$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27cfae8c-8619-34cd-b648-25e516bc24c6.roa File: 27cfae8c-8619-34cd-b648-25e516bc24c6.roa (raw, json) Hash identifier: ffpyvT0Un0d7xtuFdqsSP/LXdF3Kncc1hwfEjqF48rA= Subject key identifier: CE:8A:E2:AB:0D:0B:26:31:70:57:98:41:0F:E5:C0:AC:9F:3E:26:8B Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0F9F984B1B346C7B6B9F1860 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27cfae8c-8619-34cd-b648-25e516bc24c6.roa Signing time: Fri 04 Sep 2026 07:54:08 +0000 ROA not before: Fri 04 Sep 2026 07:54:08 +0000 ROA not after: Thu 03 Dec 2026 08:54:08 +0000 asID: 27411 IP address blocks: 70.32.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:9f:98:4b:1b:34:6c:7b:6b:9f:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 07:54:08 2026 GMT Not After : Dec 3 08:54:08 2026 GMT Subject: CN=fff04571-d57b-4051-8edb-ca46615a2ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:a1:9f:45:06:35:6a:b2:2e:4e:53:ce:93: b9:c2:99:f8:c7:91:8e:35:ee:32:7b:a3:73:23:19: 17:31:d2:b5:ee:87:34:ed:94:21:ce:d6:42:c8:5b: 95:7c:73:96:42:05:5e:55:5a:35:fb:69:80:0f:90: 7f:c6:1d:20:0a:19:23:fd:61:49:90:88:99:f1:0b: ef:45:4b:91:fc:47:96:1e:89:a0:dc:82:95:9c:72: d9:cc:ff:74:94:6c:6d:e3:c7:58:d8:5c:34:0c:7a: e3:09:6f:b2:4b:08:14:d1:ca:22:b9:cd:d8:71:82: e8:89:5b:9c:a2:6b:6a:1e:f6:33:2e:c7:25:2e:c2: 2e:ec:95:0b:16:8b:ce:6b:20:c1:b7:d5:77:99:38: f3:f2:af:23:08:8e:2a:b3:02:50:ba:68:1a:ee:89: ae:3c:8d:36:b3:0c:2b:28:42:7c:e8:d4:de:ad:9b: dc:9f:93:43:9c:e7:23:dd:bd:18:86:64:88:38:00: 9e:6d:38:c1:69:8b:56:53:3f:bd:e8:0b:4c:f9:e8: d1:a4:36:0c:bb:97:d0:30:09:cb:07:35:ee:f8:6e: 96:2c:9e:cf:53:07:3a:d6:a9:36:59:5e:ec:ea:74: 8e:fb:64:ff:41:de:f9:7d:ca:f3:dc:77:7d:ea:34: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8A:E2:AB:0D:0B:26:31:70:57:98:41:0F:E5:C0:AC:9F:3E:26:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27cfae8c-8619-34cd-b648-25e516bc24c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 70.32.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:7d:85:73:44:19:1c:1d:2d:22:ba:24:a7:0a:dd:b2:bc:e7: e9:22:79:9d:6e:10:21:bc:37:67:a6:13:13:6f:6a:76:19:41: 30:16:50:19:1b:c1:80:2f:99:22:bf:b9:8e:f9:df:af:28:3f: ed:b2:c5:16:42:cf:8f:0d:f9:1b:25:4e:68:73:54:ac:fa:f7: 17:e5:52:40:0f:5a:1c:9b:f0:fd:c3:4c:d9:cc:62:e1:bf:a8: 5a:58:39:50:91:63:c9:45:09:fb:4d:d7:d6:87:23:e4:70:d4: 1a:b5:a6:4c:f0:36:73:a5:57:d7:5a:a0:f2:56:53:77:e5:ef: 26:f2:a2:32:74:04:b4:eb:13:28:85:1f:61:75:16:df:18:d1: 53:e2:9c:99:b9:87:c1:42:db:24:62:77:dc:91:40:aa:4e:ef: cb:d9:b7:ac:3c:a2:8a:f6:80:00:d8:63:a6:9d:ac:d3:15:b3: 33:68:a7:41:69:3c:1b:b6:09:80:ff:39:90:67:a1:47:74:3b: ae:b5:5f:66:b5:93:b9:16:78:30:5e:dc:9b:6d:eb:07:c2:93: a6:ce:d4:1c:2a:3c:c6:00:72:ca:f9:a8:55:9f:2c:63:cd:5c: 6f:50:8d:1b:59:e2:18:04:47:4c:25:c0:63:9c:56:7b:1d:ff: f9:23:f3:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Pn5hLGzRse2ufGGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA3NTQwOFoXDTI2MTIwMzA4NTQwOFowLzEtMCsGA1UEAxMk ZmZmMDQ1NzEtZDU3Yi00MDUxLThlZGItY2E0NjYxNWEyZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkahn0UGNWqyLk5TzpO5wpn4x5GONe4ye6Nz IxkXMdK17oc07ZQhztZCyFuVfHOWQgVeVVo1+2mAD5B/xh0gChkj/WFJkIiZ8Qvv RUuR/EeWHomg3IKVnHLZzP90lGxt48dY2Fw0DHrjCW+ySwgU0coiuc3YcYLoiVuc omtqHvYzLsclLsIu7JULFovOayDBt9V3mTjz8q8jCI4qswJQumga7omuPI02swwr KEJ86NTerZvcn5NDnOcj3b0YhmSIOACebTjBaYtWUz+96AtM+ejRpDYMu5fQMAnL BzXu+G6WLJ7PUwc61qk2WV7s6nSO+2T/Qd75fcrz3Hd96jQt1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6K4qsNCyYxcFeYQQ/lwKyfPiaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjdjZmFlOGMtODYxOS0z NGNkLWI2NDgtMjVlNTE2YmMyNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiAnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJt9hXNEGRwdLSK6JKcK3bK85+kieZ1uECG8N2emExNvanYZQTAWUBkb wYAvmSK/uY75368oP+2yxRZCz48N+RslTmhzVKz69xflUkAPWhyb8P3DTNnMYuG/ qFpYOVCRY8lFCftN19aHI+Rw1Bq1pkzwNnOlV9daoPJWU3fl7ybyojJ0BLTrEyiF H2F1Ft8Y0VPinJm5h8FC2yRid9yRQKpO78vZt6w8oor2gADYY6adrNMVszNop0Fp PBu2CYD/OZBnoUd0O661X2a1k7kWeDBe3Jtt6wfCk6bO1BwqPMYAcsr5qFWfLGPN XG9QjRtZ4hgER0wlwGOcVnsd//kj8+g= -----END CERTIFICATE-----Generated at Tue Sep 22 18:11:38 2026 by rpki-client