$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa File: fd51bf42-6a03-3383-9b75-4b273b788025.roa (raw, json) Hash identifier: 9/f8kBEaGXszlnFmzah5BAyCuJ8t+y5qNJjnLhMnBdw= Subject key identifier: 11:B4:00:8F:37:52:D4:D4:BE:1A:96:F5:03:8A:20:34:B5:27:1C:5C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D89BDDC01EC3DA1C02980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 2386 IP address blocks: 70.32.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:89:bd:dc:01:ec:3d:a1:c0:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f1a4dc7b-1e68-4f63-89a8-53156d55799c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9a:1a:cd:c6:3b:1d:0a:c1:d9:4c:d1:d1:08: 2b:ff:44:7f:76:d4:e8:ed:c4:ad:6e:f1:0f:f0:d3: 45:27:f7:7d:63:b5:f1:3c:5e:3f:af:01:8a:ae:d8: e6:74:35:7d:fe:44:cf:b0:d7:00:98:19:6a:fa:e2: 38:5a:dc:bc:8e:22:29:8c:d0:36:b1:3b:f9:9e:88: f9:84:1d:4f:24:18:58:36:f3:f7:67:38:9e:6e:8d: 58:75:ad:8f:57:bd:a7:b2:67:8a:73:40:f5:4b:60: c6:12:da:aa:95:78:d5:1d:20:94:43:1d:81:d0:b6: 4b:dd:04:8f:af:be:1b:88:02:11:ae:d4:1e:73:39: cc:c7:d0:94:47:10:04:30:8c:97:f2:9e:0c:98:b8: 92:75:30:5f:d2:8a:85:d3:21:b4:26:be:16:fe:b4: da:d4:7e:c3:9b:46:84:88:0b:09:e2:72:1d:f2:02: 97:dc:32:5b:55:86:ea:cc:5c:19:ba:de:ce:05:06: 94:49:5e:f1:ff:35:d1:e1:ad:d0:55:a9:d1:8a:cd: fa:cd:ea:47:31:7c:1d:91:e8:d2:02:17:e3:b7:3f: d7:da:30:f4:07:e9:3f:dc:c4:76:04:07:e5:70:2d: 68:1c:10:a9:03:12:12:2b:e6:7a:eb:2e:2b:29:18: 29:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B4:00:8F:37:52:D4:D4:BE:1A:96:F5:03:8A:20:34:B5:27:1C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd51bf42-6a03-3383-9b75-4b273b788025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:0e:f5:c1:17:91:19:0a:49:be:84:0f:f0:62:14:f2:16:ea: b7:4d:4e:ba:54:09:71:20:35:7f:f7:6a:f9:7c:d4:bd:b6:d1: e7:b8:4b:70:35:e7:c0:ab:e5:fd:d7:99:aa:68:5b:1d:fb:d5: fb:24:84:25:74:d3:42:bd:1f:c4:2e:94:99:f8:10:2b:fd:96: 5f:89:37:13:5b:c2:a0:89:8e:22:18:2f:2e:c6:da:ea:aa:51: 7e:99:ec:34:6b:57:c9:35:fd:74:3c:1b:e5:e7:8d:c5:3e:ac: 5c:fb:96:86:2f:eb:b7:9a:a4:8f:f6:d1:22:7e:86:d0:cd:20: c7:c9:07:3c:fd:f9:bc:99:8f:a3:32:42:43:71:ad:a9:2d:6e: a5:31:b0:bf:49:42:44:d3:68:42:05:99:14:13:b8:25:b4:44: 01:da:77:91:2a:f5:ec:e9:d8:38:9e:e3:58:f3:4c:89:76:5c: e0:5b:67:38:4f:cc:04:bd:be:7f:d3:de:ea:e6:15:98:a3:e8: a9:4a:5e:ec:d4:2f:2c:a6:6e:f1:f3:82:86:0e:b7:76:f2:13: a6:78:fe:5f:e1:3d:25:3c:1e:cf:49:ec:71:95:e0:ae:31:47: 19:e2:28:81:ab:4b:2c:c5:c6:f7:8a:5f:b9:e3:c5:41:43:b1: 1b:d9:3f:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYm93AHsPaHAKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjFhNGRjN2ItMWU2OC00ZjYzLTg5YTgtNTMxNTZkNTU3OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZoazcY7HQrB2UzR0Qgr/0R/dtTo7cStbvEP 8NNFJ/d9Y7XxPF4/rwGKrtjmdDV9/kTPsNcAmBlq+uI4Wty8jiIpjNA2sTv5noj5 hB1PJBhYNvP3Zziebo1Yda2PV72nsmeKc0D1S2DGEtqqlXjVHSCUQx2B0LZL3QSP r74biAIRrtQecznMx9CURxAEMIyX8p4MmLiSdTBf0oqF0yG0Jr4W/rTa1H7Dm0aE iAsJ4nId8gKX3DJbVYbqzFwZut7OBQaUSV7x/zXR4a3QVanRis36zepHMXwdkejS Ahfjtz/X2jD0B+k/3MR2BAflcC1oHBCpAxISK+Z66y4rKRgpNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG0AI83UtTUvhqW9QOKIDS1JxxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmQ1MWJmNDItNmEwMy0z MzgzLTliNzUtNGIyNzNiNzg4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgO9cEXkRkKSb6ED/BiFPIW6rdNTrpUCXEgNX/3avl81L220ee4S3A1 58Cr5f3XmapoWx371fskhCV000K9H8QulJn4ECv9ll+JNxNbwqCJjiIYLy7G2uqq UX6Z7DRrV8k1/XQ8G+XnjcU+rFz7loYv67eapI/20SJ+htDNIMfJBzz9+byZj6My QkNxraktbqUxsL9JQkTTaEIFmRQTuCW0RAHad5Eq9ezp2Die41jzTIl2XOBbZzhP zAS9vn/T3urmFZij6KlKXuzULyymbvHzgoYOt3byE6Z4/l/hPSU8Hs9J7HGV4K4x RxniKIGrSyzFxveKX7njxUFDsRvZP9w= -----END CERTIFICATE-----Generated at Sat Sep 26 05:01:41 2026 by rpki-client