$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa File: c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa (raw, json) Hash identifier: D/Gm8CcZkCV5+LYr60QjNG478wGW5SYSo7WJG2ULTWE= Subject key identifier: 55:22:9D:75:E1:19:1B:70:BB:C6:2C:7D:3C:AE:B2:75:43:E6:B7:70 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D8BE52F4A9BEDBB4B5D40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8b:e5:2f:4a:9b:ed:bb:4b:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=3f3e905f-4f92-4ece-a848-825a62cea481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:2f:8b:96:0a:77:2d:e6:17:91:51:35:21: ad:57:e3:18:7d:88:a3:4a:d5:01:84:1f:30:99:1e: b5:ef:c0:81:48:e9:d3:71:77:62:60:5c:63:74:aa: e5:ac:c2:92:9f:f7:df:35:36:00:91:e6:ad:85:f0: 96:9b:40:2d:20:dd:6a:d4:a8:f8:68:c8:2c:a3:ad: 5c:ed:9c:92:8f:12:b9:89:37:cd:7c:fc:4f:82:7d: da:8b:86:d5:a9:7f:a1:b6:76:01:d3:91:8d:9e:48: 3e:07:f0:f5:92:62:27:4d:01:69:ca:e6:b7:20:ad: 3d:7a:04:82:9f:2e:b6:ab:38:06:80:e5:3a:8c:60: ed:d6:8b:c7:bf:ff:0b:1f:96:5d:df:69:a4:e6:a9: a0:de:69:bd:aa:a1:ff:5b:2a:7d:94:06:7a:c3:f9: 9d:a4:4c:e8:58:33:ef:cb:ab:8a:c4:b0:05:76:11: d6:77:06:10:1f:7e:44:f5:77:34:94:24:01:bf:3f: 9a:20:9b:a7:3c:1e:13:4b:f2:01:bb:ef:a3:d0:83: 3c:07:19:2d:3a:b4:63:e2:18:02:4d:c6:44:db:e3: 68:26:59:24:6b:a9:c7:4c:c6:61:61:8d:4e:52:00: 75:01:d5:60:bf:e4:05:39:da:e4:62:c3:39:26:15: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:22:9D:75:E1:19:1B:70:BB:C6:2C:7D:3C:AE:B2:75:43:E6:B7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2b:c5:3b:63:21:fb:a2:00:63:25:0f:c3:f2:14:1b:6f:42: 69:2a:24:04:1e:c4:dd:15:b4:5e:1a:0c:d8:02:a5:ef:b6:6e: f7:35:95:ed:bb:ab:ac:a5:50:6f:70:50:2b:7c:e5:35:5e:bd: 3e:6f:1e:bd:37:1b:a5:91:80:48:8b:a5:1d:8b:0f:c3:fd:4e: f6:11:bb:fc:da:ac:45:df:d8:ba:58:e9:fc:0d:2c:8e:95:7e: 98:46:cb:5c:4e:c8:9d:e0:16:54:5b:46:a9:cc:b4:42:4e:68: 13:28:ab:06:a3:99:e9:03:3c:6d:ef:b4:22:78:54:17:b8:c3: 6c:0b:77:16:90:97:9a:a0:6d:ef:0b:66:46:71:e8:f2:d5:c5: e5:90:b2:64:75:0b:92:bf:36:2e:c7:18:bb:d0:c8:6a:3c:2d: f6:f9:12:fc:bf:dc:09:78:3c:80:4b:0e:9f:fa:8f:ab:63:bd: 83:8a:f7:8e:77:c8:c4:78:99:90:b2:98:01:dc:3a:2c:1a:45: f2:ee:c5:4e:7e:b2:29:b8:1c:fa:b6:11:73:ee:9d:f1:23:67: 93:98:3c:6e:a9:3c:ff:99:c2:df:7f:a3:5d:e4:21:11:d5:93: 8c:11:e4:a2:4a:2f:49:a4:61:a2:d5:5c:0c:e1:84:ea:cf:c0: 1a:01:f8:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYvlL0qb7btLXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk M2YzZTkwNWYtNGY5Mi00ZWNlLWE4NDgtODI1YTYyY2VhNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBUvi5YKdy3mF5FRNSGtV+MYfYijStUBhB8w mR6178CBSOnTcXdiYFxjdKrlrMKSn/ffNTYAkeathfCWm0AtIN1q1Kj4aMgso61c 7ZySjxK5iTfNfPxPgn3ai4bVqX+htnYB05GNnkg+B/D1kmInTQFpyua3IK09egSC ny62qzgGgOU6jGDt1ovHv/8LH5Zd32mk5qmg3mm9qqH/Wyp9lAZ6w/mdpEzoWDPv y6uKxLAFdhHWdwYQH35E9Xc0lCQBvz+aIJunPB4TS/IBu++j0IM8BxktOrRj4hgC TcZE2+NoJlkka6nHTMZhYY1OUgB1AdVgv+QFOdrkYsM5JhX61QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUinXXhGRtwu8YsfTyusnVD5rdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzRlNWRjMjYtMjM0OC0z NGM1LThhMGQtOGVkNzFlMDJmNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8rxTtjIfuiAGMlD8PyFBtvQmkqJAQexN0VtF4aDNgCpe+2bvc1le27 q6ylUG9wUCt85TVevT5vHr03G6WRgEiLpR2LD8P9TvYRu/zarEXf2LpY6fwNLI6V fphGy1xOyJ3gFlRbRqnMtEJOaBMoqwajmekDPG3vtCJ4VBe4w2wLdxaQl5qgbe8L ZkZx6PLVxeWQsmR1C5K/Ni7HGLvQyGo8Lfb5Evy/3Al4PIBLDp/6j6tjvYOK9453 yMR4mZCymAHcOiwaRfLuxU5+sim4HPq2EXPunfEjZ5OYPG6pPP+Zwt9/o13kIRHV k4wR5KJKL0mkYaLVXAzhhOrPwBoB+Ns= -----END CERTIFICATE-----Generated at Tue Nov 10 22:48:56 2026 by rpki-client