$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89466962-e45e-30ba-8db9-cf19d3e3ab35.roa File: 89466962-e45e-30ba-8db9-cf19d3e3ab35.roa (raw, json) Hash identifier: 0a+qC9N5p6WUSlRTId5niZfLH2bZgK23cQfPqgiHmTg= Subject key identifier: 32:EB:20:67:83:96:52:79:BE:F4:C9:F1:6A:BD:BA:A5:36:20:0F:B3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EAA51B0C848B938EA16FCF690 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89466962-e45e-30ba-8db9-cf19d3e3ab35.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 70.32.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:b0:c8:48:b9:38:ea:16:fc:f6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=0f0a7f6f-a6c8-4018-9627-355e1fd1881d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fd:32:20:79:da:5f:13:5d:64:01:e9:0a:0a: f0:90:e8:04:0e:3d:fb:de:ef:b4:d3:53:ca:ee:fc: 4e:13:af:b9:8f:c9:60:d2:f6:25:c8:19:d3:82:0b: e1:fa:b9:56:2b:7b:01:e2:a0:71:82:fd:21:ef:ce: 78:73:cc:f8:3d:2d:08:1b:0b:71:3d:8d:c5:11:7a: ca:c6:be:ba:25:ee:d4:3a:94:6b:be:e0:36:84:1d: 4d:2c:d8:39:b3:c6:c8:02:e8:84:cb:fb:48:ef:0f: a7:9f:ef:4a:ec:84:c5:64:eb:33:32:35:83:85:c2: c2:b1:ab:2d:fa:ca:b1:6c:2f:03:ea:61:2d:20:d1: c1:cc:ac:2f:79:04:26:b4:a6:7e:db:10:b3:89:e2: 64:f7:7f:10:56:14:a6:c6:bd:5b:4e:38:9f:fb:ad: 81:3e:0f:a1:4d:1e:f0:40:54:7a:80:c1:09:95:bc: b5:62:b0:b1:cf:04:42:d2:fa:40:c8:cc:55:fc:f2: 4b:e0:35:f6:56:6a:23:3f:3d:5c:91:94:b9:30:43: a9:2f:f3:3f:16:4b:27:1a:b0:cb:d1:2e:1a:f7:d6: f2:c4:21:fc:5f:7c:7c:f1:83:1b:fc:63:2e:86:56: 35:18:f3:1e:ea:94:99:bf:bf:ed:65:9e:c9:61:96: 81:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EB:20:67:83:96:52:79:BE:F4:C9:F1:6A:BD:BA:A5:36:20:0F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89466962-e45e-30ba-8db9-cf19d3e3ab35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:93:b5:14:b3:15:49:13:52:c8:e2:7b:45:16:5f:e1:c5:4f: 25:85:29:6c:12:22:88:da:de:93:78:b3:a2:d2:2a:5b:cf:7b: 9c:7f:6b:d2:37:a9:90:f8:93:58:40:4d:a3:12:61:cd:96:aa: 91:6f:38:b5:cd:2c:88:b9:cb:c0:6e:ed:09:5a:92:46:34:3d: cc:0d:ae:cb:6c:0b:6c:d1:db:b0:f4:e9:d0:e9:13:86:84:7e: 25:41:8f:cd:dc:3a:2e:e5:73:00:97:9a:e2:ae:4f:a0:71:97: 0c:d1:cb:93:cf:81:ed:93:f7:0a:dd:16:52:11:7e:9e:9e:8d: 43:2c:f0:cd:ec:38:9e:d5:6c:74:a8:20:6b:ad:26:63:04:e0: 90:4a:9f:1a:d2:3c:5d:bb:32:76:d9:3a:bf:31:14:be:8a:cf: b8:11:21:4b:d7:9d:8d:6f:68:ae:b9:cf:63:dd:66:fa:64:95: 6e:29:64:39:0d:db:90:88:e5:bb:57:df:b4:09:a2:8a:2d:13: 86:5b:05:95:e7:4f:b3:38:86:0d:0f:ea:e1:92:d2:98:6e:82: 21:cf:38:33:f0:44:6c:3d:10:b0:db:a7:06:2c:b4:9c:33:a9: 6c:f7:db:f7:ed:ea:b8:93:ad:fd:28:cc:80:66:12:d3:1e:5d: f4:1f:19:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUbDISLk46hb89pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk MGYwYTdmNmYtYTZjOC00MDE4LTk2MjctMzU1ZTFmZDE4ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv0yIHnaXxNdZAHpCgrwkOgEDj373u+001PK 7vxOE6+5j8lg0vYlyBnTggvh+rlWK3sB4qBxgv0h7854c8z4PS0IGwtxPY3FEXrK xr66Je7UOpRrvuA2hB1NLNg5s8bIAuiEy/tI7w+nn+9K7ITFZOszMjWDhcLCsast +sqxbC8D6mEtINHBzKwveQQmtKZ+2xCzieJk938QVhSmxr1bTjif+62BPg+hTR7w QFR6gMEJlby1YrCxzwRC0vpAyMxV/PJL4DX2VmojPz1ckZS5MEOpL/M/FksnGrDL 0S4a99byxCH8X3x88YMb/GMuhlY1GPMe6pSZv7/tZZ7JYZaBiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLrIGeDllJ5vvTJ8Wq9uqU2IA+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODk0NjY5NjItZTQ1ZS0z MGJhLThkYjktY2YxOWQzZTNhYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWTtRSzFUkTUsjie0UWX+HFTyWFKWwSIoja3pN4s6LSKlvPe5x/a9I3 qZD4k1hATaMSYc2WqpFvOLXNLIi5y8Bu7QlakkY0PcwNrstsC2zR27D06dDpE4aE fiVBj83cOi7lcwCXmuKuT6BxlwzRy5PPge2T9wrdFlIRfp6ejUMs8M3sOJ7VbHSo IGutJmME4JBKnxrSPF27MnbZOr8xFL6Kz7gRIUvXnY1vaK65z2PdZvpklW4pZDkN 25CI5btX37QJoootE4ZbBZXnT7M4hg0P6uGS0phugiHPODPwRGw9ELDbpwYstJwz qWz32/ft6riTrf0ozIBmEtMeXfQfGbI= -----END CERTIFICATE-----Generated at Fri Aug 7 21:42:53 2026 by rpki-client