$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bae71ef1-bfee-3852-aa00-08db8946feab.roa File: bae71ef1-bfee-3852-aa00-08db8946feab.roa (raw, json) Hash identifier: KOC1Ra8w/rrICJGGgHVwuNfBrghwvhhFNlq3jiFpx3s= Subject key identifier: 47:F9:CC:73:97:CF:01:CF:DD:E0:85:AB:16:9E:DA:CC:A3:1F:99:C7 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F612D6F6AD9DCB99D933FF1C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bae71ef1-bfee-3852-aa00-08db8946feab.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 396362 IP address blocks: 70.32.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6f:6a:d9:dc:b9:9d:93:3f:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=f404b5e6-bd2b-46e9-879c-0bde045c4f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:e9:71:af:b7:20:d3:cd:32:be:3d:f7:3e: 8a:8d:08:a9:31:96:60:d6:58:87:5a:ba:de:48:1f: 24:bd:08:90:36:bc:41:cd:38:04:7e:2f:63:c9:54: 63:bc:93:08:fe:e4:85:62:ac:38:a4:83:c3:70:ce: 58:40:35:65:8b:fb:d0:44:6b:c7:f5:31:7e:68:58: 56:82:16:96:5d:64:c4:ff:d4:3a:73:52:56:2f:f7: b4:7d:e2:30:d9:ee:f9:1a:4d:75:4f:04:0a:80:90: 79:00:68:8d:c2:5c:e6:a2:3a:51:91:22:1d:98:1c: fc:58:84:93:1f:df:5c:6c:82:89:77:bf:65:fe:d0: e3:fb:a3:9b:15:8b:ce:f5:da:07:9d:c3:00:ce:44: 06:ac:eb:e3:4b:ef:55:54:38:e7:b7:29:0b:f2:c7: f0:a1:74:33:53:77:9f:bb:da:a1:02:5d:36:19:3d: 1c:f2:57:68:a5:f1:0a:52:22:4c:33:65:0d:41:9e: 6b:f9:c5:be:2f:fe:9e:75:6d:a7:c9:85:6b:15:0a: f7:1c:30:d7:21:78:32:c9:da:59:3a:4b:0f:4c:7b: 2e:9d:03:94:65:cd:7f:d8:6e:48:19:10:bc:d0:4e: b8:76:e9:21:ee:7c:7c:5c:d1:9d:37:e3:b5:21:19: 52:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F9:CC:73:97:CF:01:CF:DD:E0:85:AB:16:9E:DA:CC:A3:1F:99:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bae71ef1-bfee-3852-aa00-08db8946feab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 70.32.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d3:62:9c:4e:7b:af:f6:d5:b5:a4:1f:d3:20:80:18:7e:d0: f0:5a:1e:aa:8b:5f:27:f7:a0:bf:8d:4d:da:1c:21:25:f2:b7: d6:e5:40:d4:05:70:a3:c9:57:6c:ac:f8:f1:0f:cf:79:71:48: 1d:f4:40:91:7d:11:66:15:9c:5e:37:ba:83:7b:8d:62:ba:29: 6f:da:3d:55:c8:3b:79:79:e9:f3:49:99:03:91:ff:af:bd:6f: ac:fc:e4:33:63:ad:3a:6a:b1:63:7d:59:da:bb:7f:7d:a6:6d: 1d:34:30:52:92:de:2d:e4:56:22:61:25:1a:0f:c0:7f:db:6e: 84:92:77:03:d0:fa:4d:0d:f6:dd:0c:d5:4f:01:ba:b8:25:76: ae:be:1c:a6:51:a7:79:3e:32:db:82:ba:24:eb:73:ae:8b:7e: 29:20:0f:bf:e0:d5:b9:91:af:72:d7:64:73:0f:02:40:36:65: 1c:49:89:cd:29:30:95:28:44:c9:ea:03:4a:12:6a:a4:d5:26: 1b:7e:58:88:57:37:ee:da:ce:8b:f3:0f:58:11:30:0c:32:69: 3b:59:a1:2c:85:55:dd:b1:88:cb:0e:0c:7b:4e:28:50:c9:0d: 6a:d5:f0:40:dc:f2:cf:a7:18:a9:73:d1:f0:94:2d:d2:e6:b8: 42:ce:53:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLW9q2dy5nZM/8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjQwNGI1ZTYtYmQyYi00NmU5LTg3OWMtMGJkZTA0NWM0ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPjpca+3INPNMr499z6KjQipMZZg1liHWrre SB8kvQiQNrxBzTgEfi9jyVRjvJMI/uSFYqw4pIPDcM5YQDVli/vQRGvH9TF+aFhW ghaWXWTE/9Q6c1JWL/e0feIw2e75Gk11TwQKgJB5AGiNwlzmojpRkSIdmBz8WIST H99cbIKJd79l/tDj+6ObFYvO9doHncMAzkQGrOvjS+9VVDjntykL8sfwoXQzU3ef u9qhAl02GT0c8ldopfEKUiJMM2UNQZ5r+cW+L/6edW2nyYVrFQr3HDDXIXgyydpZ OksPTHsunQOUZc1/2G5IGRC80E64dukh7nx8XNGdN+O1IRlSCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf5zHOXzwHP3eCFqxae2syjH5nHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmFlNzFlZjEtYmZlZS0z ODUyLWFhMDAtMDhkYjg5NDZmZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnTYpxOe6/21bWkH9MggBh+0PBaHqqLXyf3oL+NTdocISXyt9blQNQF cKPJV2ys+PEPz3lxSB30QJF9EWYVnF43uoN7jWK6KW/aPVXIO3l56fNJmQOR/6+9 b6z85DNjrTpqsWN9Wdq7f32mbR00MFKS3i3kViJhJRoPwH/bboSSdwPQ+k0N9t0M 1U8Burgldq6+HKZRp3k+MtuCuiTrc66LfikgD7/g1bmRr3LXZHMPAkA2ZRxJic0p MJUoRMnqA0oSaqTVJht+WIhXN+7azovzD1gRMAwyaTtZoSyFVd2xiMsODHtOKFDJ DWrV8EDc8s+nGKlz0fCULdLmuELOU9A= -----END CERTIFICATE-----Generated at Wed Oct 7 02:25:34 2026 by rpki-client