$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/a1dab487-a8a4-3bf4-820e-6fec2ed9d822.roa File: a1dab487-a8a4-3bf4-820e-6fec2ed9d822.roa (raw, json) Hash identifier: SrBkhWWtT6fNI/7hJ3LOvjktphAlSb0XtK1GQ28PLKM= Subject key identifier: 56:51:12:0E:1A:B1:D5:BB:96:A5:C5:6E:D6:16:9C:08:2C:9B:9F:7D Certificate issuer: /CN=13f2987b-65e9-4b0f-9061-f324b366fd94 Certificate serial: 010D0C9F4328584F0D6CFB7021FB2E42D5288F80 Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/a1dab487-a8a4-3bf4-820e-6fec2ed9d822.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 32425 IP address blocks: 70.40.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fb:70:21:fb:2e:42:d5:28:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=eb2c3523-9fc9-4aac-a42c-fb40eaf472d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:cd:c4:da:cb:7e:d4:7b:92:46:94:7e:5e: 7d:1f:55:93:ff:14:88:0f:4e:9b:55:0a:12:bc:ad: b1:77:e0:7e:03:d9:f7:2d:29:e6:c9:53:8a:77:e2: 6e:cd:01:07:43:b2:2a:4f:4b:e2:6d:3c:9d:91:74: 9d:1b:59:d0:52:41:5b:09:dc:3a:4d:34:47:02:5e: 72:8f:22:d3:bd:d1:49:8f:40:fe:bd:08:08:82:3e: c0:57:be:2b:07:b1:ba:20:e6:96:e9:f1:f6:61:3d: b8:5e:c0:8d:8b:31:45:b3:44:db:81:00:fe:8d:4a: fc:7f:9c:68:c2:ab:8f:e0:d9:8f:fd:19:eb:76:82: 39:75:fd:47:2c:8a:44:8d:55:48:b1:f6:01:bc:fa: 2f:c9:e5:6a:b6:47:67:29:f7:5d:96:b0:47:14:af: 60:0a:57:20:9e:d8:9b:29:7e:a2:33:6e:96:f8:a5: 36:51:1b:6c:f2:80:6f:93:a0:56:84:43:15:b6:e4: 8e:31:18:ab:a8:cc:5f:7e:8f:49:30:78:2d:1b:9e: 1c:3b:51:fc:1e:44:2b:1d:d4:c2:4f:39:e1:be:f5: fc:01:86:7c:12:fa:6e:54:ed:14:c0:54:26:71:1d: 00:05:bb:1d:b8:c1:13:89:e2:c1:44:d9:49:73:c0: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:51:12:0E:1A:B1:D5:BB:96:A5:C5:6E:D6:16:9C:08:2C:9B:9F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/a1dab487-a8a4-3bf4-820e-6fec2ed9d822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl X509v3 Authority Key Identifier: keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer sbgp-ipAddrBlock: critical IPv4: 70.40.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:18:eb:8e:1c:74:11:48:6c:9b:42:d8:0e:ef:30:62:cd:bf: d7:4e:72:82:21:ae:ef:68:4d:b1:56:5a:39:f5:6d:fd:2a:ed: 5f:7c:ca:7b:77:a7:3d:c0:d0:4f:d5:b5:2a:c0:3c:12:6c:34: 67:c5:1e:1c:ea:b4:99:50:eb:a2:40:0b:38:08:49:f1:53:aa: 98:65:59:40:e5:35:8f:6c:ce:03:9d:c6:9d:d1:d3:e7:4a:ea: 9d:73:79:3e:26:bd:30:f1:7c:b8:43:29:c9:ea:ae:72:38:2c: 77:d3:cd:72:13:f1:19:68:cb:ba:56:10:19:65:3b:58:4d:23: 4a:26:e9:2c:65:3a:6d:3c:1f:67:c0:94:b3:68:e0:b8:b6:15: 74:8b:f3:0b:7c:f2:13:bc:44:56:c8:e1:3a:55:86:84:c0:1b: 3d:b6:75:ca:69:bd:1c:01:c1:be:70:26:4a:35:7d:dc:2f:7e: d9:24:b6:65:d5:1a:6b:72:0a:6a:61:05:ce:44:f3:62:a8:5a: bb:54:e8:8d:83:6a:38:ad:00:c6:6d:84:dd:9a:23:ec:22:0c: b7:79:a6:04:a7:67:e6:88:aa:03:9c:de:c8:8c:3e:af:e4:b2: a3:4c:ce:61:e7:f4:82:ed:67:3c:25:fe:e0:ad:04:b0:f5:71: 84:40:b6:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPtwIfsuQtUoj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmMjk4N2ItNjVlOS00YjBmLTkwNjEtZjMyNGIzNjZm ZDk0MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZWIyYzM1MjMtOWZjOS00YWFjLWE0MmMtZmI0MGVhZjQ3MmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3HNxNrLftR7kkaUfl59H1WT/xSID06bVQoS vK2xd+B+A9n3LSnmyVOKd+JuzQEHQ7IqT0vibTydkXSdG1nQUkFbCdw6TTRHAl5y jyLTvdFJj0D+vQgIgj7AV74rB7G6IOaW6fH2YT24XsCNizFFs0TbgQD+jUr8f5xo wquP4NmP/RnrdoI5df1HLIpEjVVIsfYBvPovyeVqtkdnKfddlrBHFK9gClcgntib KX6iM26W+KU2URts8oBvk6BWhEMVtuSOMRirqMxffo9JMHgtG54cO1H8HkQrHdTC TznhvvX8AYZ8EvpuVO0UwFQmcR0ABbsduMETieLBRNlJc8AzEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZREg4asdW7lqXFbtYWnAgsm599MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xM2Yy OTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0YjM2NmZkOTQvYTFkYWI0ODctYThhNC0z YmY0LTgyMGUtNmZlYzJlZDlkODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTNmMjk4N2ItNjVlOS00YjBmLTkw NjEtZjMyNGIzNjZmZDk0LzEzZjI5ODdiLTY1ZTktNGIwZi05MDYxLWYzMjRiMzY2 ZmQ5NC5jcmwwHwYDVR0jBBgwFoAUxt3F8684P/Bqh/r6+Mr1rsrEwzcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xM2YyOTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0 YjM2NmZkOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4Y644cdBFIbJtC2A7vMGLNv9dOcoIhru9oTbFWWjn1bf0q7V98ynt3 pz3A0E/VtSrAPBJsNGfFHhzqtJlQ66JACzgISfFTqphlWUDlNY9szgOdxp3R0+dK 6p1zeT4mvTDxfLhDKcnqrnI4LHfTzXIT8Rloy7pWEBllO1hNI0om6SxlOm08H2fA lLNo4Li2FXSL8wt88hO8RFbI4TpVhoTAGz22dcppvRwBwb5wJko1fdwvftkktmXV GmtyCmphBc5E82KoWrtU6I2DajitAMZthN2aI+wiDLd5pgSnZ+aIqgOc3siMPq/k sqNMzmHn9ILtZzwl/uCtBLD1cYRAtng= -----END CERTIFICATE-----Generated at Sat Sep 26 06:30:44 2026 by rpki-client