$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa File: fd51bf42-6a03-3383-9b75-4b273b788025.roa (raw, json) Hash identifier: oca3ZOSxHh3nASfiESm4pzethsw7ErLBRo48W8+8gp8= Subject key identifier: 31:D6:B2:FF:AB:DD:E6:28:46:BA:D6:D0:F6:1F:BE:27:00:89:B3:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67975FBD335B20E79BE60300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 2386 IP address blocks: 70.32.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:5f:bd:33:5b:20:e7:9b:e6:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2eadb656-b98b-49aa-b54e-6b580fe1d09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:16:e8:64:c6:9b:35:76:39:84:d1:0f:c7: dd:e1:75:a2:76:24:11:64:2f:81:1e:87:ac:f4:d9: a1:4a:3b:d6:9d:47:9e:68:dc:15:f8:bb:6d:b6:4c: 1d:5e:40:43:4e:77:03:1b:c6:01:22:40:ad:05:55: f3:51:ba:7b:a7:bc:dc:2b:95:22:ea:1b:24:2e:25: 02:f3:52:77:40:99:a4:3f:eb:19:0a:58:83:0c:29: ee:d7:b2:f1:6f:65:3f:82:1e:64:6c:25:cf:0f:9e: 50:6f:59:7e:20:a4:ed:b7:20:8d:17:c9:52:88:65: f9:67:3b:8b:26:b8:e8:8c:d8:bf:5b:cd:35:c3:9e: c1:43:86:cf:2b:63:7d:70:ef:1e:a8:83:0c:5a:5d: 27:03:05:62:a7:51:5e:81:ca:2f:e9:d4:ea:ef:fd: 1c:c8:30:07:a2:a9:e4:53:36:dc:33:98:49:7b:d7: b2:74:79:e4:b5:c3:c2:d3:5f:12:55:55:43:d8:98: 4b:ae:e8:e9:f1:f4:c2:f3:9b:d1:4f:97:29:58:90: 0b:b7:bb:96:49:35:47:f6:ce:1e:16:5d:27:67:2b: 38:3b:4f:20:38:94:50:c2:89:b3:85:21:4b:15:39: 5d:3a:20:8a:dc:7c:c3:5c:8e:2e:60:13:3e:f0:1b: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D6:B2:FF:AB:DD:E6:28:46:BA:D6:D0:F6:1F:BE:27:00:89:B3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7f:a7:9c:f2:bc:6c:21:a4:ec:68:1d:9b:58:84:55:2a:78: f2:02:fd:f6:f4:43:77:5b:ad:15:cf:60:e8:56:3f:2e:5a:0f: 31:a3:2c:73:95:32:7f:71:66:25:4f:56:82:ec:47:90:e9:d8: c7:b5:fd:2c:e1:4a:eb:9d:2f:e2:8f:fb:8f:7b:53:cd:5d:84: 1c:ac:90:ce:e9:93:c6:31:92:02:5c:a1:eb:2d:1f:77:a3:dd: fb:d5:0f:d3:37:73:02:cf:e3:54:e2:20:89:a3:e7:00:f1:6d: e2:4f:7a:2c:d1:46:3f:4d:73:44:08:f4:d3:a6:c3:b5:4c:2c: 1d:e4:9b:24:66:ad:37:55:c2:e2:d9:cf:d3:75:41:ac:6a:09: cd:5d:50:48:9a:0e:cb:64:1d:d2:d8:f1:25:2e:25:67:a0:2b: fd:5d:c4:dd:b0:fb:f1:3c:95:9e:65:fd:11:e7:d3:41:b5:e7: c2:ed:70:c3:b4:2f:17:2a:72:c6:78:04:7b:18:aa:17:71:da: 7f:1d:f6:b4:76:9a:ca:29:3a:aa:6c:3a:69:46:8c:57:9b:01: f1:e6:80:6f:76:85:6c:c8:0d:c0:8f:73:8d:2b:84:1a:c6:c8: 64:76:40:cc:e4:69:a0:3e:3c:e5:61:a5:c3:56:c6:87:02:38: b6:59:80:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl1+9M1sg55vmAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmVhZGI2NTYtYjk4Yi00OWFhLWI1NGUtNmI1ODBmZTFkMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZwW6GTGmzV2OYTRD8fd4XWidiQRZC+BHoes 9NmhSjvWnUeeaNwV+LtttkwdXkBDTncDG8YBIkCtBVXzUbp7p7zcK5Ui6hskLiUC 81J3QJmkP+sZCliDDCnu17Lxb2U/gh5kbCXPD55Qb1l+IKTttyCNF8lSiGX5ZzuL JrjojNi/W801w57BQ4bPK2N9cO8eqIMMWl0nAwVip1Fegcov6dTq7/0cyDAHoqnk UzbcM5hJe9eydHnktcPC018SVVVD2JhLrujp8fTC85vRT5cpWJALt7uWSTVH9s4e Fl0nZys4O08gOJRQwomzhSFLFTldOiCK3HzDXI4uYBM+8BtujQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHWsv+r3eYoRrrW0PYfvicAibO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmQ1MWJmNDItNmEwMy0z MzgzLTliNzUtNGIyNzNiNzg4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx/p5zyvGwhpOxoHZtYhFUqePIC/fb0Q3dbrRXPYOhWPy5aDzGjLHOV Mn9xZiVPVoLsR5Dp2Me1/SzhSuudL+KP+497U81dhByskM7pk8YxkgJcoestH3ej 3fvVD9M3cwLP41TiIImj5wDxbeJPeizRRj9Nc0QI9NOmw7VMLB3kmyRmrTdVwuLZ z9N1QaxqCc1dUEiaDstkHdLY8SUuJWegK/1dxN2w+/E8lZ5l/RHn00G158LtcMO0 LxcqcsZ4BHsYqhdx2n8d9rR2msopOqpsOmlGjFebAfHmgG92hWzIDcCPc40rhBrG yGR2QMzkaaA+POVhpcNWxocCOLZZgGc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:22 2025 by rpki-client