$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa File: 1846a1ae-e4b1-342c-a08f-173f928c2d62.roa (raw, json) Hash identifier: a4LS0pnjO3eC8EBemqSJJvgS3qFcAQyCSMECzCZs9HE= Subject key identifier: F0:46:C7:5E:2D:2E:21:10:40:02:0A:32:88:66:ED:71:AB:98:C2:7D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DBBF76E93AB9F72AC8F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bb:f7:6e:93:ab:9f:72:ac:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c7444ee9-d32a-4a85-b166-9ae2e569bf2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f2:6f:07:0b:16:a2:91:cf:ff:21:f9:bf:6a: 1e:d9:c5:04:42:b2:b4:02:d1:75:7c:30:34:16:f4: 30:4f:5b:05:93:1c:61:3c:25:44:df:7d:94:4c:7b: ec:f0:95:a6:b2:0b:2f:ea:73:34:6d:ac:a8:e3:e4: 5a:54:9c:01:8a:d5:78:3b:2a:c6:82:fa:f6:04:66: 72:7f:c8:83:05:66:61:ea:b9:79:f8:ba:9d:30:cf: 13:e5:b5:cc:fc:2d:81:37:a9:b5:01:a5:6e:e9:cc: 05:ec:cf:f3:96:ee:72:93:e2:27:02:20:90:15:f9: 1e:b1:7f:22:ca:2d:88:3d:27:03:49:14:94:ba:f7: 62:3f:7b:7b:da:c2:3c:88:69:ba:6e:1a:f0:17:47: 02:9a:4b:75:ab:72:ad:59:a7:4c:01:d9:3f:35:bd: 3d:ea:99:83:cc:99:87:c2:66:9d:a9:d5:c1:69:12: a0:83:12:e0:b7:72:b0:10:09:4e:e9:f5:5e:1c:09: 3c:18:ea:48:cb:6f:9a:e1:d9:8b:dd:fe:00:81:ac: 1a:0e:1f:e4:e4:b5:f6:e0:04:51:19:01:b0:f0:65: f9:cb:47:02:04:b1:97:ce:5f:78:a6:2a:39:ec:de: 21:20:03:9b:fd:8a:ac:53:5c:dd:71:1a:a4:83:dd: 96:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:46:C7:5E:2D:2E:21:10:40:02:0A:32:88:66:ED:71:AB:98:C2:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f1:15:ab:ca:3f:f9:a1:90:48:56:b6:18:aa:24:4c:fe:aa: 10:7b:1f:69:af:c6:f2:5e:c8:57:bb:57:61:82:36:12:d7:a1: dd:18:e0:53:6d:67:df:35:97:aa:16:cd:71:b2:13:39:9b:a9: 47:0d:ca:0d:9e:bf:36:6d:c8:70:e1:4a:b7:df:7d:f1:78:d0: 33:3d:55:ba:de:88:82:02:97:9f:62:82:70:5d:a0:e2:f8:be: 56:e0:78:5a:ac:ab:2e:68:89:62:68:0a:57:b0:aa:d0:13:14: 56:14:7b:e1:4a:14:e6:1b:c3:01:30:55:3f:97:8a:91:7f:ee: 31:b0:9a:f0:1d:35:13:df:1c:58:0c:a5:ba:f0:a6:09:98:ba: ba:4f:8b:e0:0b:d9:bc:3b:fc:fb:6c:8e:41:4f:04:17:35:00: b0:a7:f5:af:b2:e2:04:3c:e6:b6:e2:ba:50:6c:ff:32:f1:c1: 94:3d:94:f2:76:8c:a0:c8:ab:99:02:cd:ee:5a:e8:af:6c:ff: 98:25:47:66:f2:52:e9:6d:81:f5:03:b4:bd:30:2e:3c:90:c5: 48:03:1d:60:67:92:7d:56:da:0f:fd:ff:88:44:f9:84:34:d0: 79:19:19:1f:84:35:72:2e:0d:9b:2a:2c:e8:ad:8a:78:fd:e3: 71:ef:31:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbv3bpOrn3Ksj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Yzc0NDRlZTktZDMyYS00YTg1LWIxNjYtOWFlMmU1NjliZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvJvBwsWopHP/yH5v2oe2cUEQrK0AtF1fDA0 FvQwT1sFkxxhPCVE332UTHvs8JWmsgsv6nM0bayo4+RaVJwBitV4OyrGgvr2BGZy f8iDBWZh6rl5+LqdMM8T5bXM/C2BN6m1AaVu6cwF7M/zlu5yk+InAiCQFfkesX8i yi2IPScDSRSUuvdiP3t72sI8iGm6bhrwF0cCmkt1q3KtWadMAdk/Nb096pmDzJmH wmadqdXBaRKggxLgt3KwEAlO6fVeHAk8GOpIy2+a4dmL3f4AgawaDh/k5LX24ARR GQGw8GX5y0cCBLGXzl94pio57N4hIAOb/YqsU1zdcRqkg92WXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBGx14tLiEQQAIKMohm7XGrmMJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTg0NmExYWUtZTRiMS0z NDJjLWEwOGYtMTczZjkyOGMyZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfxFavKP/mhkEhWthiqJEz+qhB7H2mvxvJeyFe7V2GCNhLXod0Y4FNt Z981l6oWzXGyEzmbqUcNyg2evzZtyHDhSrffffF40DM9VbreiIICl59ignBdoOL4 vlbgeFqsqy5oiWJoClewqtATFFYUe+FKFOYbwwEwVT+XipF/7jGwmvAdNRPfHFgM pbrwpgmYurpPi+AL2bw7/PtsjkFPBBc1ALCn9a+y4gQ85rbiulBs/zLxwZQ9lPJ2 jKDIq5kCze5a6K9s/5glR2byUultgfUDtL0wLjyQxUgDHWBnkn1W2g/9/4hE+YQ0 0HkZGR+ENXIuDZsqLOitinj943HvMfA= -----END CERTIFICATE-----Generated at Sat Sep 26 14:19:37 2026 by rpki-client