$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa File: d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa (raw, json) Hash identifier: SRM+EAh7WCZtfMVRM1urOui3ZU7vEzMDaryfw/H3rjw= Subject key identifier: 17:74:15:AF:BD:43:C7:EF:71:A7:1C:F2:D4:E2:DF:2B:89:C9:B3:70 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797D62806ABA194D769FFC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:d6:28:06:ab:a1:94:d7:69:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=9f19d901-8bc8-4015-9aae-37daed9f5c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7b:9a:30:7e:bf:e1:17:d7:46:4c:33:e6:ca: 1b:0f:6e:34:b4:3d:f8:89:1b:29:91:74:20:8e:39: 12:fb:6a:da:be:bb:ef:1c:95:9a:82:c8:a5:6e:f2: 6e:fd:ed:66:23:44:eb:96:dd:d0:28:f1:2a:10:9a: 70:c4:e9:4e:d2:21:51:83:7b:ef:56:19:55:5c:62: 69:12:09:31:36:53:09:03:1d:92:aa:0d:a4:1e:19: 5f:ee:97:c2:6b:54:df:79:34:28:99:ec:96:5a:01: c6:6a:6a:e6:20:cf:07:8f:9b:c9:27:82:41:81:65: 79:4b:4d:0c:46:46:00:85:2d:ae:76:a4:0d:6c:79: 6f:4c:69:44:3e:d2:8e:8e:e4:2b:de:b9:37:21:dc: 95:e2:ea:ec:91:6d:b0:fb:a2:08:02:96:ac:07:9d: 78:9b:4a:44:c2:6c:51:18:50:31:f5:73:c0:bc:b6: e0:54:2a:e0:a8:8b:ad:c6:74:f5:03:84:da:32:5a: 11:f2:c1:9a:22:6e:98:22:7f:8d:26:f6:ed:c5:ae: 5d:4c:5b:6c:b6:8e:eb:78:78:96:0e:8c:35:ec:d3: cd:87:dd:fb:ac:bd:81:dc:26:84:f4:db:36:8c:94: 14:15:4f:b3:e9:89:18:61:f8:5d:09:ef:96:42:ec: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:74:15:AF:BD:43:C7:EF:71:A7:1C:F2:D4:E2:DF:2B:89:C9:B3:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:59:6b:ae:53:d7:2e:50:b0:f1:8d:6b:ed:86:96:38:9f:d4: 5a:1c:2a:fb:e5:e0:4d:38:7e:2d:f3:22:1e:24:4f:5a:39:bf: 17:85:52:c3:74:89:5b:b8:c8:1b:26:4a:c3:6e:4a:ee:63:b4: 50:a9:09:03:c9:f3:07:bb:e8:ba:44:ab:87:1a:00:84:00:32: 7a:48:37:a1:cf:5f:6c:62:50:4e:99:a1:c2:51:84:ba:c2:49: a6:22:73:28:d2:09:fe:fe:e1:a3:99:d4:56:55:06:a3:67:62: 71:92:3f:e9:ce:8f:08:37:dc:9f:ad:a1:6f:28:b0:1e:12:8e: 4e:e6:d7:90:3e:42:c3:a5:98:24:97:6d:6f:67:aa:58:37:24: 61:4a:5e:25:30:67:4c:43:ad:6d:9a:a5:c1:dc:58:13:8f:35: 25:06:29:b3:18:97:07:8f:66:b6:d7:2f:57:b0:eb:1b:01:eb: 52:ba:16:ca:51:b9:08:5f:63:4b:82:ac:62:06:0e:41:d9:18: 0b:7a:61:b3:da:8d:39:55:e4:7b:19:97:9a:a1:5a:84:40:38: 84:fc:1a:ff:ba:c4:29:8c:fa:ae:65:8d:a6:9d:8f:ec:2b:21: e7:dc:4e:b7:b3:43:3d:8d:a0:dd:89:6b:b0:c6:7f:d9:86:31: 77:b9:3f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl9YoBquhlNdp/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWYxOWQ5MDEtOGJjOC00MDE1LTlhYWUtMzdkYWVkOWY1YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nuaMH6/4RfXRkwz5sobD240tD34iRspkXQg jjkS+2ravrvvHJWagsilbvJu/e1mI0Trlt3QKPEqEJpwxOlO0iFRg3vvVhlVXGJp EgkxNlMJAx2Sqg2kHhlf7pfCa1TfeTQomeyWWgHGamrmIM8Hj5vJJ4JBgWV5S00M RkYAhS2udqQNbHlvTGlEPtKOjuQr3rk3IdyV4urskW2w+6IIApasB514m0pEwmxR GFAx9XPAvLbgVCrgqIutxnT1A4TaMloR8sGaIm6YIn+NJvbtxa5dTFtsto7reHiW Dow17NPNh937rL2B3CaE9Ns2jJQUFU+z6YkYYfhdCe+WQuxJrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd0Fa+9Q8fvcacc8tTi3yuJybNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDM3MzQ1OTItMjA0MS0z NGZlLWE3NDktYjFiNmE1ZmQ4YmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJZa65T1y5QsPGNa+2Gljif1FocKvvl4E04fi3zIh4kT1o5vxeFUsN0 iVu4yBsmSsNuSu5jtFCpCQPJ8we76LpEq4caAIQAMnpIN6HPX2xiUE6ZocJRhLrC SaYicyjSCf7+4aOZ1FZVBqNnYnGSP+nOjwg33J+toW8osB4Sjk7m15A+QsOlmCSX bW9nqlg3JGFKXiUwZ0xDrW2apcHcWBOPNSUGKbMYlwePZrbXL1ew6xsB61K6FspR uQhfY0uCrGIGDkHZGAt6YbPajTlV5HsZl5qhWoRAOIT8Gv+6xCmM+q5ljaadj+wr IefcTrezQz2NoN2Ja7DGf9mGMXe5P+E= -----END CERTIFICATE-----Generated at Sun Oct 19 23:42:05 2025 by rpki-client