9F:FF:44:DB:57:45:BB:DA:05:94:99:9D:56:E4:F8:79:E9:4D:15 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797966D816CB31A56638540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:96:6d:81:6c:b3:1a:56:63:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=245fd589-751f-41cf-8b06-58e1575a638d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d2:8b:09:28:f5:a8:6b:1a:da:4e:e5:4c:92: 3a:b1:3d:c7:b6:21:cf:6c:06:0d:98:17:f3:a1:b4: 8c:93:e1:66:8f:51:c2:d2:56:8d:5e:cd:ce:38:2a: 90:7b:48:86:67:ae:d9:80:70:8e:ac:50:26:a4:ee: 38:97:ca:52:d3:92:e4:36:1e:72:71:72:af:3a:db: e6:3c:f4:ce:0a:a6:95:5f:b5:02:f2:03:a1:a7:53: 02:ec:9a:ee:31:fd:08:6f:84:ad:63:b1:49:41:07: 8e:7a:97:63:ee:d5:43:bc:ab:f8:23:74:c5:b9:6d: 3c:9c:01:e1:86:ab:d3:05:d9:7c:7e:ec:5c:2a:85: 8d:88:83:ef:b8:c7:86:6f:eb:a5:f4:bf:bd:9d:8a: 2c:56:43:0a:f2:cf:a0:94:8c:80:ad:f8:7d:08:37: 54:b7:48:59:4a:ca:55:4d:04:01:3e:81:cc:fb:c9: 4e:c3:c4:62:31:c1:c2:67:5f:72:39:c6:03:a3:99: 86:a5:bd:c9:90:a0:29:12:ff:81:e7:f8:5a:1c:f6: c2:e0:fd:c0:b6:a0:ec:27:c6:cf:4a:d6:86:2a:c4: e8:ac:98:1e:b5:92:e1:86:52:ab:87:57:1e:00:e1: bd:60:15:37:de:d0:43:d2:ca:b6:0f:51:59:9e:67: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9F:FF:44:DB:57:45:BB:DA:05:94:99:9D:56:E4:F8:79:E9:4D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:56:c5:c3:48:5c:cd:60:07:28:05:11:1f:b8:98:13:7e:3b: e2:ca:21:29:68:9b:d3:0d:ce:6f:30:62:7a:4b:6a:d6:73:f4: a2:c1:3f:95:b1:65:0b:3c:a6:d7:45:b7:26:58:5e:e5:f1:11: 62:e4:dc:d6:1e:51:ff:0b:ff:9e:63:73:b5:43:68:2a:2c:b6: 9b:a5:c7:38:f6:46:f1:13:79:78:dc:24:fa:5b:a9:46:bd:7c: 03:b6:66:13:94:19:a7:c1:7d:2f:1f:39:74:29:44:48:19:34: 57:ed:6b:15:2b:0e:6c:58:95:40:28:85:95:31:40:8a:c1:43: e1:ac:af:cd:df:db:9e:ab:e4:8a:52:43:12:32:41:15:f9:88: 56:a0:c7:3b:00:7e:69:cb:cd:a9:13:02:0b:e4:3f:02:9a:a8: 18:ac:22:db:33:3e:de:db:14:bb:98:d4:12:b4:d5:07:ca:37: e1:f0:c4:72:5b:39:cb:a8:28:ba:02:15:b5:7a:f2:42:28:89: b9:9b:37:67:5b:b0:16:36:95:dc:05:45:87:81:58:9f:59:52: 26:58:52:95:03:d2:db:ab:68:6c:1e:c6:21:56:a8:9d:f3:b7: d3:3a:de:3f:94:e3:13:9f:e3:66:e0:51:e4:9b:df:7e:42:5e: cf:8f:32:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5ZtgWyzGlZjhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MjQ1ZmQ1ODktNzUxZi00MWNmLThiMDYtNThlMTU3NWE2MzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNKLCSj1qGsa2k7lTJI6sT3HtiHPbAYNmBfz obSMk+Fmj1HC0laNXs3OOCqQe0iGZ67ZgHCOrFAmpO44l8pS05LkNh5ycXKvOtvm PPTOCqaVX7UC8gOhp1MC7JruMf0Ib4StY7FJQQeOepdj7tVDvKv4I3TFuW08nAHh hqvTBdl8fuxcKoWNiIPvuMeGb+ul9L+9nYosVkMK8s+glIyArfh9CDdUt0hZSspV TQQBPoHM+8lOw8RiMcHCZ19yOcYDo5mGpb3JkKApEv+B5/haHPbC4P3AtqDsJ8bP StaGKsTorJgetZLhhlKrh1ceAOG9YBU33tBD0sq2D1FZnmeOCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyf/0TbV0W72gWUmZ1W5Ph56U0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2RhODNhNWYtMjQ3NS0z NDRkLWJjN2MtMzMwNjY5MjdmODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9WxcNIXM1gBygFER+4mBN+O+LKISlom9MNzm8wYnpLatZz9KLBP5Wx ZQs8ptdFtyZYXuXxEWLk3NYeUf8L/55jc7VDaCostpulxzj2RvETeXjcJPpbqUa9 fAO2ZhOUGafBfS8fOXQpREgZNFftaxUrDmxYlUAohZUxQIrBQ+Gsr83f256r5IpS QxIyQRX5iFagxzsAfmnLzakTAgvkPwKaqBisItszPt7bFLuY1BK01QfKN+HwxHJb OcuoKLoCFbV68kIoibmbN2dbsBY2ldwFRYeBWJ9ZUiZYUpUD0turaGwexiFWqJ3z t9M63j+U4xOf42bgUeSb335CXs+PMmA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:44 2025 by rpki-client