$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa File: bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa (raw, json) Hash identifier: WXklcofckbkLm8YdOtc3AszLPTmXw2YTwfZU5Hty+68= Subject key identifier: B9:AB:27:02:71:ED:F0:2B:13:9B:96:75:6B:FD:53:3F:2F:B0:4F:2D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67978BE15154A29D3BDC0700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:8b:e1:51:54:a2:9d:3b:dc:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=aa88761d-5d7f-4018-bb9f-fbef07ce5911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:71:48:21:f5:4a:8d:ce:01:08:6d:a1:3c:0a: 65:84:42:4f:e6:a8:d5:c7:d2:e3:6e:88:37:0f:03: 82:3e:d2:37:7e:0b:a1:87:60:58:0d:04:97:77:da: 90:80:78:ec:67:8d:bf:f6:ea:bd:66:20:cf:1e:33: c4:d0:e4:9d:8c:41:6e:ca:a2:60:15:1b:f9:08:a8: 28:46:45:6c:21:83:39:15:f4:e9:4f:a2:e0:8d:8f: c1:3f:3a:4b:da:64:1f:43:f0:bc:5f:86:d5:d5:d2: 12:dc:89:d5:c5:03:be:a8:78:8b:df:70:ab:6c:ca: 14:55:de:a2:83:b0:79:ed:05:67:ed:fa:30:99:2b: 5d:67:f9:09:18:a7:f6:56:75:fc:70:3f:6e:32:ff: ae:f5:ca:a7:11:8e:ab:5f:07:9a:d4:3f:8a:32:80: a5:83:57:90:cd:46:ee:95:3b:d6:b4:dc:24:cc:95: ff:ce:00:ac:f4:88:00:7c:cc:69:34:0b:88:23:da: a8:69:0b:33:14:21:04:66:10:ca:d2:c8:1c:55:c5: 16:0d:d4:87:0c:84:62:37:86:6b:2b:c5:64:04:85: fe:3a:ea:3d:e1:80:e1:52:f5:01:79:21:55:42:c7: f4:6b:75:54:c5:79:64:c4:51:c8:c4:08:68:d2:92: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AB:27:02:71:ED:F0:2B:13:9B:96:75:6B:FD:53:3F:2F:B0:4F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:f4:6f:88:e2:41:ac:7b:bd:af:03:0f:8b:10:20:90:8d:5f: 98:18:78:1b:98:00:7d:6f:28:35:39:71:5c:39:69:98:85:8b: 55:23:64:a8:0b:08:fe:35:a8:df:4f:1a:b4:80:82:4f:a6:f6: 9b:82:7b:72:db:30:3a:eb:88:35:c7:55:1a:0b:a2:c1:cd:58: 55:eb:c3:7b:40:9b:bc:04:3b:46:1b:b8:80:16:75:dd:a6:27: 08:90:30:0d:4c:11:26:c2:bf:ca:38:5e:3c:4c:ff:d0:6f:db: 42:0e:c9:f5:fb:a1:c5:43:bc:24:1e:4e:8f:01:d1:e6:b3:50: fc:68:ab:c3:a2:c3:ff:49:fa:82:fd:6e:f7:87:e5:44:cb:f3: ca:3c:d1:4e:8d:b1:e0:5f:5f:5d:7a:8b:6f:d8:e1:c4:aa:8c: d8:92:47:34:d1:b3:2a:07:3f:39:ab:85:79:6e:b6:b5:1f:48: 83:2b:79:07:a1:8f:59:8d:56:48:71:18:f9:8a:72:ed:c5:8b: dd:33:98:b6:94:24:c2:b9:96:db:a3:c9:ca:46:f2:63:09:38: 06:9b:64:9d:5a:b5:0d:86:5b:63:2e:96:21:4c:de:8f:60:14: 50:86:3a:72:cb:d1:24:2e:fe:f2:2c:f3:b0:f6:12:6f:19:d7: cb:04:33:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl4vhUVSinTvcBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YWE4ODc2MWQtNWQ3Zi00MDE4LWJiOWYtZmJlZjA3Y2U1OTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23FIIfVKjc4BCG2hPAplhEJP5qjVx9Ljbog3 DwOCPtI3fguhh2BYDQSXd9qQgHjsZ42/9uq9ZiDPHjPE0OSdjEFuyqJgFRv5CKgo RkVsIYM5FfTpT6LgjY/BPzpL2mQfQ/C8X4bV1dIS3InVxQO+qHiL33CrbMoUVd6i g7B57QVn7fowmStdZ/kJGKf2VnX8cD9uMv+u9cqnEY6rXwea1D+KMoClg1eQzUbu lTvWtNwkzJX/zgCs9IgAfMxpNAuII9qoaQszFCEEZhDK0sgcVcUWDdSHDIRiN4Zr K8VkBIX+Ouo94YDhUvUBeSFVQsf0a3VUxXlkxFHIxAho0pJaGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmrJwJx7fArE5uWdWv9Uz8vsE8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmFiMzdiNWQtNTVkYi0z ZjU3LWEwYTYtNWQzM2MzZGRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALj0b4jiQax7va8DD4sQIJCNX5gYeBuYAH1vKDU5cVw5aZiFi1UjZKgL CP41qN9PGrSAgk+m9puCe3LbMDrriDXHVRoLosHNWFXrw3tAm7wEO0YbuIAWdd2m JwiQMA1MESbCv8o4XjxM/9Bv20IOyfX7ocVDvCQeTo8B0eazUPxoq8Oiw/9J+oL9 bveH5UTL88o80U6NseBfX116i2/Y4cSqjNiSRzTRsyoHPzmrhXlutrUfSIMreQeh j1mNVkhxGPmKcu3Fi90zmLaUJMK5ltujycpG8mMJOAabZJ1atQ2GW2MuliFM3o9g FFCGOnLL0SQu/vIs87D2Em8Z18sEM7k= -----END CERTIFICATE-----Generated at Fri Oct 17 10:46:27 2025 by rpki-client