$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa File: 1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa (raw, json) Hash identifier: VhSW2TgoMbR0cS2CZFOoRMHUPkR6pWevAmH4ig2LnuI= Subject key identifier: 53:81:4B:B7:C2:93:4B:91:E0:BA:FE:D3:FE:DC:75:3F:65:12:F5:29 Certificate issuer: /CN=13f2987b-65e9-4b0f-9061-f324b366fd94 Certificate serial: 010D0C9F4328584E7BCA34415AD9C636BD493FA0 Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 32425 IP address blocks: 70.40.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:34:41:5a:d9:c6:36:bd:49:3f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94 Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=dc266211-d853-4760-aaa2-2965d20ba187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:69:3a:95:6e:57:6e:74:59:83:19:30:78:90: de:88:17:22:62:f8:08:0c:06:54:12:12:c5:62:23: 54:23:52:55:60:5d:a6:ab:44:87:23:a1:31:6e:40: 35:97:ed:24:37:ea:8c:c0:61:cb:dd:31:ad:ab:10: 92:af:37:25:35:a6:7b:e8:f4:87:6f:d7:da:59:50: f4:41:5a:47:6a:37:8c:18:fc:85:60:f6:21:60:25: 10:b6:96:4c:2f:3b:10:0a:ea:28:1d:80:20:e6:5c: 3e:20:04:fd:da:8d:21:26:4e:f1:f7:d0:a3:54:07: af:d8:53:83:c0:ec:93:e8:01:0e:60:6b:ee:c1:b4: c0:b6:2f:78:98:62:d9:87:11:aa:45:51:69:1a:37: 35:0d:b9:78:b1:d5:8d:a1:70:cc:23:70:a4:4d:e0: c8:e5:77:eb:69:c4:01:d4:cf:e7:47:87:3d:cb:ec: 29:71:72:0b:32:d9:ac:49:52:a4:11:91:68:f1:e8: da:b2:47:6d:6c:dc:69:a9:3c:7b:29:a9:23:61:5b: 19:93:e1:e7:de:90:87:5a:1d:db:70:46:be:e1:c6: 16:65:7d:18:a1:73:0f:06:a3:7b:c6:75:ce:df:7b: aa:d3:ed:49:2b:e9:1c:c6:96:1f:b5:62:61:18:e1: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:81:4B:B7:C2:93:4B:91:E0:BA:FE:D3:FE:DC:75:3F:65:12:F5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/1215e6a7-9875-31fc-9b91-d817b58bd7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl X509v3 Authority Key Identifier: keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer sbgp-ipAddrBlock: critical IPv4: 70.40.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:49:3d:c2:be:45:2c:45:c4:1a:93:0b:5c:20:d6:41:59:56: 54:84:ad:db:c8:e2:fa:79:a2:af:b7:08:d5:b9:e4:6b:f9:b8: 5f:f2:20:fe:2f:46:34:02:d9:d5:bd:3b:e6:b9:c2:29:62:1b: 89:53:aa:4d:53:fd:f3:44:80:04:fe:7c:28:21:87:b9:34:bc: b7:d7:e3:a4:d2:cf:c2:a5:1f:a4:8f:29:71:df:22:9c:79:19: cd:68:a6:7c:0c:ee:9f:b9:dd:56:bf:bf:82:fe:44:13:49:4e: 15:2a:88:b6:4c:ec:fb:88:5c:09:f9:dc:9a:c2:0f:56:82:c7: 95:52:f8:c8:ea:34:8b:b2:13:95:d2:ec:39:de:83:8c:0c:7a: 4b:f9:c1:58:b4:89:ac:2c:cd:0d:0a:ed:88:a0:93:0f:83:83: 1b:8c:36:13:b5:74:bb:26:76:d1:b5:99:f0:a2:d2:39:8e:36: d8:ea:2f:f7:94:01:a5:8a:51:02:a0:54:4a:8f:43:78:fa:16: 71:37:36:15:05:82:b5:5e:cf:68:4b:fe:5e:39:5a:c3:0b:63: 18:1b:52:b8:5c:f3:9b:13:f8:73:f5:ab:b9:fa:9e:11:6a:99: a2:7a:c8:5a:c3:f1:5e:ca:92:ba:0e:55:73:2a:11:19:5d:6f: fb:39:ef:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yjRBWtnGNr1JP6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmMjk4N2ItNjVlOS00YjBmLTkwNjEtZjMyNGIzNjZm ZDk0MB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk ZGMyNjYyMTEtZDg1My00NzYwLWFhYTItMjk2NWQyMGJhMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wk6lW5XbnRZgxkweJDeiBciYvgIDAZUEhLF YiNUI1JVYF2mq0SHI6ExbkA1l+0kN+qMwGHL3TGtqxCSrzclNaZ76PSHb9faWVD0 QVpHajeMGPyFYPYhYCUQtpZMLzsQCuooHYAg5lw+IAT92o0hJk7x99CjVAev2FOD wOyT6AEOYGvuwbTAti94mGLZhxGqRVFpGjc1Dbl4sdWNoXDMI3CkTeDI5XfracQB 1M/nR4c9y+wpcXILMtmsSVKkEZFo8ejaskdtbNxpqTx7KakjYVsZk+Hn3pCHWh3b cEa+4cYWZX0YoXMPBqN7xnXO33uq0+1JK+kcxpYftWJhGOGhowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOBS7fCk0uR4Lr+0/7cdT9lEvUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xM2Yy OTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0YjM2NmZkOTQvMTIxNWU2YTctOTg3NS0z MWZjLTliOTEtZDgxN2I1OGJkN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTNmMjk4N2ItNjVlOS00YjBmLTkw NjEtZjMyNGIzNjZmZDk0LzEzZjI5ODdiLTY1ZTktNGIwZi05MDYxLWYzMjRiMzY2 ZmQ5NC5jcmwwHwYDVR0jBBgwFoAUxt3F8684P/Bqh/r6+Mr1rsrEwzcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xM2YyOTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0 YjM2NmZkOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiifMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNJPcK+RSxFxBqTC1wg1kFZVlSErdvI4vp5oq+3CNW55Gv5uF/yIP4v RjQC2dW9O+a5wiliG4lTqk1T/fNEgAT+fCghh7k0vLfX46TSz8KlH6SPKXHfIpx5 Gc1opnwM7p+53Va/v4L+RBNJThUqiLZM7PuIXAn53JrCD1aCx5VS+MjqNIuyE5XS 7Dneg4wMekv5wVi0iawszQ0K7Yigkw+DgxuMNhO1dLsmdtG1mfCi0jmONtjqL/eU AaWKUQKgVEqPQ3j6FnE3NhUFgrVez2hL/l45WsMLYxgbUrhc85sT+HP1q7n6nhFq maJ6yFrD8V7KkroOVXMqERldb/s57zg= -----END CERTIFICATE-----Generated at Tue Jul 14 12:01:12 2026 by rpki-client