$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa File: 5f1246fe-5889-33b0-9a38-bc38ab95466d.roa (raw, json) Hash identifier: FK44vDCGSNAw9GcmBJx+KYTCUarMOMcMil/O+b1h+CI= Subject key identifier: 75:D4:23:B1:F5:BB:94:0F:2E:64:13:C9:65:39:21:BE:A4:06:0A:B2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67975075EA5EFCD6523C9F60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 70.32.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:50:75:ea:5e:fc:d6:52:3c:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=7a94a489-6ee2-4fe4-b122-d4d972778ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:c6:b9:8e:62:e4:78:d3:be:00:42:99:74: ae:af:9e:cb:8c:f8:9e:f1:1d:f6:84:16:90:6e:34: 13:02:e5:f8:ed:fb:d2:7c:67:9e:fc:fb:9d:33:90: 17:b5:6e:9d:d7:6b:4a:3c:9b:ac:21:18:ee:a9:f7: 18:f6:a2:e1:10:51:56:58:35:f2:dc:0a:67:7e:e7: 4c:27:52:99:86:03:99:22:cb:a5:d1:1e:4e:58:ee: 39:f1:0d:85:d0:bd:bb:3f:e1:57:6b:ae:65:d2:c1: 87:61:ab:10:10:58:e3:ce:99:5c:8a:e0:e8:0d:a6: 33:b1:a8:9f:fa:57:5e:91:ed:8f:6e:a1:77:48:d4: 55:92:36:88:19:e2:63:e7:e7:30:ed:22:99:f2:ce: d1:47:97:3a:ce:f5:b7:f1:a9:87:7f:0c:00:b4:fb: ec:16:1c:76:12:e9:8b:9d:6f:65:5d:89:0f:51:d3: 15:04:ab:96:d4:e2:02:8b:07:4f:6e:a0:06:76:f2: c5:06:c3:e9:59:67:9d:06:c0:04:de:38:d3:08:ad: c2:5c:f3:1b:e6:ed:10:03:70:32:b0:64:50:a7:d2: a6:66:fb:79:56:70:cd:57:c2:07:10:b8:28:fd:c8: ee:fc:c2:ea:c2:ae:25:2b:f5:29:ed:21:22:ba:f1: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D4:23:B1:F5:BB:94:0F:2E:64:13:C9:65:39:21:BE:A4:06:0A:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:92:8b:46:3e:3f:62:bb:21:26:c6:c5:5b:fa:df:b0:59:42: 1e:b7:9f:47:16:4e:f2:e9:29:ae:b0:51:b1:25:e5:56:5c:c4: 6c:61:85:82:bd:60:31:e2:64:0a:46:03:ba:28:4a:d2:9e:69: 80:77:d2:a6:d5:27:53:0e:31:99:e3:11:77:9d:a2:3f:f4:e3: 2c:d2:4f:af:30:72:84:55:5f:c5:16:dc:b2:68:12:ff:02:f4: 40:ee:16:fa:81:3b:a7:4c:8e:07:36:15:1f:2a:f0:4c:92:8e: 06:9a:65:02:82:3c:ac:c2:89:f0:15:71:76:ae:00:53:e8:c0: 32:42:b0:37:5d:d4:34:79:86:53:38:5e:52:66:5c:57:d6:af: f6:12:2e:db:71:63:bb:19:99:08:23:ab:9d:af:a6:17:81:37: 63:9b:45:8f:a2:d8:70:f7:72:23:11:ae:0e:78:73:5e:12:c1: 42:d4:b7:25:80:d9:c4:3f:4b:31:ee:55:ad:92:6e:30:ae:ff: 1b:32:8d:30:9a:b6:a7:5c:e6:6a:2a:ab:65:51:6e:76:43:d5: e0:03:aa:0b:fc:6b:4f:35:ec:22:50:02:b3:06:05:2a:8d:6e: e3:b6:ac:8f:06:dc:07:fd:8b:e6:29:5f:58:44:74:7f:ef:3d: 75:8e:db:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1B16l781lI8n2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk N2E5NGE0ODktNmVlMi00ZmU0LWIxMjItZDRkOTcyNzc4YWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLDGuY5i5HjTvgBCmXSur57LjPie8R32hBaQ bjQTAuX47fvSfGee/PudM5AXtW6d12tKPJusIRjuqfcY9qLhEFFWWDXy3ApnfudM J1KZhgOZIsul0R5OWO458Q2F0L27P+FXa65l0sGHYasQEFjjzplciuDoDaYzsaif +ldeke2PbqF3SNRVkjaIGeJj5+cw7SKZ8s7RR5c6zvW38amHfwwAtPvsFhx2EumL nW9lXYkPUdMVBKuW1OICiwdPbqAGdvLFBsPpWWedBsAE3jjTCK3CXPMb5u0QA3Ay sGRQp9KmZvt5VnDNV8IHELgo/cju/MLqwq4lK/Up7SEiuvFDHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXUI7H1u5QPLmQTyWU5Ib6kBgqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWYxMjQ2ZmUtNTg4OS0z M2IwLTlhMzgtYmMzOGFiOTU0NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCSi0Y+P2K7ISbGxVv637BZQh63n0cWTvLpKa6wUbEl5VZcxGxhhYK9 YDHiZApGA7ooStKeaYB30qbVJ1MOMZnjEXedoj/04yzST68wcoRVX8UW3LJoEv8C 9EDuFvqBO6dMjgc2FR8q8EySjgaaZQKCPKzCifAVcXauAFPowDJCsDdd1DR5hlM4 XlJmXFfWr/YSLttxY7sZmQgjq52vpheBN2ObRY+i2HD3ciMRrg54c14SwULUtyWA 2cQ/SzHuVa2SbjCu/xsyjTCatqdc5moqq2VRbnZD1eADqgv8a0817CJQArMGBSqN buO2rI8G3Af9i+YpX1hEdH/vPXWO21M= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:11 2025 by rpki-client