$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d753fdbf-2148-3df3-8c09-bdb05eff65e8.roa File: d753fdbf-2148-3df3-8c09-bdb05eff65e8.roa (raw, json) Hash identifier: gqgVOOmggBLzYal4oFOpLwwLVvvXc9t5QyD9goIqnp8= Subject key identifier: 7A:1C:CB:4A:D9:FD:0E:0D:52:F7:77:BD:C6:61:E2:60:87:EF:AE:16 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D84BD756EAF48108D8780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d753fdbf-2148-3df3-8c09-bdb05eff65e8.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:84:bd:75:6e:af:48:10:8d:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=bd9ee255-7961-46c9-9d24-373a02ac4340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:47:30:43:d0:fa:dc:3f:61:a9:af:9a:69:45: b4:50:e0:6a:ee:b4:ee:e7:fe:47:22:c2:86:92:6c: aa:9c:db:25:22:dc:c1:18:4e:c5:ea:9f:1b:2a:06: fc:21:0e:13:ab:90:a4:82:ea:27:a2:01:01:93:3d: 34:35:2d:f2:eb:6a:46:f5:b9:2f:b2:d4:dd:e8:0c: af:10:91:90:66:a0:05:b2:59:27:15:2f:4e:f1:08: 7b:89:4e:57:35:e1:1a:af:7c:fe:41:22:84:24:5c: 2b:21:3b:b9:ea:39:3c:46:a3:2a:dd:48:c8:5d:e1: 45:f1:34:38:d9:88:5e:44:7e:5d:1d:22:c3:61:4e: 6f:1f:7b:b8:17:f2:9a:5a:e0:c9:8b:de:93:e2:32: 7b:d0:af:b4:f7:55:44:c7:31:a1:1d:65:52:ca:77: 61:6a:54:fa:f0:86:c7:37:a1:a7:b5:dd:b6:22:bc: 9a:9c:d5:19:68:46:6d:d7:6d:47:6c:5d:19:66:78: ce:5a:49:a3:f2:ce:6f:43:f3:62:f9:cf:da:8b:50: a3:a5:a6:7c:b8:83:da:d0:2d:d6:30:71:0d:09:45: d1:d4:01:3b:43:23:4a:59:a8:cd:71:3d:aa:80:ca: 17:c8:a9:27:ed:12:7e:55:25:df:bb:16:89:3d:8d: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1C:CB:4A:D9:FD:0E:0D:52:F7:77:BD:C6:61:E2:60:87:EF:AE:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d753fdbf-2148-3df3-8c09-bdb05eff65e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cb:c7:68:1b:29:7c:55:a1:db:6b:0e:39:ac:bc:69:83:c8: 35:ac:76:7d:25:97:fa:13:5d:94:45:b6:63:3d:03:9c:d9:13: 10:33:f0:c6:bc:0c:cd:08:a8:7c:a1:92:e3:d6:35:d6:5c:92: d4:2a:c1:2c:7a:3f:7b:99:18:05:12:f6:ed:e8:e0:00:21:ba: 8e:7c:a4:e5:8d:3e:87:be:a7:17:75:6d:36:46:dc:96:96:cf: fe:05:85:93:ad:b0:b8:1f:46:30:d2:b6:9c:3e:85:b9:1c:13: d7:db:c4:dd:a0:3b:b2:7b:5e:33:1f:c5:54:63:55:b3:12:e7: 72:8a:1b:7b:bc:33:7f:28:d4:f5:3d:1a:9e:df:2a:87:23:24: e1:45:9c:ba:8c:96:86:2f:19:93:73:10:04:21:61:7a:e3:0e: f7:1d:cf:e7:52:b9:ee:52:29:9f:28:df:d6:8c:fc:ea:04:1c: 3e:3b:57:e9:ae:23:77:cf:43:2f:49:4e:b9:fd:87:1a:f1:59: ce:59:a2:35:36:a9:ff:30:df:34:6e:bf:d5:e1:45:36:8a:3b: 19:d5:2e:cc:a2:99:23:60:d3:0f:76:0b:98:89:e7:23:73:c4: 01:bd:1f:74:c2:40:d4:26:58:43:cd:4e:0a:b2:94:c7:5a:26: c4:17:1d:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYS9dW6vSBCNh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YmQ5ZWUyNTUtNzk2MS00NmM5LTlkMjQtMzczYTAyYWM0MzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0cwQ9D63D9hqa+aaUW0UOBq7rTu5/5HIsKG kmyqnNslItzBGE7F6p8bKgb8IQ4Tq5CkguonogEBkz00NS3y62pG9bkvstTd6Ayv EJGQZqAFslknFS9O8Qh7iU5XNeEar3z+QSKEJFwrITu56jk8RqMq3UjIXeFF8TQ4 2YheRH5dHSLDYU5vH3u4F/KaWuDJi96T4jJ70K+091VExzGhHWVSyndhalT68IbH N6Gntd22IryanNUZaEZt121HbF0ZZnjOWkmj8s5vQ/Ni+c/ai1CjpaZ8uIPa0C3W MHENCUXR1AE7QyNKWajNcT2qgMoXyKkn7RJ+VSXfuxaJPY3/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHocy0rZ/Q4NUvd3vcZh4mCH764WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDc1M2ZkYmYtMjE0OC0z ZGYzLThjMDktYmRiMDVlZmY2NWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjLx2gbKXxVodtrDjmsvGmDyDWsdn0ll/oTXZRFtmM9A5zZExAz8Ma8 DM0IqHyhkuPWNdZcktQqwSx6P3uZGAUS9u3o4AAhuo58pOWNPoe+pxd1bTZG3JaW z/4FhZOtsLgfRjDStpw+hbkcE9fbxN2gO7J7XjMfxVRjVbMS53KKG3u8M38o1PU9 Gp7fKocjJOFFnLqMloYvGZNzEAQhYXrjDvcdz+dSue5SKZ8o39aM/OoEHD47V+mu I3fPQy9JTrn9hxrxWc5ZojU2qf8w3zRuv9XhRTaKOxnVLsyimSNg0w92C5iJ5yNz xAG9H3TCQNQmWEPNTgqylMdaJsQXHW4= -----END CERTIFICATE-----Generated at Tue Nov 10 22:51:15 2026 by rpki-client