$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa File: 7badf292-b07f-35cd-bc0c-51d535a17ae4.roa (raw, json) Hash identifier: +EH5GGvBbmDvqj8ijFZjcvNhy64wJPievyDGNPZgzEM= Subject key identifier: F0:12:97:F1:A8:17:A5:66:35:D9:A4:9A:90:B2:7F:2C:31:18:27:E2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B679790496D9A0299A7C0DF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:90:49:6d:9a:02:99:a7:c0:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=13752865-feeb-443d-a512-319579edc5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:e4:52:56:93:7b:45:4e:e4:ea:6d:61:ce: 67:bc:f2:e3:17:6e:bb:6a:3a:3c:0f:90:99:73:a5: 2d:df:a7:c2:1c:dc:44:e2:8f:ad:b7:20:9e:8d:1d: 09:23:56:de:1e:85:25:b0:1d:61:97:08:b2:04:08: 73:71:fd:e7:f4:b6:98:63:29:3e:9e:59:5c:cc:5d: 8d:b5:5b:84:77:ea:58:48:4a:d7:a8:38:01:c1:59: 1a:00:7d:50:d5:e8:66:1c:c7:02:74:a0:5c:60:11: e4:b9:01:f3:b6:d8:7c:67:c3:3d:9d:f3:ca:f5:c7: be:23:24:3b:b6:3b:4c:8e:aa:fd:eb:7e:ce:b5:c3: d9:ba:96:16:56:2a:a8:cb:aa:76:6d:d9:1e:a1:3f: 26:d9:8e:75:d5:9a:06:89:1b:b9:1a:41:5d:1b:0c: 3e:78:f3:a0:c8:a9:f1:32:7c:24:ad:1f:3b:45:75: 8d:33:02:05:f5:76:39:47:13:c9:d1:4e:2e:11:73: 0e:27:1c:33:c9:68:01:60:b9:b1:5e:13:fb:71:f9: 51:05:dd:6a:37:5a:7b:b3:f2:69:ef:a1:01:79:73: bc:6e:69:33:c9:c7:72:79:71:1f:f6:16:fc:8a:98: 43:9c:e4:8b:e5:f1:84:bc:b4:3b:c0:c9:d3:cb:78: 79:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:12:97:F1:A8:17:A5:66:35:D9:A4:9A:90:B2:7F:2C:31:18:27:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3d:44:e7:96:47:7a:ab:56:72:4e:93:08:65:c9:0f:31:9c: 86:ee:e6:b5:ee:2b:28:27:21:dd:c5:72:66:c6:96:c8:14:2d: 66:7c:34:54:3b:43:32:f2:10:35:7a:1f:d6:9d:07:07:88:c9: 8e:ea:f7:ee:a7:2e:96:0f:99:c3:dc:04:ac:a8:dd:03:c5:49: 2f:50:9f:81:d9:73:39:c3:60:2c:6d:26:9f:52:d5:f3:af:88: 19:de:47:69:3e:a6:05:16:ff:47:db:dd:f1:41:3d:7b:36:91: c0:a1:c9:25:c2:0d:34:0b:af:8b:56:08:8e:6f:bf:7c:4b:39: ab:a7:fb:4c:fc:aa:4d:65:6a:fb:0a:25:4f:7a:1f:6e:f4:33: 30:98:0c:95:38:25:ee:de:d4:b2:aa:4f:51:7b:9e:de:74:c1: 85:30:9f:bc:9d:0e:58:b4:6e:d1:70:72:59:6f:33:57:c5:2b: 25:84:d1:42:38:a0:58:42:5d:85:72:fe:0b:e5:13:ba:61:f8: 25:db:47:41:03:d6:38:36:68:95:0d:92:c8:e5:b3:86:83:c4: f8:0f:6b:56:c1:7d:78:35:43:e3:b3:f7:26:09:1b:ad:c2:ee: 54:3f:60:c2:d2:48:e5:a6:b3:f7:5b:ce:c7:00:7b:0b:12:82: 14:16:63:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5BJbZoCmafA3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTM3NTI4NjUtZmVlYi00NDNkLWE1MTItMzE5NTc5ZWRjNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUPkUlaTe0VO5OptYc5nvPLjF267ajo8D5CZ c6Ut36fCHNxE4o+ttyCejR0JI1beHoUlsB1hlwiyBAhzcf3n9LaYYyk+nllczF2N tVuEd+pYSErXqDgBwVkaAH1Q1ehmHMcCdKBcYBHkuQHztth8Z8M9nfPK9ce+IyQ7 tjtMjqr9637OtcPZupYWViqoy6p2bdkeoT8m2Y511ZoGiRu5GkFdGww+ePOgyKnx MnwkrR87RXWNMwIF9XY5RxPJ0U4uEXMOJxwzyWgBYLmxXhP7cflRBd1qN1p7s/Jp 76EBeXO8bmkzycdyeXEf9hb8iphDnOSL5fGEvLQ7wMnTy3h5VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPASl/GoF6VmNdmkmpCyfywxGCfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2JhZGYyOTItYjA3Zi0z NWNkLWJjMGMtNTFkNTM1YTE3YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg9ROeWR3qrVnJOkwhlyQ8xnIbu5rXuKygnId3FcmbGlsgULWZ8NFQ7 QzLyEDV6H9adBweIyY7q9+6nLpYPmcPcBKyo3QPFSS9Qn4HZcznDYCxtJp9S1fOv iBneR2k+pgUW/0fb3fFBPXs2kcChySXCDTQLr4tWCI5vv3xLOaun+0z8qk1lavsK JU96H270MzCYDJU4Je7e1LKqT1F7nt50wYUwn7ydDli0btFwcllvM1fFKyWE0UI4 oFhCXYVy/gvlE7ph+CXbR0ED1jg2aJUNksjls4aDxPgPa1bBfXg1Q+Oz9yYJG63C 7lQ/YMLSSOWms/dbzscAewsSghQWY+w= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:26 2025 by rpki-client