$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89466962-e45e-30ba-8db9-cf19d3e3ab35.roa File: 89466962-e45e-30ba-8db9-cf19d3e3ab35.roa (raw, json) Hash identifier: Mn4veo9o90zfkRv+0GsD23HoxHTae9GSLbEZO94aGck= Subject key identifier: 0C:30:EE:AA:A5:58:63:5E:BE:C2:DE:52:18:A2:A4:79:C8:46:FB:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D88ADC03DED1EAD1E6600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89466962-e45e-30ba-8db9-cf19d3e3ab35.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:88:ad:c0:3d:ed:1e:ad:1e:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6d1e4d38-0b8c-4e10-a06c-e57bcec4c5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9c:c5:83:60:e4:2a:56:17:1f:97:cd:14:76: 83:b6:19:c5:85:3b:49:f6:db:24:48:21:56:f3:73: 5f:13:07:03:65:65:cc:b3:3f:ec:d0:cc:99:b6:0a: d2:ba:0b:8a:6c:63:f7:31:2d:a7:d3:16:d4:df:08: bb:d3:a5:30:53:e6:db:0e:99:a9:f3:6a:ba:21:ec: a8:2c:a7:a8:a0:70:fc:6b:09:d9:27:93:58:d9:bf: c1:95:4c:99:4a:1c:53:98:dd:99:3e:37:b5:af:cf: 28:ea:4a:b9:68:65:b1:d0:82:69:c7:ab:3f:dd:4a: ef:74:b1:5a:28:a7:ba:85:85:09:e5:a7:0f:1b:d1: 24:c2:37:07:5f:44:98:54:c8:4c:df:86:7b:5e:74: 08:12:a9:f8:e9:5c:af:c2:b6:df:49:4c:09:ff:23: b2:c3:8d:35:61:2b:e7:a2:60:0b:9a:05:2a:2d:8c: 66:98:1b:e5:d2:f4:bd:4f:83:1b:f1:e6:9c:30:8e: a7:89:8a:e1:b8:c0:2d:b6:ca:f9:17:bb:a7:6b:a2: 2d:4e:16:20:a4:40:7a:6a:6b:3e:cb:cb:e4:fc:32: bd:0e:38:ee:c9:e3:e9:df:82:60:92:fd:e0:54:ba: f9:cc:15:88:47:fb:9e:31:d8:3e:b9:9a:cd:a6:da: f7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:30:EE:AA:A5:58:63:5E:BE:C2:DE:52:18:A2:A4:79:C8:46:FB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89466962-e45e-30ba-8db9-cf19d3e3ab35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7b:07:73:e2:16:44:d4:55:00:00:9b:27:dc:0f:db:ae:37: a0:dc:83:20:91:b8:19:af:33:1e:0f:93:d3:5a:0e:20:a8:22: 38:98:7c:9c:7d:5c:21:71:0d:11:b6:a3:15:d0:22:3e:02:1c: 1c:66:24:04:f9:7f:78:17:fb:02:88:b1:9b:b0:3c:94:0e:e0: 2e:e3:ad:6c:41:5c:d3:f6:41:91:1a:a9:00:3f:3b:a0:c9:83: c5:7e:77:d3:9a:d5:9d:34:cd:5b:2e:5d:79:c2:e3:90:79:63: ea:d5:93:2c:b6:31:1e:65:8e:db:a3:6a:b6:2a:18:83:93:58: 4b:4e:a6:c7:c7:32:92:4e:10:09:09:fd:fb:1f:ed:60:16:fc: 80:65:e8:bb:b8:78:81:e7:35:29:d9:90:b2:48:5c:58:24:3c: a9:6c:8a:56:3f:27:2f:4c:73:b6:d1:e8:ac:e8:e6:6c:92:5c: ea:c5:1f:56:fd:b6:b5:a7:1a:04:cf:56:0a:54:6e:e0:d6:70: 80:b4:8b:aa:70:48:e1:b3:d3:77:3c:96:62:6b:65:7b:40:65: 02:dd:9d:96:11:b2:bb:99:32:df:3e:b7:09:8e:60:c3:cd:4a: 64:33:bf:23:b9:24:cc:78:88:08:d4:ef:ca:20:62:ba:58:67: 9e:07:4a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYitwD3tHq0eZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NmQxZTRkMzgtMGI4Yy00ZTEwLWEwNmMtZTU3YmNlYzRjNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJzFg2DkKlYXH5fNFHaDthnFhTtJ9tskSCFW 83NfEwcDZWXMsz/s0MyZtgrSuguKbGP3MS2n0xbU3wi706UwU+bbDpmp82q6Ieyo LKeooHD8awnZJ5NY2b/BlUyZShxTmN2ZPje1r88o6kq5aGWx0IJpx6s/3UrvdLFa KKe6hYUJ5acPG9EkwjcHX0SYVMhM34Z7XnQIEqn46VyvwrbfSUwJ/yOyw401YSvn omALmgUqLYxmmBvl0vS9T4Mb8eacMI6niYrhuMAttsr5F7una6ItThYgpEB6ams+ y8vk/DK9DjjuyePp34Jgkv3gVLr5zBWIR/ueMdg+uZrNptr3rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAww7qqlWGNevsLeUhiipHnIRvsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODk0NjY5NjItZTQ1ZS0z MGJhLThkYjktY2YxOWQzZTNhYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ7B3PiFkTUVQAAmyfcD9uuN6DcgyCRuBmvMx4Pk9NaDiCoIjiYfJx9 XCFxDRG2oxXQIj4CHBxmJAT5f3gX+wKIsZuwPJQO4C7jrWxBXNP2QZEaqQA/O6DJ g8V+d9Oa1Z00zVsuXXnC45B5Y+rVkyy2MR5ljtujarYqGIOTWEtOpsfHMpJOEAkJ /fsf7WAW/IBl6Lu4eIHnNSnZkLJIXFgkPKlsilY/Jy9Mc7bR6Kzo5mySXOrFH1b9 trWnGgTPVgpUbuDWcIC0i6pwSOGz03c8lmJrZXtAZQLdnZYRsruZMt8+twmOYMPN SmQzvyO5JMx4iAjU78ogYrpYZ54HSjM= -----END CERTIFICATE-----Generated at Tue Nov 10 21:30:03 2026 by rpki-client