$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa File: 6801e350-c9f9-3400-a69b-b70a48ee4a10.roa (raw, json) Hash identifier: sSQvOa5mEhyPXFDQ3YeLhTwsP8HFzFoxaFWR/SKelEM= Subject key identifier: 04:80:3E:0D:43:1B:0B:12:72:61:42:66:B4:7C:69:19:B2:08:B7:4E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67976FD7E6C8C3AF8A3BF400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6f:d7:e6:c8:c3:af:8a:3b:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=e0a0c229-617b-4b4e-9001-46bb054533c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:05:a5:c0:d9:f3:ad:1d:cf:75:aa:41:b2:ab: c9:9f:97:4c:52:9f:e3:f6:9b:7d:5a:0c:8e:ac:71: 8a:b8:5e:2b:38:a5:1d:4c:2e:d7:fc:9a:7f:97:a6: 89:20:03:5e:04:ac:8b:4c:0a:fe:7c:fc:46:d3:89: 19:9c:79:aa:ef:0a:02:a3:e8:e9:77:f4:13:eb:78: ff:2b:87:09:6b:02:23:57:65:8a:42:d1:86:c1:c1: 7d:19:bd:45:37:12:cd:23:a4:fc:59:e2:39:f4:03: 5f:03:ec:f7:a0:f3:fc:a0:fb:99:67:5d:20:56:15: 4b:b9:76:57:ff:02:5d:4f:7b:d2:e0:9c:8f:72:7d: 50:88:7f:2e:a6:0d:57:35:89:cb:da:29:83:1e:f1: c4:23:8c:8b:ae:4e:b8:ef:ff:ae:46:5f:c4:32:8b: 62:fa:b3:3a:04:ed:b6:2c:76:aa:2e:41:2e:96:18: 68:85:70:85:a8:e9:84:8f:98:08:fc:16:90:4f:76: e4:be:92:30:71:f4:3e:f7:a1:c0:7c:1a:2c:87:9e: 1b:f6:ca:c1:53:de:03:c6:fb:64:4a:cf:e8:d7:36: 78:16:b2:4d:9a:bb:9f:9a:2d:cd:c6:00:bf:8e:b1: dc:f7:36:72:d7:8e:61:8e:a6:97:09:24:1d:10:8b: 00:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:80:3E:0D:43:1B:0B:12:72:61:42:66:B4:7C:69:19:B2:08:B7:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:69:47:15:8d:30:1a:ef:f5:e5:7d:5e:21:5e:b5:ad:b6:bd: d2:1a:a6:5d:bc:d0:9e:9b:7c:e1:7d:67:e7:8d:07:89:53:2c: 0a:9c:06:e7:05:2f:6a:4e:98:29:6e:e6:77:4a:a1:5e:c2:4b: 86:91:57:ec:71:6c:e3:b2:e4:e3:e9:96:ba:2b:2f:76:81:b1: 58:e2:cd:5e:bf:7e:9e:0e:06:94:15:53:5f:6f:75:40:69:79: f3:aa:e3:8a:43:6c:fa:09:4f:3e:10:fa:29:6e:b1:19:c9:c8: c3:96:cc:f3:9b:c9:71:d9:92:cc:a8:06:af:b5:34:78:76:d6: e6:f9:a3:71:c9:ba:0d:01:41:d8:e3:f5:82:f5:79:19:31:c0: 1b:a2:3a:40:b3:40:b3:01:93:5a:da:1c:3f:18:d3:8a:f4:9a: f7:4b:7e:bd:d2:d5:87:4f:8c:8a:ff:35:f6:7e:4e:3d:b7:7e: d2:de:bf:92:e6:a9:1e:26:67:26:e2:08:8b:a0:9d:1f:51:ca: ac:a8:78:7f:a5:5e:d5:dd:15:bf:8b:59:19:39:8d:41:af:25: f2:e2:e6:ec:ce:c6:ae:11:d0:0b:2c:a4:73:ed:27:24:1c:a4: 29:0a:b0:49:ae:38:fc:84:a0:17:13:d4:e8:dc:cd:65:12:92: 5c:e6:35:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2/X5sjDr4o79AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTBhMGMyMjktNjE3Yi00YjRlLTkwMDEtNDZiYjA1NDUzM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gWlwNnzrR3PdapBsqvJn5dMUp/j9pt9WgyO rHGKuF4rOKUdTC7X/Jp/l6aJIANeBKyLTAr+fPxG04kZnHmq7woCo+jpd/QT63j/ K4cJawIjV2WKQtGGwcF9Gb1FNxLNI6T8WeI59ANfA+z3oPP8oPuZZ10gVhVLuXZX /wJdT3vS4JyPcn1QiH8upg1XNYnL2imDHvHEI4yLrk647/+uRl/EMoti+rM6BO22 LHaqLkEulhhohXCFqOmEj5gI/BaQT3bkvpIwcfQ+96HAfBosh54b9srBU94Dxvtk Ss/o1zZ4FrJNmrufmi3NxgC/jrHc9zZy145hjqaXCSQdEIsA1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASAPg1DGwsScmFCZrR8aRmyCLdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjgwMWUzNTAtYzlmOS0z NDAwLWE2OWItYjcwYTQ4ZWU0YTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZpRxWNMBrv9eV9XiFeta22vdIapl280J6bfOF9Z+eNB4lTLAqcBucF L2pOmClu5ndKoV7CS4aRV+xxbOOy5OPplrorL3aBsVjizV6/fp4OBpQVU19vdUBp efOq44pDbPoJTz4Q+ilusRnJyMOWzPObyXHZksyoBq+1NHh21ub5o3HJug0BQdjj 9YL1eRkxwBuiOkCzQLMBk1raHD8Y04r0mvdLfr3S1YdPjIr/NfZ+Tj23ftLev5Lm qR4mZybiCIugnR9RyqyoeH+lXtXdFb+LWRk5jUGvJfLi5uzOxq4R0AsspHPtJyQc pCkKsEmuOPyEoBcT1OjczWUSklzmNds= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:10 2025 by rpki-client