$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa File: fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa (raw, json) Hash identifier: qeXJWCKLrl/hPS8tINs7bPXZghn8tISru5XNQSiabQk= Subject key identifier: 7D:3A:40:C1:81:22:E4:B1:68:BD:E5:9F:BE:62:CA:1E:CE:B3:E1:CE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B67975EE9417E52B52E0E1500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:5e:e9:41:7e:52:b5:2e:0e:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=85d4dcd4-266e-4134-b9a6-72e72925c4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:6a:2d:fe:f8:c2:e4:5c:e0:e8:0f:7b:de: 42:5a:40:68:d1:c6:7a:22:b3:6c:ce:43:f2:5a:15: 3a:bf:28:19:66:1c:16:c9:c0:78:1f:06:71:5f:20: 71:23:77:db:f0:3d:45:58:28:7b:d4:bc:a7:36:af: de:95:16:4c:ce:80:92:c1:36:55:3b:2a:e1:65:2f: 9a:fb:74:cf:96:63:ee:75:b4:dd:82:f9:25:2b:fe: b3:21:f5:24:e5:01:a4:0d:f7:15:00:af:cb:60:7f: a4:2e:85:e3:b1:24:77:e4:20:de:55:a0:71:c8:c9: 5a:f0:c4:47:f2:63:7e:74:69:49:78:a4:7c:b4:95: 07:c9:f8:85:a8:0e:b4:21:a8:08:41:8b:6e:f5:ff: 26:61:f0:3c:76:6f:3d:b9:e3:a7:b2:40:8e:1b:a9: f5:cc:c9:ee:80:eb:d0:83:46:07:23:53:04:91:c0: 89:b4:29:1b:bf:25:11:6e:89:ec:9f:24:9a:00:08: 7c:50:35:e6:e1:84:b4:2f:b2:6a:46:25:d2:05:68: 6b:79:61:b5:41:fb:79:cc:76:62:9c:ec:6c:47:f3: 91:2e:de:23:7a:fd:31:ec:5d:6a:d0:c3:cf:a2:e0: b2:8a:3d:4f:bc:54:5b:1a:99:f0:1e:ec:af:f0:e9: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3A:40:C1:81:22:E4:B1:68:BD:E5:9F:BE:62:CA:1E:CE:B3:E1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f9:c5:16:8c:a9:52:51:6a:ee:07:14:cb:aa:b3:cc:52:ad: 25:fc:1a:3c:04:2a:aa:af:52:c2:5b:e1:b9:f6:b3:7e:55:79: 3e:25:a8:c1:74:e2:ee:2d:ae:21:23:27:c1:81:a4:76:ce:2e: 25:fe:26:7d:40:b3:09:4b:59:97:a1:0a:b9:31:5f:64:1d:ef: c0:23:2d:e2:2f:d2:48:0f:12:ff:fb:a4:2e:af:4d:d8:1a:d5: a6:5e:ec:c5:e3:2a:ee:6c:ab:50:e5:37:0c:49:8a:55:0a:c3: e4:58:bf:0c:68:c0:73:fc:db:ef:b0:11:26:e4:24:3b:26:80: 79:91:48:cc:ad:e8:86:cd:e9:e9:67:77:3b:f5:b4:f7:3a:5e: 95:7f:0a:a3:f6:4c:d5:e8:6f:43:fd:54:21:87:1b:22:53:f6: 5b:49:42:45:42:ad:3e:58:cd:c4:db:49:8b:62:f6:86:63:6c: 5a:34:5a:61:df:70:47:8f:45:c3:47:28:1a:bd:34:9f:27:63: 4e:d5:3d:91:5c:ec:52:c1:ad:21:42:8d:04:70:88:95:a5:59: fe:1a:fd:3a:99:7e:dd:78:06:39:b2:ab:df:29:74:df:0f:9c: 49:f7:21:40:7f:97:db:94:fa:a7:38:87:83:4e:7b:78:ef:81: 69:f1:44:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl17pQX5StS4OFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODVkNGRjZDQtMjY2ZS00MTM0LWI5YTYtNzJlNzI5MjVjNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoixqLf74wuRc4OgPe95CWkBo0cZ6IrNszkPy WhU6vygZZhwWycB4HwZxXyBxI3fb8D1FWCh71LynNq/elRZMzoCSwTZVOyrhZS+a +3TPlmPudbTdgvklK/6zIfUk5QGkDfcVAK/LYH+kLoXjsSR35CDeVaBxyMla8MRH 8mN+dGlJeKR8tJUHyfiFqA60IagIQYtu9f8mYfA8dm89ueOnskCOG6n1zMnugOvQ g0YHI1MEkcCJtCkbvyURbonsnySaAAh8UDXm4YS0L7JqRiXSBWhreWG1Qft5zHZi nOxsR/ORLt4jev0x7F1q0MPPouCyij1PvFRbGpnwHuyv8OkbFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH06QMGBIuSxaL3ln75iyh7Os+HOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmU0MzE5NmQtMGQ1ZC0z ZDhiLThiYjctNjQzNTZmYmE4NzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr5xRaMqVJRau4HFMuqs8xSrSX8GjwEKqqvUsJb4bn2s35VeT4lqMF0 4u4triEjJ8GBpHbOLiX+Jn1AswlLWZehCrkxX2Qd78AjLeIv0kgPEv/7pC6vTdga 1aZe7MXjKu5sq1DlNwxJilUKw+RYvwxowHP82++wESbkJDsmgHmRSMyt6IbN6eln dzv1tPc6XpV/CqP2TNXob0P9VCGHGyJT9ltJQkVCrT5YzcTbSYti9oZjbFo0WmHf cEePRcNHKBq9NJ8nY07VPZFc7FLBrSFCjQRwiJWlWf4a/TqZft14Bjmyq98pdN8P nEn3IUB/l9uU+qc4h4NOe3jvgWnxRNM= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:28 2025 by rpki-client