$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa File: 555e037a-a202-3c23-9d76-142b857e9d3c.roa (raw, json) Hash identifier: HRt8NRJMuB1V/M3W+KLY8N6lJoLfXkdGFiY+BhXaUJw= Subject key identifier: 81:7C:BA:5E:35:EC:E6:C6:34:44:C1:81:1B:4C:70:F8:02:7D:85:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797A3AF0E91A04D1B6BFEC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:a3:af:0e:91:a0:4d:1b:6b:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=6e67cf85-7545-4c5a-b25e-b5b4ba1bc9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:6d:54:5a:e1:76:3c:00:30:81:6f:90:b5: a3:bd:be:74:13:bc:0d:01:1c:c7:10:cd:6a:b8:b0: f4:ef:ec:e6:f2:45:67:03:44:c2:ad:98:ea:99:e7: 54:44:5b:ef:b1:db:f3:f2:e9:4c:8a:62:72:39:b8: 2d:8c:9a:d4:00:bb:43:7e:62:3f:38:a1:a0:f2:51: 29:de:39:25:a0:bf:31:f5:b0:88:94:aa:c4:09:0b: bf:ec:73:29:e5:fc:ba:21:3d:36:a6:cb:56:4f:4f: 58:4b:f8:ad:27:cd:9b:3b:d9:79:46:44:71:4f:68: 46:6b:dd:62:a5:f9:df:1d:34:24:b5:af:08:ff:b6: 64:ad:f1:e1:dc:85:1f:f2:aa:4e:93:ca:33:43:15: 12:b0:4b:f7:1c:08:da:b2:8d:ff:ed:06:c3:c4:a2: 2c:8b:e8:18:8c:6d:96:32:6f:77:86:74:9f:d8:54: 6f:e5:d4:2a:88:65:c3:29:25:30:5b:01:3b:a1:29: 47:61:1c:31:82:01:1a:5d:b8:22:4b:2c:12:96:1d: 5d:3a:79:e4:81:5b:36:7a:27:6d:00:8d:7a:78:24: c1:f6:ec:e6:79:b4:e3:41:23:64:92:52:4b:e9:98: 88:22:e2:30:73:e4:08:71:cf:2f:a3:bf:c3:a3:58: ad:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7C:BA:5E:35:EC:E6:C6:34:44:C1:81:1B:4C:70:F8:02:7D:85:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:da:35:08:a8:04:b4:93:89:ce:72:31:54:8e:ae:8a:c0:6d: bf:08:41:bc:b1:b2:b8:ff:70:2b:80:a3:77:9a:55:32:b3:24: e9:0c:a3:7c:65:f3:61:56:ff:72:a2:f5:8a:dc:d9:f3:db:67: 16:36:22:4f:56:4f:fc:d2:b3:58:0b:77:60:08:ce:d7:7d:46: c5:0e:16:23:8c:ce:0e:31:0d:0c:d1:82:5f:9f:6c:c8:c9:2a: d2:23:57:1d:ec:aa:e1:60:f2:33:df:0c:d1:98:94:fa:2e:66: 01:8a:b2:a1:33:b3:f4:8f:fb:e5:18:16:bd:c4:b9:9c:8c:9a: 17:9d:a4:f4:12:d6:17:15:b4:81:3f:da:5e:67:40:a8:f1:8d: ef:c4:5b:95:59:27:30:37:c6:f1:62:4c:1d:b1:d0:5a:91:d0: a2:bf:c1:67:31:9f:c9:ec:78:f7:d5:5a:39:7e:61:2b:de:35: 6b:af:4e:00:12:75:13:c5:b8:68:18:be:5e:69:3d:f5:c1:58: a8:68:09:2b:58:22:ee:19:c7:4f:46:73:35:19:cb:0c:1f:3d: 0a:0b:64:e9:7d:55:7d:bb:46:64:02:8d:84:87:45:2b:ac:56: a1:df:66:69:67:7c:43:b5:e7:28:eb:78:d8:06:c9:09:fe:c2: 63:e1:61:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6OvDpGgTRtr/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NmU2N2NmODUtNzU0NS00YzVhLWIyNWUtYjViNGJhMWJjOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFNtVFrhdjwAMIFvkLWjvb50E7wNARzHEM1q uLD07+zm8kVnA0TCrZjqmedURFvvsdvz8ulMimJyObgtjJrUALtDfmI/OKGg8lEp 3jkloL8x9bCIlKrECQu/7HMp5fy6IT02pstWT09YS/itJ82bO9l5RkRxT2hGa91i pfnfHTQkta8I/7ZkrfHh3IUf8qpOk8ozQxUSsEv3HAjaso3/7QbDxKIsi+gYjG2W Mm93hnSf2FRv5dQqiGXDKSUwWwE7oSlHYRwxggEaXbgiSywSlh1dOnnkgVs2eidt AI16eCTB9uzmebTjQSNkklJL6ZiIIuIwc+QIcc8vo7/Do1itTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIF8ul417ObGNETBgRtMcPgCfYVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU1ZTAzN2EtYTIwMi0z YzIzLTlkNzYtMTQyYjg1N2U5ZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXaNQioBLSTic5yMVSOrorAbb8IQbyxsrj/cCuAo3eaVTKzJOkMo3xl 82FW/3Ki9Yrc2fPbZxY2Ik9WT/zSs1gLd2AIztd9RsUOFiOMzg4xDQzRgl+fbMjJ KtIjVx3squFg8jPfDNGYlPouZgGKsqEzs/SP++UYFr3EuZyMmhedpPQS1hcVtIE/ 2l5nQKjxje/EW5VZJzA3xvFiTB2x0FqR0KK/wWcxn8nsePfVWjl+YSveNWuvTgAS dRPFuGgYvl5pPfXBWKhoCStYIu4Zx09GczUZywwfPQoLZOl9VX27RmQCjYSHRSus VqHfZmlnfEO15yjreNgGyQn+wmPhYcg= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:35 2025 by rpki-client