$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa File: dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa (raw, json) Hash identifier: bjdjj0Wf8hP/DbBCKz3yGCF7B+aJntEet6wQ/5fHgQs= Subject key identifier: 26:42:49:10:52:38:99:6D:A0:21:9E:FE:26:E0:C6:F2:E8:B2:55:58 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797D0201FB59B2ED4FF1E40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d0:20:1f:b5:9b:2e:d4:ff:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=90ccc0d2-dc8a-4574-b73b-cae4e6ba560a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:57:f0:72:a2:46:e3:52:b9:dc:09:a9:51:4e: bf:8d:12:e4:db:14:76:5a:35:23:78:dc:6f:5f:09: bc:b4:83:26:a9:0a:19:b7:33:08:bb:30:24:9e:0f: b4:33:66:24:28:c2:71:d4:ec:2f:f0:fe:0c:86:e0: f5:b1:bd:33:e1:2a:9e:22:8f:0b:45:23:d5:78:d8: e9:b9:64:00:10:12:c0:b3:1a:a3:af:b5:f6:5e:3d: 24:64:49:2b:f6:06:f8:29:4b:c5:5a:5c:5c:11:62: b8:be:89:ab:65:66:bf:8b:90:bc:7f:22:76:fe:5c: 4a:a0:29:9a:d2:8c:3c:e2:b3:e4:ea:5c:1b:6c:34: 72:6d:75:5f:61:3c:43:05:63:dd:cb:c2:62:96:a8: 50:02:bc:9c:a6:a4:83:47:b8:22:4c:cc:0f:29:c0: 8d:01:f1:1a:27:2d:c3:13:f8:2e:4b:44:dc:62:e4: 05:6f:92:e6:9b:f8:91:bf:b9:11:8c:7b:1e:c3:90: 53:43:21:ed:ac:a5:08:d3:fb:74:1b:26:65:33:74: 25:00:8f:de:c3:f2:f8:47:5f:da:f0:d4:c5:d3:b2: dd:e1:e1:f5:3e:54:7d:f0:7c:7c:4a:94:91:35:00: 91:8d:2e:fa:7b:5f:45:51:0f:40:c7:70:0c:bc:00: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:42:49:10:52:38:99:6D:A0:21:9E:FE:26:E0:C6:F2:E8:B2:55:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:5f:c3:2a:bd:f7:8b:08:5b:ef:92:c5:8d:0c:9c:bc:1e:fe: 0f:72:e7:bd:2a:3b:a0:1b:e1:9c:af:08:a8:8c:4f:44:30:38: ed:01:92:1b:0e:20:bc:58:6f:2e:04:25:84:15:d6:9f:7e:b1: ef:c4:af:69:8a:fc:2b:98:ee:c2:78:d7:fb:a1:67:10:6a:9c: 1d:c4:0e:4b:44:b3:49:c0:da:21:14:23:06:60:62:6a:0e:01: 86:d3:f3:a9:79:59:a0:87:83:81:66:fe:9f:58:bf:67:e6:99: 40:0f:a0:83:81:e8:c7:70:ed:a8:50:95:c0:35:db:31:26:13: f9:a6:0e:c2:9f:35:da:95:c3:fb:4d:a6:86:0e:41:91:93:35: f7:3f:b2:4e:28:57:50:32:93:ee:44:8c:ab:8a:96:f7:50:96: 5c:ff:7f:1a:8c:2e:95:a7:35:03:5b:af:b3:8f:c0:06:5e:73: b2:6a:d8:34:55:48:e4:02:d3:44:6f:94:e0:f7:a5:0b:bb:8d: 98:02:6e:f4:f0:89:1e:a8:bf:6a:8c:2a:0b:fd:7a:08:7e:72: 5d:0c:4c:9e:49:8a:33:76:bf:96:97:fa:1b:64:04:9c:e3:33: 6e:21:c6:d9:a1:a7:88:b9:ba:f4:18:1f:50:ea:8d:5b:b7:6c: 06:20:b6:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9AgH7WbLtT/HkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OTBjY2MwZDItZGM4YS00NTc0LWI3M2ItY2FlNGU2YmE1NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFfwcqJG41K53AmpUU6/jRLk2xR2WjUjeNxv Xwm8tIMmqQoZtzMIuzAkng+0M2YkKMJx1Owv8P4MhuD1sb0z4SqeIo8LRSPVeNjp uWQAEBLAsxqjr7X2Xj0kZEkr9gb4KUvFWlxcEWK4vomrZWa/i5C8fyJ2/lxKoCma 0ow84rPk6lwbbDRybXVfYTxDBWPdy8JilqhQArycpqSDR7giTMwPKcCNAfEaJy3D E/guS0TcYuQFb5Lmm/iRv7kRjHsew5BTQyHtrKUI0/t0GyZlM3QlAI/ew/L4R1/a 8NTF07Ld4eH1PlR98Hx8SpSRNQCRjS76e19FUQ9Ax3AMvADe/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZCSRBSOJltoCGe/ibgxvLoslVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQ0ZTU1NTktY2ZmMC0z MzEzLWFmYzgtZmRjZGFmM2Q5ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdfwyq994sIW++SxY0MnLwe/g9y570qO6Ab4ZyvCKiMT0QwOO0BkhsO ILxYby4EJYQV1p9+se/Er2mK/CuY7sJ41/uhZxBqnB3EDktEs0nA2iEUIwZgYmoO AYbT86l5WaCHg4Fm/p9Yv2fmmUAPoIOB6Mdw7ahQlcA12zEmE/mmDsKfNdqVw/tN poYOQZGTNfc/sk4oV1Ayk+5EjKuKlvdQllz/fxqMLpWnNQNbr7OPwAZec7Jq2DRV SOQC00RvlOD3pQu7jZgCbvTwiR6ov2qMKgv9egh+cl0MTJ5JijN2v5aX+htkBJzj M24hxtmhp4i5uvQYH1DqjVu3bAYgtvg= -----END CERTIFICATE-----Generated at Fri Oct 17 10:49:31 2025 by rpki-client