$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/5d5c1994-85a7-33d6-94c9-c5e0275806e2.roa File: 5d5c1994-85a7-33d6-94c9-c5e0275806e2.roa (raw, json) Hash identifier: quH4nCliGSKR2KYcUUllFzRpCSUWzMmc+CydSpMHUoA= Subject key identifier: 66:5F:19:B5:8F:E9:E8:B7:8B:55:76:EA:C2:31:35:C0:43:0E:F9:32 Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec Certificate serial: 010D0C9F4328584F3FAD3D3CA1116AB852E09C00 Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/5d5c1994-85a7-33d6-94c9-c5e0275806e2.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 70.42.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3d:3c:a1:11:6a:b8:52:e0:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=5b5ef0a1-8792-4bf0-95de-b44b28af375c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:91:0c:46:54:3c:2a:ef:dd:6f:a5:a5:41: eb:a1:55:bb:bf:13:4f:f0:65:01:6f:45:1a:34:7a: 5a:aa:28:13:93:f2:99:f4:90:6f:33:e3:07:36:0f: 1b:e6:d8:ba:a1:7d:c6:ad:48:ea:59:55:18:5b:f8: d5:a2:db:2a:94:71:3f:7b:62:21:4a:86:5d:d6:1d: eb:22:e9:c5:88:93:44:2b:40:be:1c:84:a6:d5:9c: 96:0e:31:e8:48:68:67:f7:87:91:c4:94:14:89:5a: 65:29:4c:e8:37:fa:db:e8:0a:67:45:93:0e:64:d2: ce:6c:68:f2:a4:1a:30:b7:65:b9:37:c9:ad:ac:b1: 5f:92:53:ff:8c:c2:e0:d6:d5:3b:13:72:f5:9c:9d: 01:98:41:2a:38:eb:b6:5c:fd:a6:61:f4:79:2a:03: 3a:94:e4:22:d9:ea:58:a0:7d:a3:0b:fd:f0:4a:40: ec:3a:9e:6d:70:db:6a:36:cf:91:f0:01:43:e0:11: c5:0e:7a:cb:bc:0d:35:52:00:85:f5:d9:5d:34:34: c8:9b:b1:30:f4:af:5b:6b:02:f2:4a:77:a0:37:73: 37:e6:6f:66:12:6c:4a:4f:fe:b5:19:cc:86:92:9b: e0:16:25:90:7b:e5:4f:87:2c:2b:97:b5:e8:c6:5e: 42:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5F:19:B5:8F:E9:E8:B7:8B:55:76:EA:C2:31:35:C0:43:0E:F9:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/5d5c1994-85a7-33d6-94c9-c5e0275806e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl X509v3 Authority Key Identifier: keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer sbgp-ipAddrBlock: critical IPv4: 70.42.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9e:ab:b8:b4:3b:ad:41:cf:58:50:ce:57:32:fb:59:ce:95: 0f:d7:63:c7:48:c5:30:d7:06:cb:59:41:46:64:fb:ea:ef:54: d1:c6:17:15:bb:94:08:f6:87:a8:4f:65:5a:e6:13:4d:23:e7: c7:37:94:3c:e7:45:86:71:bf:b4:c1:d2:33:32:7a:de:4b:7e: 85:b0:e5:2a:18:8e:f0:ba:99:04:41:e4:fa:62:6b:d9:71:63: 77:9e:1d:1d:de:87:4b:af:89:1b:ab:d1:a3:51:47:b0:ee:bc: 6e:0d:1f:b5:e5:87:c0:d5:17:03:82:ba:ff:07:68:b1:06:02: a6:dd:f1:d7:c1:35:2c:74:cc:28:f6:b7:e5:25:b4:ec:0a:4c: 40:5c:d1:60:09:a1:8d:42:aa:27:c6:46:5d:b9:3a:f3:de:bf: e5:31:dc:df:b6:04:0f:0f:a2:31:0b:fe:35:f2:1b:66:93:ab: a4:5f:0e:00:8f:c0:3b:59:4f:30:3e:1f:06:3f:3d:5c:00:af: 60:66:cb:9c:19:a2:cc:89:ff:2b:db:29:b2:92:aa:c6:f7:ad: 8f:f9:91:1c:e6:2e:29:4e:4b:d9:d8:0e:be:78:68:48:bd:90: 85:95:18:ad:3a:c6:5a:17:81:b6:5e:ec:f1:bf:19:b0:ab:00: 40:8b:1b:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rT08oRFquFLgnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdjOGUxYTItNjk1NS00NWFhLWJkNTgtYzJlYzI2ZThl NWVjMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NWI1ZWYwYTEtODc5Mi00YmYwLTk1ZGUtYjQ0YjI4YWYzNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw02RDEZUPCrv3W+lpUHroVW7vxNP8GUBb0Ua NHpaqigTk/KZ9JBvM+MHNg8b5ti6oX3GrUjqWVUYW/jVotsqlHE/e2IhSoZd1h3r IunFiJNEK0C+HISm1ZyWDjHoSGhn94eRxJQUiVplKUzoN/rb6ApnRZMOZNLObGjy pBowt2W5N8mtrLFfklP/jMLg1tU7E3L1nJ0BmEEqOOu2XP2mYfR5KgM6lOQi2epY oH2jC/3wSkDsOp5tcNtqNs+R8AFD4BHFDnrLvA01UgCF9dldNDTIm7Ew9K9bawLy SnegN3M35m9mEmxKT/61GcyGkpvgFiWQe+VPhywrl7Xoxl5CBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZfGbWP6ei3i1V26sIxNcBDDvkyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4 ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZlOGU1ZWMvNWQ1YzE5OTQtODVhNy0z M2Q2LTk0YzktYzVlMDI3NTgwNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjOGUxYTItNjk1NS00NWFhLWJk NTgtYzJlYzI2ZThlNWVjLzY3YzhlMWEyLTY5NTUtNDVhYS1iZDU4LWMyZWMyNmU4 ZTVlYy5jcmwwHwYDVR0jBBgwFoAUPNX2nFOg47bXPQIwtOEtAyhsMGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVj MjZlOGU1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARip0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGeq7i0O61Bz1hQzlcy+1nOlQ/XY8dIxTDXBstZQUZk++rvVNHGFxW7 lAj2h6hPZVrmE00j58c3lDznRYZxv7TB0jMyet5LfoWw5SoYjvC6mQRB5Ppia9lx Y3eeHR3eh0uviRur0aNRR7DuvG4NH7Xlh8DVFwOCuv8HaLEGAqbd8dfBNSx0zCj2 t+UltOwKTEBc0WAJoY1CqifGRl25OvPev+Ux3N+2BA8PojEL/jXyG2aTq6RfDgCP wDtZTzA+HwY/PVwAr2Bmy5wZosyJ/yvbKbKSqsb3rY/5kRzmLilOS9nYDr54aEi9 kIWVGK06xloXgbZe7PG/GbCrAECLG9w= -----END CERTIFICATE-----Generated at Mon Sep 21 16:08:53 2026 by rpki-client