$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47f00eea-8294-3e3d-9faa-2c41705d6f53.roa File: 47f00eea-8294-3e3d-9faa-2c41705d6f53.roa (raw, json) Hash identifier: RmdUSVTlkxdp9DnItDHn9fsqpafbEZwZ1sva449wfmI= Subject key identifier: E1:AA:33:52:32:7E:B6:B5:7F:10:58:B2:5F:36:56:0B:7E:56:FF:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DC78EDDE52798A8D03E10 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47f00eea-8294-3e3d-9faa-2c41705d6f53.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c7:8e:dd:e5:27:98:a8:d0:3e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ad63ddfd-93b7-42f5-b37d-77ec7783e284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4c:ec:74:f3:81:51:c8:b3:37:b6:7a:7e:d9: ff:c5:db:a3:df:da:c1:83:ee:17:a6:30:d7:85:ce: 93:78:91:22:14:f5:88:63:d4:2b:38:99:2c:47:e4: 7a:dc:8d:9b:57:bd:b3:90:ea:bd:a7:de:fe:44:cb: 3a:a9:05:8e:46:10:3b:f0:c9:f9:ad:0e:2f:3d:db: f9:98:52:0d:26:e2:76:e7:6e:29:24:c4:05:85:f6: a3:4a:04:7d:59:40:a4:81:4a:89:8f:3f:bb:f2:02: f5:d1:6d:f3:7d:e7:6c:4d:eb:a4:08:d0:17:81:cd: a7:da:91:e9:34:e9:b9:88:4a:20:67:e1:63:5f:3b: 50:04:2f:4b:a7:bb:b3:8a:54:ff:f1:81:62:e1:e9: be:e6:73:9c:07:89:5a:ae:65:7d:a3:ee:bd:34:38: 01:f0:ae:6d:d0:ad:3c:a8:4a:8a:18:b2:1d:b9:ad: 4d:3d:c7:91:1d:5b:5d:bc:8e:7a:4b:47:76:73:18: 95:72:c0:34:d1:df:63:3c:51:37:9c:23:44:d6:97: 4b:05:af:c5:17:e1:35:77:f7:b8:ff:56:02:08:60: 64:63:be:65:3a:f3:2e:c8:8f:af:88:fe:a8:8a:ed: 3e:6d:d0:64:90:c0:2b:e1:65:5b:fe:72:54:e2:69: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AA:33:52:32:7E:B6:B5:7F:10:58:B2:5F:36:56:0B:7E:56:FF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47f00eea-8294-3e3d-9faa-2c41705d6f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a5:e6:b6:a0:fc:0b:3e:3b:d2:5a:62:f7:8d:4b:32:7d:46: 53:75:7e:b8:01:4e:4d:02:ac:6f:8a:93:7f:86:1f:f3:97:4c: 5f:cc:71:67:11:fa:61:27:c3:33:b3:71:f4:8f:ef:3e:f2:0d: dc:8a:92:12:93:ed:00:72:43:d4:ce:4f:66:ff:87:13:ef:78: 6a:a4:79:5d:02:1b:d6:f6:a7:9d:cd:b4:7a:43:22:e0:a0:43: c1:dd:a7:60:4e:67:c9:d8:fc:63:a2:03:4e:4b:82:55:41:45: 02:31:bb:90:5e:a2:3c:4f:0a:bd:10:c2:2b:dc:b2:e6:ce:fb: 9f:e1:29:52:63:be:d9:de:63:13:3f:e7:9b:1a:04:56:4d:8d: 6b:03:5e:2b:74:3a:5d:1c:9b:31:a4:31:7a:f4:c9:0c:d8:de: b3:0d:06:7f:5e:53:7b:91:76:29:3d:53:f5:49:a1:de:5d:f3: 56:5e:30:e4:97:a5:84:bf:ec:93:63:9a:43:14:5e:89:d6:cc: 1f:da:92:54:fb:44:22:fa:d0:8e:80:a3:6c:87:3a:67:73:7d: b3:98:36:b2:e9:43:a0:b9:e4:6c:35:ed:b2:7f:cc:6f:f3:0f: d6:1a:22:00:0e:85:66:17:6a:89:80:44:e7:af:c8:b9:4c:3c: a7:b2:81:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPceO3eUnmKjQPhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWQ2M2RkZmQtOTNiNy00MmY1LWIzN2QtNzdlYzc3ODNlMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UzsdPOBUcizN7Z6ftn/xduj39rBg+4XpjDX hc6TeJEiFPWIY9QrOJksR+R63I2bV72zkOq9p97+RMs6qQWORhA78Mn5rQ4vPdv5 mFINJuJ2524pJMQFhfajSgR9WUCkgUqJjz+78gL10W3zfedsTeukCNAXgc2n2pHp NOm5iEogZ+FjXztQBC9Lp7uzilT/8YFi4em+5nOcB4larmV9o+69NDgB8K5t0K08 qEqKGLIdua1NPceRHVtdvI56S0d2cxiVcsA00d9jPFE3nCNE1pdLBa/FF+E1d/e4 /1YCCGBkY75lOvMuyI+viP6oiu0+bdBkkMAr4WVb/nJU4mleoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGqM1Iyfra1fxBYsl82Vgt+Vv8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDdmMDBlZWEtODI5NC0z ZTNkLTlmYWEtMmM0MTcwNWQ2ZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEul5rag/As+O9JaYveNSzJ9RlN1frgBTk0CrG+Kk3+GH/OXTF/McWcR +mEnwzOzcfSP7z7yDdyKkhKT7QByQ9TOT2b/hxPveGqkeV0CG9b2p53NtHpDIuCg Q8Hdp2BOZ8nY/GOiA05LglVBRQIxu5BeojxPCr0QwivcsubO+5/hKVJjvtneYxM/ 55saBFZNjWsDXit0Ol0cmzGkMXr0yQzY3rMNBn9eU3uRdik9U/VJod5d81ZeMOSX pYS/7JNjmkMUXonWzB/aklT7RCL60I6Ao2yHOmdzfbOYNrLpQ6C55Gw17bJ/zG/z D9YaIgAOhWYXaomAROevyLlMPKeygS4= -----END CERTIFICATE-----Generated at Sat Sep 26 03:22:06 2026 by rpki-client