$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa File: 3821e3dc-b2a8-348a-8401-999696cbb28c.roa (raw, json) Hash identifier: zBW9Y2yFz0d3CUBHBTPI0+hrnsEfzTj5c+SbepR4mRc= Subject key identifier: D7:42:88:53:3B:E6:87:E0:8B:0D:33:52:A2:30:40:89:BF:3F:07:EA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D8B5C95371C8FC9325A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8b:5c:95:37:1c:8f:c9:32:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a8a0e362-9e28-4d0c-882f-09d0488f25ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:96:29:83:f9:27:89:b6:d8:38:f0:56:23:b2: dd:58:dc:35:92:15:64:19:00:a1:b2:de:f0:65:77: 88:04:2e:ea:10:86:3c:f7:3e:7f:c9:22:12:3a:31: 76:e0:8a:3e:0f:cd:71:31:97:4d:fb:27:7b:39:e0: 59:80:41:2e:ed:c2:ae:49:c2:2d:af:27:c2:9b:65: 35:51:2e:bf:51:7d:ac:b1:9e:d4:94:64:0a:de:02: ac:a4:d1:7c:53:a7:9e:b7:73:bb:f7:ff:3e:aa:e0: 04:f4:1f:e3:3c:6c:5e:02:88:4d:f1:10:7f:7b:3f: ad:c1:1d:7a:13:1f:74:c7:35:b3:a9:d8:30:8e:4f: e1:5a:8d:7b:ad:14:73:20:3f:b8:34:95:21:f4:df: f5:44:85:8c:21:f7:d5:fb:02:66:d1:18:5b:17:d6: aa:6c:21:99:03:8a:4d:e3:fc:eb:aa:d9:00:89:33: ba:9d:14:1d:9c:71:53:29:47:9c:ff:65:6a:a5:33: 0e:96:1e:71:4d:c9:0e:3a:04:fa:58:59:c9:33:1b: de:78:28:52:23:c8:19:56:5a:11:59:af:ab:9a:f4: f9:9a:11:88:6a:77:7a:c0:6e:57:5a:de:5a:4b:cd: de:f8:c7:60:3b:08:4c:82:06:95:9e:7d:22:cb:21: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:42:88:53:3B:E6:87:E0:8B:0D:33:52:A2:30:40:89:BF:3F:07:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:42:da:68:5f:ef:ec:59:83:08:50:a4:eb:ab:21:cf:ee:13: 5d:55:a1:d4:6b:5a:c6:6b:ab:4e:63:e5:ae:b4:84:9d:25:be: 2e:72:cc:73:62:e2:6c:49:7c:f8:93:4d:95:3e:10:82:c1:22: 8d:c1:87:fd:0d:03:e5:a1:8f:7c:79:a7:00:1c:82:20:7f:ce: c3:bc:87:e8:30:01:b5:15:65:70:41:cc:9d:7b:ea:f8:2c:2f: f9:7f:bb:c9:cf:5c:26:28:2b:ab:05:aa:05:55:5e:4f:b0:45: 48:87:c2:ea:8d:66:b6:56:44:3e:0d:d6:90:73:6a:2f:32:50: 13:c8:8c:a6:71:da:a0:d7:97:ff:e8:51:ca:a9:48:23:25:d0: 36:f4:c2:8b:3d:71:53:9e:44:be:0e:ed:da:bf:b3:03:75:35: cf:b5:3b:5a:06:1c:7e:34:75:fc:70:6d:00:e5:17:fa:b8:85: 1a:87:18:b7:02:ee:2d:36:f4:b5:5d:25:b5:39:56:05:ef:59: 85:54:3c:13:96:9f:31:18:4a:de:86:dd:cc:be:7c:0f:f3:93: ef:e7:18:48:e9:dc:46:0e:24:e3:49:50:24:d5:d4:eb:31:a1: d8:cb:7f:e2:d4:59:0e:11:e4:8e:3d:3e:18:df:be:94:51:cf: 67:0a:8e:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYtclTccj8kyWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YThhMGUzNjItOWUyOC00ZDBjLTg4MmYtMDlkMDQ4OGYyNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pYpg/knibbYOPBWI7LdWNw1khVkGQChst7w ZXeIBC7qEIY89z5/ySISOjF24Io+D81xMZdN+yd7OeBZgEEu7cKuScItryfCm2U1 US6/UX2ssZ7UlGQK3gKspNF8U6eet3O79/8+quAE9B/jPGxeAohN8RB/ez+twR16 Ex90xzWzqdgwjk/hWo17rRRzID+4NJUh9N/1RIWMIffV+wJm0RhbF9aqbCGZA4pN 4/zrqtkAiTO6nRQdnHFTKUec/2VqpTMOlh5xTckOOgT6WFnJMxveeChSI8gZVloR Wa+rmvT5mhGIand6wG5XWt5aS83e+MdgOwhMggaVnn0iyyHgSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdCiFM75ofgiw0zUqIwQIm/PwfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzgyMWUzZGMtYjJhOC0z NDhhLTg0MDEtOTk5Njk2Y2JiMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZC2mhf7+xZgwhQpOurIc/uE11VodRrWsZrq05j5a60hJ0lvi5yzHNi 4mxJfPiTTZU+EILBIo3Bh/0NA+Whj3x5pwAcgiB/zsO8h+gwAbUVZXBBzJ176vgs L/l/u8nPXCYoK6sFqgVVXk+wRUiHwuqNZrZWRD4N1pBzai8yUBPIjKZx2qDXl//o UcqpSCMl0Db0wos9cVOeRL4O7dq/swN1Nc+1O1oGHH40dfxwbQDlF/q4hRqHGLcC 7i029LVdJbU5VgXvWYVUPBOWnzEYSt6G3cy+fA/zk+/nGEjp3EYOJONJUCTV1Osx odjLf+LUWQ4R5I49PhjfvpRRz2cKjog= -----END CERTIFICATE-----Generated at Thu Nov 5 17:26:56 2026 by rpki-client