$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa File: 76a5dcab-2690-3314-84c7-093cd93650a1.roa (raw, json) Hash identifier: gJsEcDEUNPYlt39Q3x6RY12NxF3akFzPtsBQEfRwjC0= Subject key identifier: BF:F6:16:02:DC:DE:BD:6C:E1:BF:57:BB:A7:82:ED:76:EB:9D:AF:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797B01D293C916117AE108E Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:b0:1d:29:3c:91:61:17:ae:10:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=001755a5-2730-4979-8951-9a1fff3f1057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:5d:e5:63:91:3e:10:97:22:ab:6b:fe:21: 28:8c:68:32:f4:77:93:cd:14:f1:f3:1e:8b:ba:ca: 30:1d:58:e2:25:0a:13:9d:0b:68:cc:65:25:1c:f6: 4c:d6:cb:e4:0a:0c:45:9a:78:ad:04:8f:fe:67:88: 99:3a:98:8e:b1:22:4a:40:c8:b5:a6:a2:14:af:fa: 7a:64:e3:1e:0f:04:cc:76:21:60:00:21:b6:53:c0: a3:b1:6c:22:1d:48:4a:cf:cc:5c:96:c5:7a:f4:5e: b6:65:cc:0c:ec:ca:a0:1f:cd:a3:af:aa:d9:e9:dc: 0a:19:20:77:f3:0b:13:8a:58:86:df:18:83:00:79: 11:7c:8b:99:cf:1c:f7:b9:5a:96:65:45:19:f4:5c: 8a:f1:ea:e5:8c:6e:3b:6c:f3:02:50:52:d5:55:1f: 66:f4:01:3d:a8:25:c9:94:a6:db:9b:a8:f1:d8:9b: cd:56:47:81:66:ec:6d:df:6f:94:32:4d:82:73:7f: 3d:f0:d1:51:95:21:73:cc:68:3f:71:94:bf:9f:8b: 39:b4:90:87:1f:a5:e6:f0:41:ac:1a:20:a3:97:0c: 6d:e9:72:39:41:8e:e4:3f:db:0c:71:1f:7c:73:34: 46:f6:09:f7:22:f5:4f:e8:f4:2c:cf:7c:20:25:eb: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F6:16:02:DC:DE:BD:6C:E1:BF:57:BB:A7:82:ED:76:EB:9D:AF:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a5dcab-2690-3314-84c7-093cd93650a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6f:91:09:93:d7:64:77:44:85:a3:21:cb:58:f4:72:9e:a4: 9a:4c:4e:ec:fc:99:e7:81:f2:c4:3d:ac:99:a0:f3:66:68:88: 2b:e1:9a:33:78:8b:8c:fe:bb:5f:7d:af:a3:f2:af:17:27:b6: 24:a0:36:0d:26:34:2c:7e:f0:67:c6:30:a4:3f:db:73:3d:74: 7b:6a:a0:c0:e9:c5:cd:20:1f:20:39:5d:09:06:0f:a1:df:fc: 66:86:d3:79:0b:9f:60:46:61:6b:f6:c5:8a:97:10:77:28:b4: 7c:8b:61:35:97:28:01:d4:3b:15:21:16:47:65:4e:b5:1e:5d: a9:e4:ae:d9:67:ff:fe:5c:9c:ad:0a:0f:59:b0:d3:de:16:40: 84:5e:54:83:d8:08:0b:9b:9e:69:51:31:8e:8a:f6:ca:66:cb: 02:a8:1b:94:73:3c:4a:70:75:8d:f2:62:f8:b6:3e:b3:b7:ff: 32:9b:a5:7d:8b:b3:94:0b:84:25:07:35:2b:30:30:b3:61:3c: 61:ea:51:c9:88:bd:74:9a:cc:b4:af:ef:d9:c1:b0:82:27:4a: 2c:73:ff:22:3a:82:da:cf:ce:5b:3c:e1:97:83:1f:56:2e:9d: 14:0d:62:3c:13:35:91:21:f4:70:b0:67:1e:09:75:96:c3:9c: e3:2a:fc:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl7AdKTyRYReuEI4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MDAxNzU1YTUtMjczMC00OTc5LTg5NTEtOWExZmZmM2YxMDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpJd5WORPhCXIqtr/iEojGgy9HeTzRTx8x6L usowHVjiJQoTnQtozGUlHPZM1svkCgxFmnitBI/+Z4iZOpiOsSJKQMi1pqIUr/p6 ZOMeDwTMdiFgACG2U8CjsWwiHUhKz8xclsV69F62ZcwM7MqgH82jr6rZ6dwKGSB3 8wsTiliG3xiDAHkRfIuZzxz3uVqWZUUZ9FyK8erljG47bPMCUFLVVR9m9AE9qCXJ lKbbm6jx2JvNVkeBZuxt32+UMk2Cc3898NFRlSFzzGg/cZS/n4s5tJCHH6Xm8EGs GiCjlwxt6XI5QY7kP9sMcR98czRG9gn3IvVP6PQsz3wgJeuNWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/2FgLc3r1s4b9Xu6eC7Xbrna/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzZhNWRjYWItMjY5MC0z MzE0LTg0YzctMDkzY2Q5MzY1MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlvkQmT12R3RIWjIctY9HKepJpMTuz8meeB8sQ9rJmg82ZoiCvhmjN4 i4z+u199r6PyrxcntiSgNg0mNCx+8GfGMKQ/23M9dHtqoMDpxc0gHyA5XQkGD6Hf /GaG03kLn2BGYWv2xYqXEHcotHyLYTWXKAHUOxUhFkdlTrUeXankrtln//5cnK0K D1mw094WQIReVIPYCAubnmlRMY6K9spmywKoG5RzPEpwdY3yYvi2PrO3/zKbpX2L s5QLhCUHNSswMLNhPGHqUcmIvXSazLSv79nBsIInSixz/yI6gtrPzls84ZeDH1Yu nRQNYjwTNZEh9HCwZx4JdZbDnOMq/J4= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:07 2025 by rpki-client