$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa File: d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa (raw, json) Hash identifier: K1bAdZTUjFpXOmDCYkWmFp/c0q8uMSkBSHhBqDslTvU= Subject key identifier: D7:CC:35:76:96:93:07:16:F5:CC:8D:92:85:70:96:BA:40:AA:9C:DC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67976A2F67880F44D4708780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 2386 IP address blocks: 70.32.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:6a:2f:67:88:0f:44:d4:70:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=80430433-7097-46a9-a3a5-9ff44d168499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:e1:dd:18:4f:1e:1a:c2:6c:01:64:04:21: 82:ce:44:54:db:3e:41:95:06:50:44:a3:b2:05:e7: a2:d8:3c:e1:fe:6f:b1:90:d9:8b:40:de:04:07:08: 50:aa:95:57:31:5f:ad:ec:2d:80:8f:6b:fe:b8:d7: a4:cf:06:8a:72:a0:71:d9:e3:e0:2e:e7:7a:b9:3b: 08:8c:a2:51:bd:15:50:41:ca:9f:f5:63:8c:d9:97: 58:f0:c9:8d:52:25:02:f7:8d:8d:d6:a4:24:71:77: 1a:98:01:f7:84:cb:b8:dd:0b:fc:bb:14:28:be:3d: 3c:86:4d:11:49:90:01:02:b2:01:95:62:42:ee:9e: 5b:cb:b1:6a:6d:b0:7d:f9:34:ff:b4:88:1e:23:b1: a4:3c:22:22:44:5f:04:97:b0:8f:ac:df:93:d9:e6: 02:c0:88:aa:31:f8:2b:f9:75:b5:95:8d:32:13:ff: 27:83:ab:35:5f:ee:24:98:b9:03:76:9f:3c:45:64: ed:ac:ee:7e:f5:f6:c3:06:11:64:92:b5:70:b1:24: 20:e4:7d:e6:5f:2d:75:c5:2c:21:a3:e2:2e:ee:88: 9d:88:26:3b:b8:07:6f:b7:7b:9f:1a:a4:7c:d6:fc: 2f:a0:6d:0d:fd:c4:1c:70:4a:83:c3:ea:89:38:f5: 9b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CC:35:76:96:93:07:16:F5:CC:8D:92:85:70:96:BA:40:AA:9C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d8:04:b3:17:ec:81:92:5b:bd:ca:89:f8:b8:5b:e0:48:7b: 83:29:39:ee:63:e1:e3:88:f5:1b:98:09:c7:79:9a:e6:c1:e4: ad:34:52:14:a6:ed:5d:e1:ca:dd:3f:e4:61:32:0d:dc:16:25: a3:04:5f:14:d2:20:c1:1a:66:14:13:42:50:1a:28:a9:4e:19: b1:c2:dc:0f:ef:5b:7b:98:03:d4:d7:59:8f:b5:99:a0:0e:62: d6:3e:e1:cf:0a:67:a7:83:64:54:a7:0b:86:94:7c:39:19:f6: bb:03:fa:d6:c8:64:25:96:7d:9c:6c:8a:8a:ea:5e:4a:f6:81: ec:b4:a0:8e:a5:74:d8:f5:36:07:da:d6:1c:7e:fe:45:2c:19: 54:d0:33:5b:a2:25:30:bf:4d:38:03:cd:62:d2:93:c5:55:db: 0c:0d:da:de:7f:85:84:a7:c9:e5:20:7c:e6:e3:28:38:84:be: 2a:c1:a0:a3:f6:04:ba:c2:a2:26:67:e5:1a:11:1d:3e:c9:19: 81:78:fc:69:b0:cd:0c:66:3e:e4:5c:22:3a:17:c4:2f:38:21: 27:19:e4:84:d8:e1:80:63:87:69:11:30:9b:40:69:81:33:2d: 67:67:68:18:f7:6a:d3:06:d9:0e:f3:55:03:2f:22:4c:36:58: 32:d0:b6:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2ovZ4gPRNRwh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODA0MzA0MzMtNzA5Ny00NmE5LWEzYTUtOWZmNDRkMTY4NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRzh3RhPHhrCbAFkBCGCzkRU2z5BlQZQRKOy Beei2Dzh/m+xkNmLQN4EBwhQqpVXMV+t7C2Aj2v+uNekzwaKcqBx2ePgLud6uTsI jKJRvRVQQcqf9WOM2ZdY8MmNUiUC942N1qQkcXcamAH3hMu43Qv8uxQovj08hk0R SZABArIBlWJC7p5by7FqbbB9+TT/tIgeI7GkPCIiRF8El7CPrN+T2eYCwIiqMfgr +XW1lY0yE/8ng6s1X+4kmLkDdp88RWTtrO5+9fbDBhFkkrVwsSQg5H3mXy11xSwh o+Iu7oidiCY7uAdvt3ufGqR81vwvoG0N/cQccEqDw+qJOPWb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfMNXaWkwcW9cyNkoVwlrpAqpzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDlhNmFkYjQtNjlhNS0z YTQyLWI0YWEtM2I3MDU4YTczYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/YBLMX7IGSW73Kifi4W+BIe4MpOe5j4eOI9RuYCcd5mubB5K00UhSm 7V3hyt0/5GEyDdwWJaMEXxTSIMEaZhQTQlAaKKlOGbHC3A/vW3uYA9TXWY+1maAO YtY+4c8KZ6eDZFSnC4aUfDkZ9rsD+tbIZCWWfZxsiorqXkr2gey0oI6ldNj1Ngfa 1hx+/kUsGVTQM1uiJTC/TTgDzWLSk8VV2wwN2t5/hYSnyeUgfObjKDiEvirBoKP2 BLrCoiZn5RoRHT7JGYF4/GmwzQxmPuRcIjoXxC84IScZ5ITY4YBjh2kRMJtAaYEz LWdnaBj3atMG2Q7zVQMvIkw2WDLQtrw= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:29 2025 by rpki-client