$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa File: ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa (raw, json) Hash identifier: h7FC5V8ln8NDKfRn6uxOCaBEYmi6t3zDC7Oe4Z7wzcI= Subject key identifier: 06:4E:03:D0:6E:AF:7F:48:0C:FF:BC:CD:F6:E4:F9:41:FC:C5:E5:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67975E105FFCFBFA2BEABE30 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:5e:10:5f:fc:fb:fa:2b:ea:be:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9fc82f2d-d4a0-4f95-a0e7-ce7412a7fceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:31:a0:48:87:54:63:cb:e0:17:64:a0:86:bf: fc:0b:01:8b:2b:38:17:4a:b2:74:89:31:5d:50:21: 22:cc:20:21:3c:ba:b0:f6:4e:59:15:5b:66:2f:9d: 61:d6:de:af:25:bd:58:88:2f:c3:c7:b1:cd:6a:3e: 61:28:12:87:8d:04:b4:29:cf:c0:85:06:2d:8f:12: d0:8e:c3:82:68:48:a4:bf:16:d5:f0:29:72:d7:83: b6:df:c3:28:cb:7c:dc:63:fc:94:b2:7e:e3:a7:46: b7:a5:d5:09:e4:19:79:0c:8e:80:76:2f:32:91:bb: 2d:20:db:6a:bf:9f:83:0b:f2:63:dd:23:cd:d0:2a: d5:98:c2:48:80:4f:16:e5:53:21:a1:c5:ac:7d:6a: e5:5d:36:ae:1e:a0:bd:e2:6a:44:02:24:68:26:3c: 07:cd:ea:77:67:43:ef:96:ac:30:a0:4b:8d:30:0d: 86:7f:6b:ff:da:1b:a9:b1:87:e9:c7:d7:f1:f9:27: 11:2b:25:48:da:e3:21:c0:c1:7a:b0:67:a9:8c:b8: 78:fc:80:ff:00:eb:98:d0:ea:a3:fd:7a:75:7b:d1: 03:3a:f3:0e:41:9f:e6:b2:05:c5:51:4d:ee:dc:96: 73:84:e8:f6:71:5e:05:f3:ec:4c:d9:c3:ab:5c:3b: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4E:03:D0:6E:AF:7F:48:0C:FF:BC:CD:F6:E4:F9:41:FC:C5:E5:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:96:20:38:29:da:65:39:b4:f7:29:69:41:83:c6:ab:3c:d3: d8:2a:06:e5:a3:dd:27:43:30:27:b5:32:96:19:d9:72:6b:da: cc:22:ae:c6:4a:f1:3e:30:09:99:60:59:94:66:ed:48:43:7d: 1f:a2:2a:27:72:d8:a4:7a:7c:6a:3a:1a:90:35:80:15:81:36: 54:10:23:ee:0f:58:99:b9:3e:22:0f:79:69:85:85:e6:9a:9c: 73:7c:76:c1:c5:7b:0b:02:60:42:e6:5b:db:81:97:67:21:04: 2f:28:0f:55:b8:5b:6a:a8:53:5b:8f:b8:ed:d5:e1:91:da:ec: 9b:46:c2:5f:3e:cf:47:d5:7e:29:f4:6b:6c:86:3e:c2:38:f8: e9:f8:b1:7c:37:63:5c:c1:d3:73:e5:90:5a:bc:58:45:19:d8: cd:16:3b:b2:ab:47:80:b3:51:e2:18:16:00:c1:b0:9d:d1:64: 3e:50:bb:90:67:16:1e:bc:e7:2a:de:e6:18:aa:2e:b7:50:62: 79:5f:c8:9f:0c:28:50:d4:f8:4c:5a:ed:d6:d8:36:7f:97:d0: b4:58:6c:04:16:86:12:eb:92:6a:32:99:12:51:d8:0c:58:df: ec:be:d8:99:6f:3a:00:79:f2:a5:00:d2:67:ae:0d:e0:af:45: 8a:3e:87:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl14QX/z7+ivqvjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWZjODJmMmQtZDRhMC00Zjk1LWEwZTctY2U3NDEyYTdmY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzGgSIdUY8vgF2Sghr/8CwGLKzgXSrJ0iTFd UCEizCAhPLqw9k5ZFVtmL51h1t6vJb1YiC/Dx7HNaj5hKBKHjQS0Kc/AhQYtjxLQ jsOCaEikvxbV8Cly14O238Moy3zcY/yUsn7jp0a3pdUJ5Bl5DI6Adi8ykbstINtq v5+DC/Jj3SPN0CrVmMJIgE8W5VMhocWsfWrlXTauHqC94mpEAiRoJjwHzep3Z0Pv lqwwoEuNMA2Gf2v/2hupsYfpx9fx+ScRKyVI2uMhwMF6sGepjLh4/ID/AOuY0Oqj /Xp1e9EDOvMOQZ/msgXFUU3u3JZzhOj2cV4F8+xM2cOrXDvynwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZOA9Bur39IDP+8zfbk+UH8xeX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2NhYzFjYjktZTRlOS0z ZmU4LWEwZWEtMzcwOWU5YjA3ZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSWIDgp2mU5tPcpaUGDxqs809gqBuWj3SdDMCe1MpYZ2XJr2swirsZK 8T4wCZlgWZRm7UhDfR+iKidy2KR6fGo6GpA1gBWBNlQQI+4PWJm5PiIPeWmFheaa nHN8dsHFewsCYELmW9uBl2chBC8oD1W4W2qoU1uPuO3V4ZHa7JtGwl8+z0fVfin0 a2yGPsI4+On4sXw3Y1zB03PlkFq8WEUZ2M0WO7KrR4CzUeIYFgDBsJ3RZD5Qu5Bn Fh685yre5hiqLrdQYnlfyJ8MKFDU+Exa7dbYNn+X0LRYbAQWhhLrkmoymRJR2AxY 3+y+2JlvOgB58qUA0meuDeCvRYo+hzs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:03 2025 by rpki-client