$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa File: 8660f259-74b8-3570-a008-aac9009ba729.roa (raw, json) Hash identifier: 5GlQe5STTWlK+IqTeVkQ0qcLWYCLCEl189CUGk/ZmZ0= Subject key identifier: 20:14:97:E8:D3:C9:3C:39:FA:21:26:E5:78:DB:44:24:60:33:66:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67979388FF69016D6F711C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:93:88:ff:69:01:6d:6f:71:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=b0c96405-8e17-4938-80f1-060de8e35f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:30:97:78:43:2a:fa:e9:af:d5:fb:51:b9:a4: f4:6f:a0:50:80:41:65:97:5d:45:af:6d:6b:a3:d0: 19:8b:68:70:e9:68:f8:94:c5:57:c1:15:ff:87:32: 2a:d4:4a:4e:45:c6:df:5a:7b:9b:73:53:2b:71:1f: ad:81:e8:d6:62:de:93:f3:c6:f9:a4:cb:a2:7d:9e: 79:c3:e0:2c:a9:2b:c3:0e:43:24:bb:a1:24:6d:6d: b1:17:6b:72:7f:4e:5a:e8:c8:80:ce:a9:f8:15:94: a5:ac:52:c9:0b:6f:c4:9c:11:64:6a:5b:96:26:35: 9a:b1:5c:2e:65:99:88:2a:70:09:30:c0:83:4b:85: 0e:58:b5:35:db:5d:ed:45:a6:1c:85:01:f2:2e:e9: ca:5f:9f:43:cd:5c:6b:c6:b1:60:bc:c0:9b:45:55: 6d:4c:7c:c6:22:96:4a:61:ec:5b:c8:7e:56:77:e2: 36:77:0a:46:4f:58:53:f6:70:c5:f4:a0:43:b4:58: 0c:e1:ab:99:12:7a:fe:7a:20:56:c6:cc:6d:6e:c5: db:36:5c:f2:be:01:61:46:c0:58:5c:3c:21:1c:7b: a7:4b:8c:87:b8:eb:4a:dd:52:8b:8a:3f:c2:74:78: a4:31:a1:5b:16:24:72:a0:c3:90:77:15:6c:2c:f6: 4f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:14:97:E8:D3:C9:3C:39:FA:21:26:E5:78:DB:44:24:60:33:66:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:2f:22:2c:db:d9:e2:8e:52:92:c8:94:15:75:54:cf:57:b6: f5:32:59:86:e5:41:8e:14:0c:0b:8e:5b:06:e8:8e:d9:cc:5d: e7:6c:b5:e7:f5:76:fe:f6:37:7c:bc:78:24:d3:34:d1:36:fd: e5:cd:e6:9c:2b:f8:2f:9e:60:72:39:a2:5a:d8:fd:76:eb:db: 92:55:c9:b9:7d:9f:23:b7:4e:8e:fc:d4:eb:d4:bc:28:39:ec: 03:c2:5d:af:07:21:97:37:52:1c:c5:18:c6:06:8b:e0:20:8e: d6:8d:02:61:7d:16:e4:14:4b:15:2e:22:fd:55:27:86:fb:9e: 8e:34:d7:11:74:47:b9:75:b8:68:ab:f4:13:f7:2f:0d:5e:56: 85:39:d5:0f:07:50:d6:30:43:87:6b:cb:71:5e:51:84:24:3c: eb:cd:ce:9a:ee:5e:9a:45:c2:56:fe:0b:35:1f:57:24:d3:ed: 54:32:cf:ee:31:4c:db:3f:9d:7d:8f:2d:e2:5f:05:9b:f4:a3: e8:36:99:72:af:c4:f6:be:d8:8c:65:a9:85:29:2a:7d:8f:43: 71:20:8c:5f:ee:cd:39:f2:0f:29:b8:8a:51:5b:b5:0c:fb:7f: e7:95:ad:dd:07:64:bc:d7:ef:1f:3a:9a:a5:52:1a:37:62:aa: 4f:a6:4a:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5OI/2kBbW9xHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YjBjOTY0MDUtOGUxNy00OTM4LTgwZjEtMDYwZGU4ZTM1ZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizCXeEMq+umv1ftRuaT0b6BQgEFll11Fr21r o9AZi2hw6Wj4lMVXwRX/hzIq1EpORcbfWnubc1MrcR+tgejWYt6T88b5pMuifZ55 w+AsqSvDDkMku6EkbW2xF2tyf05a6MiAzqn4FZSlrFLJC2/EnBFkaluWJjWasVwu ZZmIKnAJMMCDS4UOWLU1213tRaYchQHyLunKX59DzVxrxrFgvMCbRVVtTHzGIpZK YexbyH5Wd+I2dwpGT1hT9nDF9KBDtFgM4auZEnr+eiBWxsxtbsXbNlzyvgFhRsBY XDwhHHunS4yHuOtK3VKLij/CdHikMaFbFiRyoMOQdxVsLPZPhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAUl+jTyTw5+iEm5XjbRCRgM2bUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY2MGYyNTktNzRiOC0z NTcwLWEwMDgtYWFjOTAwOWJhNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8vIizb2eKOUpLIlBV1VM9XtvUyWYblQY4UDAuOWwbojtnMXedstef1 dv72N3y8eCTTNNE2/eXN5pwr+C+eYHI5olrY/Xbr25JVybl9nyO3To781OvUvCg5 7APCXa8HIZc3UhzFGMYGi+AgjtaNAmF9FuQUSxUuIv1VJ4b7no401xF0R7l1uGir 9BP3Lw1eVoU51Q8HUNYwQ4dry3FeUYQkPOvNzpruXppFwlb+CzUfVyTT7VQyz+4x TNs/nX2PLeJfBZv0o+g2mXKvxPa+2IxlqYUpKn2PQ3EgjF/uzTnyDym4ilFbtQz7 f+eVrd0HZLzX7x86mqVSGjdiqk+mSk0= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:55 2025 by rpki-client