$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa File: c50cd811-3be7-377f-aad6-f7366be2a40b.roa (raw, json) Hash identifier: cXW2p4O6GnWniq1UmH/7E37lrgfjHoPaFIq42a2tQkE= Subject key identifier: 51:CE:2A:FF:73:0D:23:AD:F6:57:02:8D:E0:D8:4D:B0:D5:61:78:93 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EAA5201132ABEF1CEF5FA5A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 70.32.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:52:01:13:2a:be:f1:ce:f5:fa:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=a00c0955-5856-40e0-82f8-f1a8dfca5d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:9b:0e:b4:63:86:d2:fd:fc:73:d6:f1:ce: dd:24:40:fd:ed:de:00:2c:70:56:96:6b:52:c4:86: 75:5a:48:5a:68:6b:40:48:96:b1:8e:4e:58:e1:c3: 98:a5:21:8d:42:a9:1f:bf:8d:98:5c:3e:ab:ba:99: 24:78:89:78:de:d4:65:91:79:e3:29:df:9f:33:62: f0:da:28:b3:5f:e6:f8:fd:51:ce:a2:8f:ae:90:14: de:3f:dd:08:6c:85:dd:82:25:4c:01:30:88:c2:ae: 09:68:a8:9e:3b:66:f3:e0:d9:ee:20:6c:7a:73:f1: 46:8e:59:e0:d1:c5:d2:c6:e3:1d:ac:6c:04:b3:bc: ee:5f:81:23:a7:40:ab:84:cb:d3:4d:d1:cc:e3:ee: 12:4c:32:cf:b5:2d:98:90:27:de:1f:9a:a8:50:98: 01:63:24:03:d9:64:67:47:b5:6b:84:48:92:b8:70: 21:fd:36:e5:2e:83:13:7c:d2:81:57:63:4f:ff:d0: 6e:08:cf:c7:05:83:d7:a1:19:3e:af:0f:56:18:27: 97:b8:a1:88:8c:c5:b5:70:3b:7b:f5:5a:ef:26:41: e4:d8:7a:01:02:5c:f2:18:6e:d7:f9:61:ea:b7:46: 94:3d:7b:48:a9:1c:4b:2e:48:a7:13:c7:7b:ac:b6: 45:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CE:2A:FF:73:0D:23:AD:F6:57:02:8D:E0:D8:4D:B0:D5:61:78:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:a1:d0:e3:02:43:51:08:4d:a8:c0:3b:c7:51:64:58:00:dd: 3a:d4:81:48:1f:79:29:b3:09:af:7b:36:7c:3d:40:9d:06:e5: 55:ae:4b:4a:42:40:6b:b4:52:8e:69:6f:16:bf:ee:1d:e1:54: 96:f3:38:f4:82:4d:c4:45:a2:c3:b9:45:7c:61:dd:e8:d6:e4: a4:e9:e8:df:f8:00:e9:6f:fa:c2:69:75:c7:8d:9f:d1:7f:3f: 64:cc:68:23:20:ad:f5:89:af:bc:08:ab:58:b8:9e:48:c4:83: 64:e2:41:f8:22:1b:eb:a6:91:74:93:f8:23:7c:e8:e1:0e:c8: 97:f1:f1:ae:8f:66:e6:fa:36:a6:72:db:2d:c5:d7:63:1d:5e: c8:f8:3b:b7:81:19:90:42:43:e8:87:11:c8:23:91:3d:4c:0f: 2e:a7:f0:8a:c4:ed:fb:90:89:0e:81:a7:9f:f8:59:a2:8d:b4: a9:d2:ff:ab:fd:d5:9c:b0:31:93:42:79:b1:e2:a0:6f:a6:9a: 1c:d9:4a:4a:cf:e0:79:6d:96:51:ae:c7:20:09:f4:4d:49:d4: 9e:e9:43:94:b6:59:62:b5:ed:c9:0b:bd:2a:fe:13:5c:37:f8: 49:f4:19:de:b6:42:13:02:d1:0b:5c:79:d5:ba:2e:8c:c2:34: cd:4a:78:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUgETKr7xzvX6WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk YTAwYzA5NTUtNTg1Ni00MGUwLTgyZjgtZjFhOGRmY2E1ZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVubDrRjhtL9/HPW8c7dJED97d4ALHBWlmtS xIZ1WkhaaGtASJaxjk5Y4cOYpSGNQqkfv42YXD6rupkkeIl43tRlkXnjKd+fM2Lw 2iizX+b4/VHOoo+ukBTeP90IbIXdgiVMATCIwq4JaKieO2bz4NnuIGx6c/FGjlng 0cXSxuMdrGwEs7zuX4Ejp0CrhMvTTdHM4+4STDLPtS2YkCfeH5qoUJgBYyQD2WRn R7VrhEiSuHAh/TblLoMTfNKBV2NP/9BuCM/HBYPXoRk+rw9WGCeXuKGIjMW1cDt7 9VrvJkHk2HoBAlzyGG7X+WHqt0aUPXtIqRxLLkinE8d7rLZFwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHOKv9zDSOt9lcCjeDYTbDVYXiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzUwY2Q4MTEtM2JlNy0z NzdmLWFhZDYtZjczNjZiZTJhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKah0OMCQ1EITajAO8dRZFgA3TrUgUgfeSmzCa97Nnw9QJ0G5VWuS0pC QGu0Uo5pbxa/7h3hVJbzOPSCTcRFosO5RXxh3ejW5KTp6N/4AOlv+sJpdceNn9F/ P2TMaCMgrfWJr7wIq1i4nkjEg2TiQfgiG+umkXST+CN86OEOyJfx8a6PZub6NqZy 2y3F12MdXsj4O7eBGZBCQ+iHEcgjkT1MDy6n8IrE7fuQiQ6Bp5/4WaKNtKnS/6v9 1ZywMZNCebHioG+mmhzZSkrP4HltllGuxyAJ9E1J1J7pQ5S2WWK17ckLvSr+E1w3 +En0Gd62QhMC0QtcedW6LozCNM1KeBE= -----END CERTIFICATE-----Generated at Fri Aug 7 21:47:29 2026 by rpki-client