$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa File: 3af32542-c9f5-3111-92af-80e94a931b6a.roa (raw, json) Hash identifier: HzHu5CbH6qtZaNCVU5iBXn+1P3SQTpLL60IsxI3P+N4= Subject key identifier: D4:80:2A:D0:25:2C:C3:43:D7:20:BD:38:9F:B2:20:72:4F:AF:E5:02 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D8445149FEF331C491640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:84:45:14:9f:ef:33:1c:49:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d30a2783-41f6-4478-83cb-a10c3dcbeeed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:fb:e0:be:72:a4:c4:d4:52:72:cf:00:7f: ee:42:60:f0:43:1a:d2:8f:21:9d:a9:29:7e:c4:fa: bd:7f:c5:3a:ed:bd:2e:00:b1:38:76:6e:e2:46:ba: 15:22:1e:0b:ee:0b:39:c6:06:5d:ad:72:65:17:0b: 66:1a:43:14:de:9e:c8:b8:cd:e6:57:c3:61:0d:d8: 3a:5b:88:3d:f5:93:26:e4:68:7a:55:a2:21:7b:6e: 7a:51:24:b8:ce:6a:a4:90:35:26:01:30:39:64:f1: 53:c1:6f:61:a9:7e:04:6a:af:1d:f7:43:35:4e:d8: 52:06:dc:52:69:21:fe:8d:4a:28:31:ef:df:73:96: f9:b4:2e:60:c1:dd:7b:88:92:8e:d7:e3:3a:de:5d: 6d:7c:22:5f:59:8a:4a:8e:91:99:64:44:a3:3f:a4: 51:39:14:91:4f:23:dc:b9:9b:20:6a:b2:9a:24:4c: fd:d6:cf:66:82:0d:57:90:61:b8:2e:91:bf:ba:0d: 14:24:42:ff:6b:90:41:4b:52:84:fa:b7:61:cd:fa: 64:11:4d:1c:76:98:aa:f0:d3:ad:96:37:ed:84:b1: 16:c9:a9:bf:b2:d6:d3:e1:d2:b7:35:ce:9c:41:cc: ff:d6:fd:6d:d8:af:b7:d4:6e:ab:87:1d:f4:68:68: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:80:2A:D0:25:2C:C3:43:D7:20:BD:38:9F:B2:20:72:4F:AF:E5:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:42:9e:a6:ba:cd:5c:11:a4:d0:0f:8a:7d:a0:a0:6a:d3:dd: 2b:f8:29:84:5a:b5:97:91:57:f0:81:e6:c5:dc:26:15:f5:6e: 60:16:b6:1b:43:82:74:16:fd:fb:40:0d:78:a9:8a:3a:b7:c6: 19:6c:66:5e:3e:04:6a:8d:95:d0:4d:f4:bc:e4:a7:d4:dc:54: ae:6a:87:bc:40:23:7b:7b:db:ad:8c:49:07:c0:aa:c9:fc:b1: 1a:db:ec:60:9d:16:f7:6a:31:f5:79:4f:08:86:6f:e7:f3:ce: c4:df:16:ac:d7:ec:1b:b5:68:29:c2:eb:1c:3c:c8:12:a5:69: 51:03:46:70:47:58:c3:5c:1b:45:35:d3:8e:e8:17:98:ec:47: ce:cf:fe:37:05:11:77:5c:22:42:17:fe:5e:c5:e6:c9:ed:93: 7c:58:14:34:bd:f6:0d:eb:23:b1:38:43:2c:94:2a:b1:d5:9e: b8:89:14:fd:f3:5f:62:b4:4a:45:01:d9:a5:a0:7d:e7:af:6f: f5:89:5d:fb:43:c7:4f:3b:b4:31:e0:9c:9b:ed:70:ae:6a:1c: c5:78:2b:27:21:54:80:63:dc:45:21:9d:e8:41:11:db:93:ce: ec:06:d0:b9:1d:75:a8:bd:e6:78:d5:f0:64:48:b4:82:43:b0: e4:8a:2a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYRFFJ/vMxxJFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDMwYTI3ODMtNDFmNi00NDc4LTgzY2ItYTEwYzNkY2JlZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6P74L5ypMTUUnLPAH/uQmDwQxrSjyGdqSl+ xPq9f8U67b0uALE4dm7iRroVIh4L7gs5xgZdrXJlFwtmGkMU3p7IuM3mV8NhDdg6 W4g99ZMm5Gh6VaIhe256USS4zmqkkDUmATA5ZPFTwW9hqX4Eaq8d90M1TthSBtxS aSH+jUooMe/fc5b5tC5gwd17iJKO1+M63l1tfCJfWYpKjpGZZESjP6RRORSRTyPc uZsgarKaJEz91s9mgg1XkGG4LpG/ug0UJEL/a5BBS1KE+rdhzfpkEU0cdpiq8NOt ljfthLEWyam/stbT4dK3Nc6cQcz/1v1t2K+31G6rhx30aGjvGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSAKtAlLMND1yC9OJ+yIHJPr+UCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FmMzI1NDItYzlmNS0z MTExLTkyYWYtODBlOTRhOTMxYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRCnqa6zVwRpNAPin2goGrT3Sv4KYRatZeRV/CB5sXcJhX1bmAWthtD gnQW/ftADXipijq3xhlsZl4+BGqNldBN9Lzkp9TcVK5qh7xAI3t7262MSQfAqsn8 sRrb7GCdFvdqMfV5TwiGb+fzzsTfFqzX7Bu1aCnC6xw8yBKlaVEDRnBHWMNcG0U1 047oF5jsR87P/jcFEXdcIkIX/l7F5sntk3xYFDS99g3rI7E4QyyUKrHVnriJFP3z X2K0SkUB2aWgfeevb/WJXftDx087tDHgnJvtcK5qHMV4KychVIBj3EUhnehBEduT zuwG0Lkddai95njV8GRItIJDsOSKKmk= -----END CERTIFICATE-----Generated at Sat Sep 26 13:59:49 2026 by rpki-client