$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa File: 34bcf9a3-a232-3124-a010-fbd2231925d1.roa (raw, json) Hash identifier: X1gwEJvX07d5YVp4vHC52LepI2qFNVI0g1WYgMeXA5M= Subject key identifier: 7C:3F:DF:7E:A0:96:46:51:91:8D:E8:D8:44:81:A5:1F:1D:8B:EB:D3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EAA51E2F3360D792ABCDC3080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 70.32.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:e2:f3:36:0d:79:2a:bc:dc:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=7c2420bb-7f5d-49c0-8753-92b3c5f43115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7c:3f:cf:ad:16:9f:40:12:a0:d6:a4:77:82: 51:c0:f5:ab:17:43:f4:60:ac:9a:b2:aa:98:fb:ae: 3f:df:b3:d6:25:b4:1f:6f:27:2c:87:1d:9f:3b:9f: f5:e0:bd:30:7b:cf:11:d8:f1:40:b8:7f:e8:76:2e: e0:76:f0:b5:b5:72:fd:64:77:0e:36:e1:6e:0b:7b: f7:3f:78:a6:19:cf:dd:61:47:75:3c:c0:09:a7:4a: 1e:f1:69:f0:5a:98:99:b8:e8:1a:b8:9d:4f:15:ab: 2d:1c:6c:6a:16:c7:99:79:bc:e1:53:24:a0:48:f6: e6:72:65:fa:5c:0e:66:4e:ea:be:c0:9f:56:e3:d7: c5:e9:a9:c6:00:5b:db:29:da:17:00:eb:fb:f5:11: 23:fb:38:8e:4e:68:c8:a5:60:d2:44:34:65:cd:ac: 8b:08:ba:df:c1:83:81:85:58:4a:bf:65:ab:03:64: 03:f7:ea:fd:9f:b1:cd:4b:5b:82:01:90:e8:30:f9: bd:8a:dc:73:35:43:75:ca:67:a4:c9:cf:7a:eb:f3: 7b:30:05:ac:59:e3:dc:4d:ce:23:7a:17:bf:ec:17: 4c:b9:67:93:09:2a:fe:10:18:f6:a3:50:a3:16:f9: 37:c7:35:ef:a8:ce:e7:6b:12:d2:cf:c8:7b:d5:42: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3F:DF:7E:A0:96:46:51:91:8D:E8:D8:44:81:A5:1F:1D:8B:EB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:0c:2d:f5:05:9b:18:73:ef:18:d6:b3:c8:e9:ee:f4:b4:0e: 61:94:d5:0e:8b:23:df:70:65:ea:82:91:5a:f1:f3:aa:8e:b2: 09:18:98:ee:6a:67:97:71:70:90:30:92:54:82:b8:fd:a6:97: e5:9b:56:0c:43:f8:5c:ae:9e:10:c6:a5:85:81:5f:28:59:82: 61:59:24:75:72:a7:73:43:af:1d:3b:4b:d8:af:2b:a2:92:43: 51:2a:6e:7d:f5:9d:95:fa:85:94:a6:2e:2c:5c:45:be:ab:5a: 73:f2:17:99:45:36:b3:9b:cf:f7:a5:90:bb:f4:4a:54:07:07: ff:ff:dc:b4:c9:ee:04:ce:a5:6b:b0:b1:52:e9:13:1e:b7:bf: 22:56:ea:71:12:62:a8:90:02:81:af:42:65:e8:f4:c3:e0:1e: 46:e8:dd:27:7f:d9:83:6b:7e:f3:c0:b7:8b:b2:f5:d6:61:99: d0:08:93:ee:4c:bb:73:17:82:62:84:55:73:d7:f5:41:a2:7b: 05:d5:03:6d:31:32:64:15:09:92:b5:ff:c3:4c:b9:2f:e5:e3: 50:12:b8:47:88:84:f7:40:e6:40:1f:1f:41:bb:93:d6:8f:11: 5a:0a:9f:29:c9:4e:bf:4b:b4:97:45:6e:3c:56:cd:93:e4:9a: f9:f2:0b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUeLzNg15KrzcMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk N2MyNDIwYmItN2Y1ZC00OWMwLTg3NTMtOTJiM2M1ZjQzMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHw/z60Wn0ASoNakd4JRwPWrF0P0YKyasqqY +64/37PWJbQfbycshx2fO5/14L0we88R2PFAuH/odi7gdvC1tXL9ZHcONuFuC3v3 P3imGc/dYUd1PMAJp0oe8WnwWpiZuOgauJ1PFastHGxqFseZebzhUySgSPbmcmX6 XA5mTuq+wJ9W49fF6anGAFvbKdoXAOv79REj+ziOTmjIpWDSRDRlzayLCLrfwYOB hVhKv2WrA2QD9+r9n7HNS1uCAZDoMPm9itxzNUN1ymekyc966/N7MAWsWePcTc4j ehe/7BdMuWeTCSr+EBj2o1CjFvk3xzXvqM7naxLSz8h71UIChwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHw/336glkZRkY3o2ESBpR8di+vTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzRiY2Y5YTMtYTIzMi0z MTI0LWEwMTAtZmJkMjIzMTkyNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwMLfUFmxhz7xjWs8jp7vS0DmGU1Q6LI99wZeqCkVrx86qOsgkYmO5q Z5dxcJAwklSCuP2ml+WbVgxD+FyunhDGpYWBXyhZgmFZJHVyp3NDrx07S9ivK6KS Q1Eqbn31nZX6hZSmLixcRb6rWnPyF5lFNrObz/elkLv0SlQHB///3LTJ7gTOpWuw sVLpEx63vyJW6nESYqiQAoGvQmXo9MPgHkbo3Sd/2YNrfvPAt4uy9dZhmdAIk+5M u3MXgmKEVXPX9UGiewXVA20xMmQVCZK1/8NMuS/l41ASuEeIhPdA5kAfH0G7k9aP EVoKnynJTr9LtJdFbjxWzZPkmvnyC8Y= -----END CERTIFICATE-----Generated at Fri Aug 7 21:46:24 2026 by rpki-client