$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/a6bfca5c-dfbe-3a7a-8cc1-1e2a660e6507.roa File: a6bfca5c-dfbe-3a7a-8cc1-1e2a660e6507.roa (raw, json) Hash identifier: yAbT/wPqLGm3Nf5Dx7BjtHUQTnzdpSz2I/t1F7K6Mfs= Subject key identifier: 5A:48:FE:5C:B2:C5:49:41:60:6D:2E:3D:ED:79:C9:DB:98:6C:8A:24 Certificate issuer: /CN=48cceee9-c5df-4d1e-92c9-804653987f35 Certificate serial: 010D0C9F4328584F49739AF5758BC8A3400A8C00 Authority key identifier: 63:93:74:06:F5:F7:AE:2B:2B:E9:DF:72:BD:88:55:F0:84:57:4D:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/a6bfca5c-dfbe-3a7a-8cc1-1e2a660e6507.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4922 IP address blocks: 70.32.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/48cceee9-c5df-4d1e-92c9-804653987f35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/48cceee9-c5df-4d1e-92c9-804653987f35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:9a:f5:75:8b:c8:a3:40:0a:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48cceee9-c5df-4d1e-92c9-804653987f35 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9487f621-38b2-419d-a6a6-3dc79627d4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:46:1d:a0:cc:ef:99:29:91:37:67:f4:da:13: 5c:1b:41:1b:a7:c5:51:ae:6b:8a:05:50:3a:6c:a2: 1b:09:fd:61:ea:36:bf:b9:46:21:03:3d:fc:dd:ef: 2a:56:b4:77:99:72:db:0d:57:21:db:9e:00:4e:30: c2:6f:78:52:21:79:dd:96:9a:70:29:72:28:ff:e4: e5:39:35:d2:f2:a6:bc:72:ae:a4:e6:ef:c2:7f:d7: 7d:c7:4a:e3:ac:51:5d:94:60:99:5f:77:d4:86:45: 87:22:60:0d:91:9d:0b:fd:8e:29:d8:0d:18:ac:40: a1:d4:ef:c5:d4:61:a1:95:c5:20:fd:bd:f5:68:aa: 4e:80:5a:c6:e0:04:33:71:11:57:a6:35:e6:d2:39: 4f:ab:c6:5e:88:e0:01:8e:1d:47:0c:38:7a:03:ef: 28:1c:16:48:ac:98:a4:9f:0c:4d:13:7d:d6:cc:81: 9d:a1:46:3a:47:c9:0d:4b:ff:ac:3a:d0:8e:f1:64: bd:90:bc:fb:04:81:a2:8b:22:ff:ed:62:75:2f:73: 04:e0:5a:8c:93:05:9e:5d:21:a0:6a:15:b0:d5:e4: ea:15:10:4f:61:55:d9:90:9e:c8:94:7b:75:b7:1e: b5:40:d5:2a:d3:a9:ab:2e:c5:2e:d8:02:99:1a:31: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:48:FE:5C:B2:C5:49:41:60:6D:2E:3D:ED:79:C9:DB:98:6C:8A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/a6bfca5c-dfbe-3a7a-8cc1-1e2a660e6507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/48cceee9-c5df-4d1e-92c9-804653987f35.crl X509v3 Authority Key Identifier: keyid:63:93:74:06:F5:F7:AE:2B:2B:E9:DF:72:BD:88:55:F0:84:57:4D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35.cer sbgp-ipAddrBlock: critical IPv4: 70.32.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b0:1a:c2:fd:0c:32:40:63:07:d6:26:d3:0a:95:ba:41:75: 10:05:64:63:ff:15:22:43:88:42:2f:00:28:23:08:e3:76:62: 51:e3:dd:a4:52:68:01:47:d0:af:d5:39:6a:f9:5b:b2:d2:34: 71:ba:9c:11:cc:8a:10:f4:50:8a:e1:d9:8d:7e:4f:21:f6:0b: de:b9:5c:78:3e:af:ca:3a:00:c2:6e:94:d7:2d:cc:0b:b8:89: 40:bd:98:26:59:15:20:0a:d1:08:10:56:1c:f6:13:75:0a:ff: 26:76:c7:9b:13:61:a0:de:35:85:09:81:d4:1b:11:77:43:df: 54:b7:4d:fe:56:20:6c:91:6e:54:74:b4:62:86:3a:3c:2c:85: 02:42:b9:af:b1:34:60:2b:a5:a6:df:4d:b5:41:99:cf:87:35: 2c:c9:cc:29:5b:ef:f3:56:71:b9:fc:61:b9:06:12:75:e5:52: 8a:6c:19:1a:b0:d1:52:a4:44:69:0f:d3:b1:c7:2a:fb:bc:62: 38:90:ac:82:0d:86:c9:9b:22:9e:ea:c8:04:8f:91:f1:21:db: 50:57:6d:01:7e:ec:86:7c:bb:51:a9:02:3f:67:37:b7:eb:12: b5:8b:60:64:bc:99:22:cc:10:29:4d:8b:f1:8e:f3:2f:18:76: 90:8b:cb:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5r1dYvIo0AKjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhjY2VlZTktYzVkZi00ZDFlLTkyYzktODA0NjUzOTg3 ZjM1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTQ4N2Y2MjEtMzhiMi00MTlkLWE2YTYtM2RjNzk2MjdkNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEYdoMzvmSmRN2f02hNcG0Ebp8VRrmuKBVA6 bKIbCf1h6ja/uUYhAz383e8qVrR3mXLbDVch254ATjDCb3hSIXndlppwKXIo/+Tl OTXS8qa8cq6k5u/Cf9d9x0rjrFFdlGCZX3fUhkWHImANkZ0L/Y4p2A0YrECh1O/F 1GGhlcUg/b31aKpOgFrG4AQzcRFXpjXm0jlPq8ZeiOABjh1HDDh6A+8oHBZIrJik nwxNE33WzIGdoUY6R8kNS/+sOtCO8WS9kLz7BIGiiyL/7WJ1L3ME4FqMkwWeXSGg ahWw1eTqFRBPYVXZkJ7IlHt1tx61QNUq06mrLsUu2AKZGjFcuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpI/lyyxUlBYG0uPe15yduYbIokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80OGNj ZWVlOS1jNWRmLTRkMWUtOTJjOS04MDQ2NTM5ODdmMzUvYTZiZmNhNWMtZGZiZS0z YTdhLThjYzEtMWUyYTY2MGU2NTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDhjY2VlZTktYzVkZi00ZDFlLTky YzktODA0NjUzOTg3ZjM1LzQ4Y2NlZWU5LWM1ZGYtNGQxZS05MmM5LTgwNDY1Mzk4 N2YzNS5jcmwwHwYDVR0jBBgwFoAUY5N0BvX3risr6d9yvYhV8IRXTWgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80OGNjZWVlOS1jNWRmLTRkMWUtOTJjOS04MDQ2 NTM5ODdmMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6wGsL9DDJAYwfWJtMKlbpBdRAFZGP/FSJDiEIvACgjCON2YlHj3aRS aAFH0K/VOWr5W7LSNHG6nBHMihD0UIrh2Y1+TyH2C965XHg+r8o6AMJulNctzAu4 iUC9mCZZFSAK0QgQVhz2E3UK/yZ2x5sTYaDeNYUJgdQbEXdD31S3Tf5WIGyRblR0 tGKGOjwshQJCua+xNGArpabfTbVBmc+HNSzJzClb7/NWcbn8YbkGEnXlUopsGRqw 0VKkRGkP07HHKvu8YjiQrIINhsmbIp7qyASPkfEh21BXbQF+7IZ8u1GpAj9nN7fr ErWLYGS8mSLMEClNi/GO8y8YdpCLy+E= -----END CERTIFICATE-----Generated at Sun Oct 18 07:11:24 2026 by rpki-client