$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8730f13-1e27-3fdc-a237-7044864113b2.roa File: c8730f13-1e27-3fdc-a237-7044864113b2.roa (raw, json) Hash identifier: GE9Yc/VgAPksD1V/A8pHVvSBkv/uK2H4c0GnILfBbTI= Subject key identifier: 7C:E6:78:CC:45:3E:3B:D8:97:05:B7:69:25:C9:C7:09:CF:3B:10:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D9B678E2FCD516974C380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8730f13-1e27-3fdc-a237-7044864113b2.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9b:67:8e:2f:cd:51:69:74:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5ef28f92-f003-4f78-aa9a-3307e90fb615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:71:7b:0f:c7:a4:50:1e:64:17:ba:e9:8f:cf: 83:88:5f:2c:82:ac:60:d4:7f:6a:16:d9:6e:ed:34: 0a:5c:2a:9d:d6:32:d6:ff:b0:6d:d6:47:ce:67:c2: 6b:3a:47:bb:df:ea:5e:4c:23:37:65:fc:cf:ef:d9: 44:80:35:6a:38:d9:07:db:76:7f:13:01:10:d5:c5: f4:f2:70:5d:cc:44:c6:5c:50:76:ce:4a:6a:6a:d2: 36:40:6a:c2:a0:e2:25:6e:3e:ac:8f:1b:b8:d1:b7: 17:a8:a4:2b:c5:2e:db:51:32:b0:68:31:b8:55:a5: 3f:17:8e:fd:f2:f1:03:d1:83:2c:b6:47:ba:47:df: ec:89:48:45:ee:3b:81:ac:3d:e4:22:f1:c7:17:ae: d3:60:8f:80:52:78:95:5d:fe:88:57:1d:aa:62:e3: 8f:e1:c2:96:38:77:5d:34:d1:5e:f1:79:d9:cb:f8: 42:7b:c3:7a:9f:34:9a:56:b9:1c:1e:44:49:cd:36: ec:a0:2c:ce:29:d1:76:18:4e:07:cb:ad:54:15:a6: 50:6a:81:af:31:05:d9:f5:0a:92:62:3e:20:10:f1: 8c:93:ee:bf:36:81:03:76:57:a2:45:71:bb:83:45: 9e:de:cf:e6:02:10:ec:6a:23:88:5d:6d:94:f5:8a: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E6:78:CC:45:3E:3B:D8:97:05:B7:69:25:C9:C7:09:CF:3B:10:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8730f13-1e27-3fdc-a237-7044864113b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ff:38:5c:29:8f:d1:1e:a1:8a:89:ec:eb:9c:11:a8:f4:73: aa:7e:21:de:41:34:76:9f:08:4c:62:1e:26:4d:80:32:0d:02: 45:13:b0:40:eb:6a:d0:80:ca:31:a9:b8:e3:9e:65:e0:6f:ca: 58:2a:66:13:a7:86:ac:75:df:3d:a5:38:cf:c6:56:76:37:fc: f3:7b:94:bf:1c:57:7c:8f:66:2b:b4:e8:22:a3:83:77:b4:36: ea:91:0a:ab:1d:be:74:3f:3a:ff:2c:70:3b:3b:db:ff:09:a1: 41:32:7d:98:7f:11:11:0b:6e:4a:8f:a6:f1:df:5e:89:c3:3d: 79:ba:81:ea:9a:b7:47:14:d9:23:c7:fc:be:29:72:48:8e:de: 73:68:99:42:18:3a:93:4b:82:4a:40:b2:5a:f2:d1:5e:54:16: 74:94:b1:d5:b0:7f:34:93:bf:7e:76:78:6d:46:3f:d3:bd:47: 03:83:1d:40:38:07:ea:36:92:c9:5a:4b:91:8d:ca:ed:81:4b: 37:bc:9e:3b:41:ad:c4:a5:df:70:c5:72:10:b8:b4:b0:13:cf: 14:93:58:84:57:7b:5e:6d:be:f9:0e:58:a7:90:f9:f9:c4:64: d6:52:70:98:6c:1e:0d:7b:e6:22:c9:b4:33:15:d0:4f:1f:1f: d4:1a:ee:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZtnji/NUWl0w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NWVmMjhmOTItZjAwMy00Zjc4LWFhOWEtMzMwN2U5MGZiNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3F7D8ekUB5kF7rpj8+DiF8sgqxg1H9qFtlu 7TQKXCqd1jLW/7Bt1kfOZ8JrOke73+peTCM3ZfzP79lEgDVqONkH23Z/EwEQ1cX0 8nBdzETGXFB2zkpqatI2QGrCoOIlbj6sjxu40bcXqKQrxS7bUTKwaDG4VaU/F479 8vED0YMstke6R9/siUhF7juBrD3kIvHHF67TYI+AUniVXf6IVx2qYuOP4cKWOHdd NNFe8XnZy/hCe8N6nzSaVrkcHkRJzTbsoCzOKdF2GE4Hy61UFaZQaoGvMQXZ9QqS Yj4gEPGMk+6/NoEDdleiRXG7g0We3s/mAhDsaiOIXW2U9Yrf5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzmeMxFPjvYlwW3aSXJxwnPOxDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzg3MzBmMTMtMWUyNy0z ZmRjLWEyMzctNzA0NDg2NDExM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf/OFwpj9EeoYqJ7OucEaj0c6p+Id5BNHafCExiHiZNgDINAkUTsEDr atCAyjGpuOOeZeBvylgqZhOnhqx13z2lOM/GVnY3/PN7lL8cV3yPZiu06CKjg3e0 NuqRCqsdvnQ/Ov8scDs72/8JoUEyfZh/ERELbkqPpvHfXonDPXm6geqat0cU2SPH /L4pckiO3nNomUIYOpNLgkpAslry0V5UFnSUsdWwfzSTv352eG1GP9O9RwODHUA4 B+o2kslaS5GNyu2BSze8njtBrcSl33DFchC4tLATzxSTWIRXe15tvvkOWKeQ+fnE ZNZScJhsHg175iLJtDMV0E8fH9Qa7uA= -----END CERTIFICATE-----Generated at Sat Sep 26 16:40:36 2026 by rpki-client