$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa File: 089de854-3bd0-3daa-8427-ce457804664f.roa (raw, json) Hash identifier: KBj+efWQHNGKjYjIF5ngnKw0Fh/b7LfLw8paI5sZCzE= Subject key identifier: 81:9B:FC:9E:3B:88:96:BA:D7:43:92:F5:CA:96:5E:B0:27:90:62:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D972C6D89E26E8AE34200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:97:2c:6d:89:e2:6e:8a:e3:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=bfabe880-d7be-46a7-908c-07e4d3947a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:02:e1:b4:ba:c9:1e:97:2a:8b:4b:ca:56: 26:c2:f9:a8:a0:a3:4e:09:7d:d3:08:84:12:2d:d2: 20:03:44:2b:62:6e:cd:71:c9:24:87:3a:17:ca:2b: 08:85:ea:21:bf:e1:14:b0:c3:11:c8:6a:8e:44:60: 42:e5:8c:9d:a4:df:5f:97:f6:54:12:9c:e9:4f:9a: 8d:9f:ea:45:8c:0a:59:42:bb:9d:25:db:31:be:34: b9:73:ab:4a:17:df:cf:27:98:7d:c3:71:13:f8:49: d4:cc:12:55:18:3b:19:98:47:29:85:cc:8f:d3:ed: e8:71:13:c5:47:88:15:d7:d4:84:94:cb:5d:7b:f0: ed:be:3c:64:72:08:30:f7:23:99:3d:10:77:5b:ab: b5:26:db:c2:d8:63:1a:81:ab:60:62:df:43:86:de: 61:84:e5:0c:c2:0b:8c:e0:2f:11:25:9e:b1:79:07: 4c:4b:84:d2:c3:e3:65:ea:26:27:ed:b2:72:42:a4: d7:5a:c0:7d:d0:0b:9b:66:ff:ad:63:6d:ff:51:9e: ac:58:eb:22:de:5c:e6:1f:e5:8f:23:ee:a3:0c:89: 47:6f:9b:96:dc:b6:a4:b0:b9:3d:be:61:ec:4e:25: 12:6a:51:c2:d8:17:68:f2:18:ec:6e:01:c3:85:a0: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9B:FC:9E:3B:88:96:BA:D7:43:92:F5:CA:96:5E:B0:27:90:62:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:46:e7:22:5f:78:fc:16:65:d5:11:39:84:49:c1:1a:34:c4: 7f:db:75:ab:8d:4f:ee:61:f8:0c:4d:47:92:15:5b:c0:5a:18: f8:4e:b7:73:26:b3:1b:83:40:61:33:17:42:6b:39:a8:97:b0: f9:e2:84:9a:31:ad:06:a0:72:d5:a9:6d:fa:d1:ef:0d:63:0e: 9c:48:a9:0e:bf:1d:e8:b3:3e:b7:05:18:47:0a:f1:35:b2:d7: 70:2c:f7:26:67:03:7d:80:b1:c4:76:cc:4e:8b:24:74:ff:5a: 89:f7:6e:4f:76:a9:6d:96:e0:17:c9:68:21:5b:56:04:b7:8b: c8:d7:94:e6:71:6f:6c:ca:b5:2f:09:9c:d4:9d:02:72:55:42: fb:dd:b8:90:ae:78:e2:3d:d3:25:4d:25:df:e7:13:4a:da:c5: b1:cd:d2:0d:bd:7f:0c:91:81:ca:e5:30:09:56:b0:20:9b:79: 87:70:69:d3:c6:b4:48:f6:5f:7f:e4:4e:68:fd:2d:50:c8:d3: 5a:23:ba:3e:97:53:5b:54:a4:c6:91:9e:13:9c:79:51:7d:0f: 07:47:86:7a:59:e5:0d:b7:82:d4:57:eb:2d:1f:2b:01:af:68: 0a:5b:6f:7e:7a:2d:6e:a3:a9:da:1b:f7:d5:e0:81:3c:da:d8: df:5b:d1:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZcsbYniborjQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YmZhYmU4ODAtZDdiZS00NmE3LTkwOGMtMDdlNGQzOTQ3YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrUC4bS6yR6XKotLylYmwvmooKNOCX3TCIQS LdIgA0QrYm7NcckkhzoXyisIheohv+EUsMMRyGqORGBC5YydpN9fl/ZUEpzpT5qN n+pFjApZQrudJdsxvjS5c6tKF9/PJ5h9w3ET+EnUzBJVGDsZmEcphcyP0+3ocRPF R4gV19SElMtde/Dtvjxkcggw9yOZPRB3W6u1JtvC2GMagatgYt9Dht5hhOUMwguM 4C8RJZ6xeQdMS4TSw+Nl6iYn7bJyQqTXWsB90AubZv+tY23/UZ6sWOsi3lzmH+WP I+6jDIlHb5uW3LaksLk9vmHsTiUSalHC2Bdo8hjsbgHDhaCI/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGb/J47iJa610OS9cqWXrAnkGJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDg5ZGU4NTQtM2JkMC0z ZGFhLTg0MjctY2U0NTc4MDQ2NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAING5yJfePwWZdUROYRJwRo0xH/bdauNT+5h+AxNR5IVW8BaGPhOt3Mm sxuDQGEzF0JrOaiXsPnihJoxrQagctWpbfrR7w1jDpxIqQ6/HeizPrcFGEcK8TWy 13As9yZnA32AscR2zE6LJHT/Won3bk92qW2W4BfJaCFbVgS3i8jXlOZxb2zKtS8J nNSdAnJVQvvduJCueOI90yVNJd/nE0raxbHN0g29fwyRgcrlMAlWsCCbeYdwadPG tEj2X3/kTmj9LVDI01ojuj6XU1tUpMaRnhOceVF9DwdHhnpZ5Q23gtRX6y0fKwGv aApbb356LW6jqdob99XggTza2N9b0bs= -----END CERTIFICATE-----Generated at Sat Sep 26 03:22:14 2026 by rpki-client