$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa File: b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa (raw, json) Hash identifier: BcRD5IJYGfM1ygA8kIKaYe2CrurxA9Sm0Y3KbNRU/xY= Subject key identifier: 3E:38:F7:06:24:36:AA:D0:C0:30:7B:B2:09:20:5B:76:74:83:45:04 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DD17396758488EE41D640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d1:73:96:75:84:88:ee:41:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e62ba5a7-7492-4181-9d10-829db0ae248e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:9a:4e:34:59:29:ba:c6:70:51:80:e6:c4: fe:18:e9:41:f9:1a:9d:0b:f0:13:a6:48:74:e9:c0: ff:01:93:4f:ce:d3:97:8f:15:1c:4c:0e:62:81:b6: a3:e7:04:88:47:c8:c8:14:72:8b:68:c9:66:89:c1: df:b5:bf:e5:85:1a:89:91:8e:42:58:5a:66:90:85: 6e:06:fb:3c:85:cb:f1:8a:8f:c6:bc:58:f3:11:59: 99:5a:87:fd:a3:99:e5:1b:ab:59:89:39:33:9f:aa: 33:aa:87:2a:53:b8:a6:b9:1d:69:94:7f:a2:ed:fd: 39:79:86:e3:76:4a:7b:ab:29:81:fa:36:44:c2:4a: 5c:99:1f:68:a0:a9:a4:c3:aa:82:6c:c4:d4:6e:70: 40:1d:31:0e:1c:5a:d4:0a:f5:e8:70:1f:2b:ad:31: 12:de:96:fa:f4:97:c0:84:e6:fa:b0:d4:2c:59:80: 21:07:6e:f5:e3:31:17:e8:e4:49:a2:8f:4d:95:ac: d1:fe:0c:35:c8:a4:eb:c8:ec:13:98:9a:b1:a0:7b: 12:10:77:10:63:fe:6a:a8:49:e6:91:1e:e9:09:7d: ea:95:77:e3:cd:0b:95:fd:75:fc:2a:5e:c6:13:26: 59:0c:4f:de:9a:f2:62:a8:df:35:38:40:9f:dc:16: 44:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:38:F7:06:24:36:AA:D0:C0:30:7B:B2:09:20:5B:76:74:83:45:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6f:24:13:dc:3b:c4:9e:04:b1:31:c0:34:01:b0:30:eb:73: 94:17:e5:ea:d7:36:40:dc:9a:66:4e:53:0f:e1:4b:24:55:4c: 99:50:c6:2f:53:7f:00:d2:80:c1:29:24:6a:38:01:5b:42:7b: d1:2c:d4:46:59:c2:62:11:11:04:11:63:c0:0e:73:f4:09:ed: b8:0f:cc:ca:ad:c4:df:8a:5a:49:80:e7:9d:1b:e2:37:3b:0e: 8f:79:50:0d:db:2a:28:f0:d6:8d:5d:fd:12:8e:cc:42:e6:0c: 27:5c:2d:14:55:72:17:a4:fe:dc:03:31:1a:e8:d5:17:f7:b4: f1:d9:07:f1:ab:75:4c:c7:6c:53:a9:f5:e3:c5:c3:7a:fb:25: 22:6d:60:45:e1:89:3c:f8:26:e0:31:5f:7e:e8:8a:a2:00:5f: 7e:eb:e0:74:c5:fd:24:41:48:b2:30:93:b0:aa:35:7d:c4:51: 38:fc:b3:6a:c2:70:e8:b2:d0:f0:df:5f:6e:c6:3e:4b:ed:4e: 1e:a1:e2:53:e2:d3:0f:d4:c0:53:48:5f:f7:9f:f7:52:7d:7c: a0:04:f5:6a:10:a8:ee:ab:72:ac:44:07:4d:16:41:9f:18:e3: f4:4a:ae:3e:f6:e2:b4:82:5b:43:37:fc:d0:77:c6:4b:82:6f: 95:60:22:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdFzlnWEiO5B1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTYyYmE1YTctNzQ5Mi00MTgxLTlkMTAtODI5ZGIwYWUyNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEeaTjRZKbrGcFGA5sT+GOlB+RqdC/ATpkh0 6cD/AZNPztOXjxUcTA5igbaj5wSIR8jIFHKLaMlmicHftb/lhRqJkY5CWFpmkIVu Bvs8hcvxio/GvFjzEVmZWof9o5nlG6tZiTkzn6ozqocqU7imuR1plH+i7f05eYbj dkp7qymB+jZEwkpcmR9ooKmkw6qCbMTUbnBAHTEOHFrUCvXocB8rrTES3pb69JfA hOb6sNQsWYAhB2714zEX6ORJoo9NlazR/gw1yKTryOwTmJqxoHsSEHcQY/5qqEnm kR7pCX3qlXfjzQuV/XX8Kl7GEyZZDE/emvJiqN81OECf3BZEcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD449wYkNqrQwDB7sgkgW3Z0g0UEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjVjYzY2MTAtYmVhZi0z ZDUyLWE3OTQtM2RjNDU3ZWU2Y2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABvJBPcO8SeBLExwDQBsDDrc5QX5erXNkDcmmZOUw/hSyRVTJlQxi9T fwDSgMEpJGo4AVtCe9Es1EZZwmIREQQRY8AOc/QJ7bgPzMqtxN+KWkmA550b4jc7 Do95UA3bKijw1o1d/RKOzELmDCdcLRRVchek/twDMRro1Rf3tPHZB/GrdUzHbFOp 9ePFw3r7JSJtYEXhiTz4JuAxX37oiqIAX37r4HTF/SRBSLIwk7CqNX3EUTj8s2rC cOiy0PDfX27GPkvtTh6h4lPi0w/UwFNIX/ef91J9fKAE9WoQqO6rcqxEB00WQZ8Y 4/RKrj724rSCW0M3/NB3xkuCb5VgInI= -----END CERTIFICATE-----Generated at Wed Nov 11 01:49:11 2026 by rpki-client