$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c648b477-759e-382d-bac2-2e2215bfc5d3.roa File: c648b477-759e-382d-bac2-2e2215bfc5d3.roa (raw, json) Hash identifier: 5T165A972C97cAgT9cDl+VH1MiQQcBD04wLYuAO/WGA= Subject key identifier: 96:DA:8B:49:CD:1D:80:78:F2:82:7E:87:6E:8E:95:81:6F:27:33:B3 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584F4972B088AFC748F6CE9A8500 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c648b477-759e-382d-bac2-2e2215bfc5d3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4922 IP address blocks: 70.32.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b0:88:af:c7:48:f6:ce:9a:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a991bb66-dcbf-4545-9f11-c985e4a327db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1b:a1:fa:76:c9:b4:35:01:54:21:ab:af:56: da:dc:72:19:c4:c8:01:1c:58:c7:c4:13:91:9e:f5: 95:be:a7:89:80:a7:4b:15:19:0f:14:16:38:24:24: 4f:9d:fb:70:cd:86:8e:3e:bf:63:f8:c2:48:86:e2: b8:f5:3d:01:51:0d:36:64:15:00:2f:49:f8:d7:05: bb:14:cc:be:68:93:ce:16:0c:7c:62:57:bd:5a:23: 16:be:6b:c4:3f:de:72:60:29:14:ea:1c:6a:f0:4c: ab:bb:c1:bd:fd:b7:12:0f:95:0c:5e:21:b0:58:34: 68:16:b6:65:19:5c:59:6b:85:70:a1:c0:f1:b4:f3: 6d:31:57:e1:6a:0f:f8:dc:a3:08:09:87:95:d1:5c: 8e:03:69:f1:98:eb:b4:5e:45:d6:a3:09:01:80:4f: 99:78:87:30:fc:57:4b:c6:88:9d:12:16:ad:82:37: 20:46:38:8a:03:95:e1:e6:48:7f:00:3b:d3:a4:a9: 45:ae:59:4c:58:72:1f:33:c0:e1:bd:11:22:70:d0: 5d:86:cc:de:81:73:6f:06:67:7f:a0:60:b4:72:e2: 38:18:aa:76:bd:d9:e9:1a:28:4c:39:10:ed:07:20: 01:46:bb:85:c8:ec:b7:cc:eb:26:15:ee:df:39:30: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DA:8B:49:CD:1D:80:78:F2:82:7E:87:6E:8E:95:81:6F:27:33:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c648b477-759e-382d-bac2-2e2215bfc5d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 70.32.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a8:32:7a:1b:51:09:e3:bc:58:fe:1f:07:d4:b3:46:0e:56: fd:b9:c2:2f:b7:bf:d1:ce:70:03:ab:ff:42:dc:79:78:c0:1f: bf:77:9b:5b:d6:8e:2b:86:27:4f:56:38:cc:f0:fc:23:72:4e: f7:2d:a0:21:d7:78:38:84:00:21:7f:ed:74:4e:13:81:b2:d2: 1d:60:7f:fd:fc:a0:c3:3d:4c:ba:a6:5c:19:65:9e:ff:cf:ed: 45:ac:36:bb:30:45:b8:75:4a:40:da:0b:73:a7:5b:ea:a0:2c: df:1d:ac:fb:13:56:77:7c:f9:64:e2:db:48:4c:88:21:86:ae: e2:53:64:48:59:c4:9d:97:cb:fc:06:cb:a0:be:74:0f:2a:54: 7c:bc:1b:31:5b:06:dc:7a:26:31:e2:a3:df:fd:e2:b7:c2:b0: 37:b7:f6:c8:cf:ae:fb:4e:40:52:f3:ee:97:e7:e1:28:6c:28: c3:1c:95:88:ba:0b:1d:82:2e:2d:2e:f0:b6:2e:aa:da:d2:8b: 72:c4:5c:eb:7c:1a:f0:cf:21:00:7c:ae:b6:10:97:af:72:a9: 39:1b:f1:2a:52:0c:0a:fd:33:bb:52:7d:be:c7:6e:66:1c:4c: bd:8d:b7:07:4f:43:85:2c:a9:ea:31:21:b1:5c:3d:3c:ab:dc: 1e:2d:fc:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrCIr8dI9s6ahQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTk5MWJiNjYtZGNiZi00NTQ1LTlmMTEtYzk4NWU0YTMyN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBuh+nbJtDUBVCGrr1ba3HIZxMgBHFjHxBOR nvWVvqeJgKdLFRkPFBY4JCRPnftwzYaOPr9j+MJIhuK49T0BUQ02ZBUAL0n41wW7 FMy+aJPOFgx8Yle9WiMWvmvEP95yYCkU6hxq8Eyru8G9/bcSD5UMXiGwWDRoFrZl GVxZa4VwocDxtPNtMVfhag/43KMICYeV0VyOA2nxmOu0XkXWowkBgE+ZeIcw/FdL xoidEhatgjcgRjiKA5Xh5kh/ADvTpKlFrllMWHIfM8DhvREicNBdhszegXNvBmd/ oGC0cuI4GKp2vdnpGihMORDtByABRruFyOy3zOsmFe7fOTCrPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbai0nNHYB48oJ+h26OlYFvJzOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYzY0OGI0NzctNzU5ZS0z ODJkLWJhYzItMmUyMjE1YmZjNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqoMnobUQnjvFj+HwfUs0YOVv25wi+3v9HOcAOr/0LceXjAH793m1vW jiuGJ09WOMzw/CNyTvctoCHXeDiEACF/7XROE4Gy0h1gf/38oMM9TLqmXBllnv/P 7UWsNrswRbh1SkDaC3OnW+qgLN8drPsTVnd8+WTi20hMiCGGruJTZEhZxJ2Xy/wG y6C+dA8qVHy8GzFbBtx6JjHio9/94rfCsDe39sjPrvtOQFLz7pfn4ShsKMMclYi6 Cx2CLi0u8LYuqtrSi3LEXOt8GvDPIQB8rrYQl69yqTkb8SpSDAr9M7tSfb7HbmYc TL2NtwdPQ4UsqeoxIbFcPTyr3B4t/HM= -----END CERTIFICATE-----Generated at Sat Sep 26 06:28:28 2026 by rpki-client