$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa File: 6801e350-c9f9-3400-a69b-b70a48ee4a10.roa (raw, json) Hash identifier: SSJafxTo0BBzfNTyJnwU/d1tlB0eLgivMcp2l8q/8XM= Subject key identifier: 56:64:97:85:F4:0F:3D:80:F8:5E:C0:06:29:42:5F:18:A6:42:04:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D93A439A95E06C3CC2580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:93:a4:39:a9:5e:06:c3:cc:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=cb65862c-cc7a-44b0-94ce-8df0e761751a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:83:ce:d8:2e:49:08:38:01:e6:ab:77:c4: 87:d3:68:cb:3f:bb:9b:08:ad:b6:c2:51:60:5e:32: 33:92:10:0c:b4:ea:1a:18:10:9f:0b:38:8a:a9:38: 55:64:26:d9:84:4c:46:6b:29:fb:19:12:e7:d2:f9: ca:ba:c2:cd:a0:8b:ac:79:2f:12:97:9d:fc:9b:6d: da:9c:1f:74:33:99:8b:39:3d:81:7f:f7:a7:0c:aa: 4e:bb:bd:cf:8d:2f:a1:ec:c0:cf:ce:71:9b:5c:d0: de:b1:92:44:13:4d:59:0d:2a:66:9e:7a:52:05:c1: 60:8c:22:a1:5e:85:d5:6a:2a:a8:46:b9:61:95:a4: 3c:bf:09:3d:29:2b:a5:19:0b:a7:3b:8d:42:cc:ca: 20:8d:4c:e2:aa:c1:2a:13:6d:28:94:d7:63:88:1d: cb:6f:63:5d:0b:11:ce:50:e4:60:62:54:30:42:d3: a8:46:82:03:37:13:db:c8:08:bf:c9:96:82:20:cb: 03:d2:1d:43:4e:45:7f:cf:ce:9b:59:a8:a8:03:a6: 39:d7:c7:06:56:8e:4c:37:7a:72:19:de:2c:ea:60: d6:01:59:a3:e3:e3:1b:e0:7a:3a:ba:2e:e4:11:13: 69:f1:25:4f:20:c4:5b:7f:ba:7d:a5:80:c8:47:9b: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:64:97:85:F4:0F:3D:80:F8:5E:C0:06:29:42:5F:18:A6:42:04:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b9:25:43:30:a3:c7:5c:b4:90:65:63:c7:11:56:c9:57:0a: d4:f0:f2:d1:7b:69:37:3b:bf:8c:62:05:29:fa:1c:ba:70:19: a6:3b:90:a2:f7:44:ae:b9:b2:07:73:d1:84:00:5d:e9:e6:fa: c5:77:9a:88:9a:e9:c0:35:21:02:f0:cd:1f:a6:1b:33:68:2f: a4:ca:bc:2a:f1:12:2b:41:a7:92:14:44:1d:63:c8:18:ff:b1: 4b:57:24:e8:4e:36:e9:d8:d6:ad:69:12:0b:76:74:7f:29:46: 40:65:ba:ab:b5:d6:ef:1a:2c:77:a8:f3:21:e5:55:3f:5c:8a: 92:de:fc:02:35:1e:fe:55:97:35:85:f0:73:1c:e5:4f:59:68: aa:a0:c9:41:e9:5a:ee:70:51:eb:fe:13:06:c4:8a:86:20:c4: 35:1b:c1:35:e6:d5:4f:41:32:b6:6c:de:df:42:80:7b:95:2e: 25:b4:5a:30:d7:e9:42:83:23:d4:51:85:d4:95:d8:25:35:e6: 0b:b5:7c:b9:f5:56:a6:cb:1a:a1:1d:a0:80:70:3c:19:a6:2c: 76:90:4c:65:38:c9:91:88:03:6e:17:c7:9a:bc:7c:2e:ff:49: 05:4b:24:7e:99:37:18:2a:13:46:b4:95:fa:83:fd:08:88:77: 81:9c:60:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZOkOaleBsPMJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2I2NTg2MmMtY2M3YS00NGIwLTk0Y2UtOGRmMGU3NjE3NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRWDztguSQg4Aeard8SH02jLP7ubCK22wlFg XjIzkhAMtOoaGBCfCziKqThVZCbZhExGayn7GRLn0vnKusLNoIuseS8Sl538m23a nB90M5mLOT2Bf/enDKpOu73PjS+h7MDPznGbXNDesZJEE01ZDSpmnnpSBcFgjCKh XoXVaiqoRrlhlaQ8vwk9KSulGQunO41CzMogjUziqsEqE20olNdjiB3Lb2NdCxHO UORgYlQwQtOoRoIDNxPbyAi/yZaCIMsD0h1DTkV/z86bWaioA6Y518cGVo5MN3py Gd4s6mDWAVmj4+Mb4Ho6ui7kERNp8SVPIMRbf7p9pYDIR5tStQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZkl4X0Dz2A+F7ABilCXximQgT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjgwMWUzNTAtYzlmOS0z NDAwLWE2OWItYjcwYTQ4ZWU0YTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm5JUMwo8dctJBlY8cRVslXCtTw8tF7aTc7v4xiBSn6HLpwGaY7kKL3 RK65sgdz0YQAXenm+sV3moia6cA1IQLwzR+mGzNoL6TKvCrxEitBp5IURB1jyBj/ sUtXJOhONunY1q1pEgt2dH8pRkBluqu11u8aLHeo8yHlVT9cipLe/AI1Hv5VlzWF 8HMc5U9ZaKqgyUHpWu5wUev+EwbEioYgxDUbwTXm1U9BMrZs3t9CgHuVLiW0WjDX 6UKDI9RRhdSV2CU15gu1fLn1VqbLGqEdoIBwPBmmLHaQTGU4yZGIA24Xx5q8fC7/ SQVLJH6ZNxgqE0a0lfqD/QiId4GcYBw= -----END CERTIFICATE-----Generated at Sat Sep 26 07:05:10 2026 by rpki-client