$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa File: 5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa (raw, json) Hash identifier: S7+kAvidb6/qMkOLCI4mcui7946BA6hV5eQVzmLLCO0= Subject key identifier: A0:F1:06:E2:F5:CC:53:5D:3C:F8:23:73:13:54:D9:B8:09:CA:C6:81 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D997809D3E60FE5B37650 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:99:78:09:d3:e6:0f:e5:b3:76:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=da5e6685-ee7c-4bc6-abe7-af127bf2776c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:90:47:0b:2c:54:71:13:20:b3:4f:23:ee:af: 26:14:03:29:48:ab:f6:c0:88:4b:22:27:71:e9:ae: b6:ce:53:41:c3:8c:ea:7f:9a:c9:67:96:8f:7e:70: 2d:b6:60:9f:0d:61:1e:44:0e:5c:33:58:e5:93:11: 5d:1f:74:92:3f:f8:c6:03:8f:c1:30:10:fe:fa:67: 3b:fb:1b:69:a6:e4:b1:98:91:13:d0:d4:a4:f2:47: 78:e9:0d:45:6c:76:17:6a:4c:12:ff:de:1f:63:80: 66:10:9d:28:e9:6e:5c:06:e9:a4:5a:c5:93:7e:22: e9:80:a1:42:3d:b9:8d:3c:d5:91:79:5b:2d:8b:cc: bd:b1:dd:b8:3d:c6:b3:95:75:bb:74:40:68:e0:a1: ab:7e:1e:82:4f:cc:01:d2:3c:c5:03:32:ad:2c:0b: ef:f8:f8:4a:27:a1:ce:65:e7:7d:bc:b3:3d:2d:7e: 96:51:5a:03:c1:71:c5:fe:1b:58:62:66:97:25:2b: e0:e5:ad:00:df:e9:f8:19:2f:90:f4:60:de:54:6d: 30:df:10:b2:cc:8e:60:72:45:e7:db:2d:5b:3c:16: 0c:d3:9a:37:55:27:ea:92:ab:cd:fd:bb:88:a3:2c: 23:1c:81:26:0f:7c:e3:3f:5e:58:7f:0e:f6:f1:e0: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F1:06:E2:F5:CC:53:5D:3C:F8:23:73:13:54:D9:B8:09:CA:C6:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5933884e-e1dd-3ab5-9f2f-61e3d2021f03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:42:b9:2d:79:7f:71:71:8f:21:8a:51:ee:d1:67:f4:c5:da: 66:c4:e7:da:05:91:97:f9:52:af:af:61:88:f1:74:38:26:16: 23:41:09:73:e5:4f:a6:a9:ad:e5:8e:4c:59:f5:50:45:72:ec: 29:fb:af:95:ff:89:6b:74:9e:83:16:c9:19:19:cc:d3:b5:fe: ee:67:da:a9:a7:7b:2e:7b:66:05:1b:cf:2f:bb:cd:dd:33:ad: 1d:92:93:d3:56:e2:29:33:47:16:e4:12:fe:cf:54:c1:ca:52: c3:05:01:a6:62:da:18:40:9c:4a:2a:69:64:24:39:da:34:07: 82:36:12:9b:38:0a:df:0b:39:07:48:3a:15:29:0c:46:fd:f2: 81:c9:d5:58:36:d9:46:d4:c6:87:a9:c6:de:ef:09:25:9d:22: e4:b9:27:80:29:61:a5:ad:21:95:68:4e:9d:f6:07:75:f1:e3: bd:ab:d3:c5:7d:52:3e:3a:50:69:2d:ab:51:19:88:1b:82:1e: a2:ac:4c:4a:63:d7:92:36:ba:ef:1d:43:b7:f9:40:1b:40:e0: 2b:0c:3e:76:65:43:50:09:c7:b1:f0:ab:17:ea:94:80:e5:f1: dc:d0:6f:3e:38:a6:f3:5a:b7:7a:3b:b1:ac:3c:cf:2c:ec:4e: 8e:b1:b0:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZl4CdPmD+WzdlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGE1ZTY2ODUtZWU3Yy00YmM2LWFiZTctYWYxMjdiZjI3NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpBHCyxUcRMgs08j7q8mFAMpSKv2wIhLIidx 6a62zlNBw4zqf5rJZ5aPfnAttmCfDWEeRA5cM1jlkxFdH3SSP/jGA4/BMBD++mc7 +xtppuSxmJET0NSk8kd46Q1FbHYXakwS/94fY4BmEJ0o6W5cBumkWsWTfiLpgKFC PbmNPNWReVsti8y9sd24PcazlXW7dEBo4KGrfh6CT8wB0jzFAzKtLAvv+PhKJ6HO Zed9vLM9LX6WUVoDwXHF/htYYmaXJSvg5a0A3+n4GS+Q9GDeVG0w3xCyzI5gckXn 2y1bPBYM05o3VSfqkqvN/buIoywjHIEmD3zjP15Yfw728eBiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDxBuL1zFNdPPgjcxNU2bgJysaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTkzMzg4NGUtZTFkZC0z YWI1LTlmMmYtNjFlM2QyMDIxZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNCuS15f3FxjyGKUe7RZ/TF2mbE59oFkZf5Uq+vYYjxdDgmFiNBCXPl T6apreWOTFn1UEVy7Cn7r5X/iWt0noMWyRkZzNO1/u5n2qmney57ZgUbzy+7zd0z rR2Sk9NW4ikzRxbkEv7PVMHKUsMFAaZi2hhAnEoqaWQkOdo0B4I2Eps4Ct8LOQdI OhUpDEb98oHJ1Vg22UbUxoepxt7vCSWdIuS5J4ApYaWtIZVoTp32B3Xx472r08V9 Uj46UGktq1EZiBuCHqKsTEpj15I2uu8dQ7f5QBtA4CsMPnZlQ1AJx7HwqxfqlIDl 8dzQbz44pvNat3o7saw8zyzsTo6xsKg= -----END CERTIFICATE-----Generated at Sat Sep 26 07:04:04 2026 by rpki-client