$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa File: 5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa (raw, json) Hash identifier: muk6C0iPYt4A1j6yWJbc8j+vEf6w2YqqQgy6KRz4Agw= Subject key identifier: 83:97:7A:7C:E2:D6:59:D9:73:D2:5B:A0:A3:43:B8:FB:52:7A:9A:99 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B679778ED809B066DAA4A6A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:78:ed:80:9b:06:6d:aa:4a:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=98fa81dc-ce8c-4288-a27b-ea5999bc8bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:fa:68:8d:1a:e1:8a:ee:2e:d0:df:2d:e7: 49:ea:60:b1:af:d0:84:f8:40:bc:cc:7f:09:3b:86: 1f:fd:2c:c2:22:27:85:75:ab:3d:84:d6:e8:6c:ff: f0:4a:8a:bc:e6:90:1c:3c:aa:b4:1a:f2:5b:12:c9: 71:f3:14:17:07:5b:d9:c2:84:9e:53:78:44:c6:75: f0:df:66:25:4f:09:9b:57:e1:16:c2:c6:3e:b7:9d: 6d:95:17:a1:e7:cc:6b:58:05:c6:4b:43:61:4c:5e: c0:8d:17:ca:bb:0d:8b:48:69:29:98:6b:77:54:a3: 7c:5c:ce:e8:29:4a:0f:13:8f:a6:0b:63:ac:c2:93: c9:bc:ab:03:39:16:2f:21:d2:41:a1:5d:2f:8d:ef: 04:da:8e:da:e0:b0:7a:43:c4:5f:45:03:2a:9d:48: dd:d9:49:67:81:27:83:f4:2d:69:4f:e5:ec:d5:0f: 6f:d3:00:df:82:8b:ae:a5:ec:82:f0:4f:06:b5:65: b4:0b:45:ff:02:f1:ef:fb:fd:55:5d:0f:05:c9:db: f2:df:a5:f7:e4:ac:cd:3b:14:64:9b:53:90:b5:b4: 0e:de:78:49:cf:f0:ab:0d:bb:cd:10:9c:cb:f0:7b: 57:95:55:1b:3c:d9:9d:a7:1b:72:3c:5b:5e:80:6d: fb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:97:7A:7C:E2:D6:59:D9:73:D2:5B:A0:A3:43:B8:FB:52:7A:9A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:42:eb:82:aa:5b:55:f3:14:fa:1d:64:29:17:70:0f:05:1f: 41:f0:a0:fa:32:93:90:4b:05:ff:df:36:0d:3b:4c:28:29:d0: dd:3b:cd:39:d4:af:b6:27:0a:41:60:02:b8:e7:ff:6b:45:55: 9a:7e:54:9f:06:40:e9:63:36:8a:4c:65:34:51:81:29:5d:b6: 34:49:d8:58:89:93:e3:05:aa:8c:71:87:4a:ef:ab:58:d7:d3: 77:ae:d7:d7:bd:c4:c4:f3:a1:0b:66:b2:f6:3b:00:bf:8e:98: e6:09:f4:b7:6b:3c:c4:22:2d:a0:78:14:f0:a9:c8:20:f1:93: 4f:9c:fa:ee:d2:d7:0d:87:24:57:3f:fc:0a:cf:2a:13:3f:ad: 83:f5:65:e8:7f:8c:23:e2:cd:3c:60:d9:8d:94:0d:1f:69:1d: 89:2d:c2:15:f7:40:a7:a0:4a:38:04:a1:8a:fb:5b:30:4d:4a: ec:9a:e6:08:97:e6:81:7b:53:1f:27:e6:bd:03:42:64:17:06: 01:15:23:72:d2:74:bc:31:df:9a:4a:22:fb:19:6b:92:c9:da: 72:f4:ef:7b:31:bc:01:18:20:5b:ac:06:74:23:4a:6e:eb:49: b2:e6:90:e2:4b:ca:30:1c:bc:97:c9:a1:21:45:61:23:74:e6: ea:0f:ac:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3jtgJsGbapKagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OThmYTgxZGMtY2U4Yy00Mjg4LWEyN2ItZWE1OTk5YmM4YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4v6aI0a4YruLtDfLedJ6mCxr9CE+EC8zH8J O4Yf/SzCIieFdas9hNbobP/wSoq85pAcPKq0GvJbEslx8xQXB1vZwoSeU3hExnXw 32YlTwmbV+EWwsY+t51tlReh58xrWAXGS0NhTF7AjRfKuw2LSGkpmGt3VKN8XM7o KUoPE4+mC2OswpPJvKsDORYvIdJBoV0vje8E2o7a4LB6Q8RfRQMqnUjd2UlngSeD 9C1pT+Xs1Q9v0wDfgouupeyC8E8GtWW0C0X/AvHv+/1VXQ8Fydvy36X35KzNOxRk m1OQtbQO3nhJz/CrDbvNEJzL8HtXlVUbPNmdpxtyPFtegG37gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOXenzi1lnZc9JboKNDuPtSepqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTkzMzg4NGUtZTFkZC0z YWI1LTlmMmYtNjFlM2QyMDIxZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRC64KqW1XzFPodZCkXcA8FH0HwoPoyk5BLBf/fNg07TCgp0N07zTnU r7YnCkFgArjn/2tFVZp+VJ8GQOljNopMZTRRgSldtjRJ2FiJk+MFqoxxh0rvq1jX 03eu19e9xMTzoQtmsvY7AL+OmOYJ9LdrPMQiLaB4FPCpyCDxk0+c+u7S1w2HJFc/ /ArPKhM/rYP1Zeh/jCPizTxg2Y2UDR9pHYktwhX3QKegSjgEoYr7WzBNSuya5giX 5oF7Ux8n5r0DQmQXBgEVI3LSdLwx35pKIvsZa5LJ2nL073sxvAEYIFusBnQjSm7r SbLmkOJLyjAcvJfJoSFFYSN05uoPrK4= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:08 2025 by rpki-client