$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa File: 026b8b08-d03f-336f-8c9f-25cac406fa0b.roa (raw, json) Hash identifier: zWCapjQEa8gJOz634waZfy9txU3E6WNJMQaBJVU35Vc= Subject key identifier: BD:CE:C4:D2:A0:A1:E2:AF:65:2E:02:A1:23:E1:A2:F0:46:AE:F8:4D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797E4978D787776910E9500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 70.32.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e4:97:8d:78:77:76:91:0e:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=0c8699d2-5682-4705-81cf-06245f4a7e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:98:ce:b4:bb:0b:00:ad:12:73:5f:ef:52: 8e:8f:36:60:84:1a:1a:06:30:82:0f:01:43:ae:e0: 86:ef:1e:e8:a8:3c:d3:e9:9b:14:bd:09:0f:18:35: 6b:81:75:5b:c0:4e:83:e6:72:b7:2d:bb:5d:a1:db: f4:4e:28:58:bc:f6:ba:0f:5c:21:c5:fd:bf:66:c5: 50:0c:e8:26:11:5b:f3:11:f1:72:d0:68:02:3e:f8: d4:03:6d:61:b2:ba:ae:d6:0d:2b:72:8b:d8:db:d1: 81:84:3d:da:1a:64:8d:b9:4b:c8:e6:19:3d:c9:71: 2f:a8:e4:68:e5:6c:b7:1c:d2:02:15:0c:8a:62:66: 72:92:7b:84:93:70:4b:f1:09:62:6b:f0:b7:71:ab: 65:5b:de:89:a4:18:a2:97:90:f4:39:dc:0c:8f:84: de:3e:78:6a:d8:54:81:45:d2:0d:5e:13:af:2c:00: b0:2e:40:ef:7b:38:be:ce:a2:14:cc:f0:d3:92:3e: 52:d9:85:30:5b:23:18:77:fe:86:0b:d1:ed:5f:ed: c9:b0:9e:40:eb:2b:fe:2c:c3:9a:9f:81:c8:73:eb: b8:81:e4:ae:a6:15:fa:bc:c2:c2:a5:09:bd:84:72: 0d:dc:db:16:d5:c2:b0:d5:86:e7:0e:0c:6f:e4:fb: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CE:C4:D2:A0:A1:E2:AF:65:2E:02:A1:23:E1:A2:F0:46:AE:F8:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c5:12:5d:8c:49:99:a5:93:8e:09:d8:d7:73:f9:36:a5:e9: 25:da:07:72:fd:21:f6:86:5a:1e:90:73:2d:27:ec:f7:f1:9e: 52:fe:9c:c4:ae:91:96:75:42:74:64:6f:d9:bd:12:9a:f9:c3: 44:08:9b:81:20:c2:68:70:54:fb:6f:e5:44:91:e2:90:b7:a2: 5f:b5:75:06:67:f6:67:a0:9c:35:4f:14:0e:b5:f2:91:df:c2: bd:f6:6f:76:72:d8:53:63:9f:1b:41:23:43:20:9f:04:06:b9: 41:a6:18:e2:59:60:64:d2:82:0e:34:26:86:4c:de:f9:6e:14: 18:b6:c2:43:66:69:42:68:57:15:22:f7:c1:d9:33:57:69:a2: a6:3d:63:f5:c9:19:ed:20:f5:4b:c5:8e:2e:fa:6c:6a:53:11: df:1b:28:1f:a7:1e:d3:ba:2a:d1:01:cb:a1:2d:15:cd:3f:b1: d6:59:f7:67:5a:f9:1b:7b:cf:00:21:6b:f7:4a:ec:13:52:c2: 89:f9:0c:22:56:f5:58:cd:94:d2:c3:16:75:f5:57:ba:c4:44: 7c:e9:ce:15:5c:37:8f:32:d0:cb:e7:15:00:1e:45:c5:6a:b6: 81:44:7d:f4:77:79:43:35:c2:7a:3d:4d:99:2d:8a:0b:d5:2d: e2:bf:b7:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+SXjXh3dpEOlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MGM4Njk5ZDItNTY4Mi00NzA1LTgxY2YtMDYyNDVmNGE3ZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwieYzrS7CwCtEnNf71KOjzZghBoaBjCCDwFD ruCG7x7oqDzT6ZsUvQkPGDVrgXVbwE6D5nK3Lbtdodv0TihYvPa6D1whxf2/ZsVQ DOgmEVvzEfFy0GgCPvjUA21hsrqu1g0rcovY29GBhD3aGmSNuUvI5hk9yXEvqORo 5Wy3HNICFQyKYmZyknuEk3BL8Qlia/C3catlW96JpBiil5D0OdwMj4TePnhq2FSB RdINXhOvLACwLkDvezi+zqIUzPDTkj5S2YUwWyMYd/6GC9HtX+3JsJ5A6yv+LMOa n4HIc+u4geSuphX6vMLCpQm9hHIN3NsW1cKw1YbnDgxv5PvqGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3OxNKgoeKvZS4CoSPhovBGrvhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI2YjhiMDgtZDAzZi0z MzZmLThjOWYtMjVjYWM0MDZmYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDFEl2MSZmlk44J2Ndz+Tal6SXaB3L9IfaGWh6Qcy0n7PfxnlL+nMSu kZZ1QnRkb9m9Epr5w0QIm4EgwmhwVPtv5USR4pC3ol+1dQZn9megnDVPFA618pHf wr32b3Zy2FNjnxtBI0MgnwQGuUGmGOJZYGTSgg40JoZM3vluFBi2wkNmaUJoVxUi 98HZM1dpoqY9Y/XJGe0g9UvFji76bGpTEd8bKB+nHtO6KtEBy6EtFc0/sdZZ92da +Rt7zwAha/dK7BNSwon5DCJW9VjNlNLDFnX1V7rERHzpzhVcN48y0MvnFQAeRcVq toFEffR3eUM1wno9TZktigvVLeK/t5A= -----END CERTIFICATE-----Generated at Fri Oct 17 10:52:11 2025 by rpki-client