$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa File: 3da83a5f-2475-344d-bc7c-33066927f827.roa (raw, json) Hash identifier: 8wcng84g8RmGClE6EktdBYcyON1jzrXBay8DojI86Zo= Subject key identifier: 8E:84:2B:27:3D:A3:97:DD:AF:7D:1F:A6:32:5F:B4:A0:79:96:41:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DAC022961C161FC7A6F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ac:02:29:61:c1:61:fc:7a:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=77e4936d-55d3-4aeb-8b4c-072dba16a28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:7c:50:84:ef:fe:70:6b:c8:f5:77:7f:7a: b6:f4:3a:96:23:eb:70:46:ba:7e:20:ce:b3:08:31: 4f:5f:6a:21:10:ee:fc:c3:9a:42:f1:59:0e:be:ef: 77:65:3e:20:f9:60:73:b6:93:ea:a1:7e:34:cb:83: ff:ea:34:65:a7:c1:e9:58:03:d9:b9:08:0d:61:1b: a2:b9:2b:9a:e6:7b:9c:42:8e:58:7a:c6:d4:eb:29: 42:8f:14:18:e7:73:9b:2f:4d:d1:4b:46:c2:2b:1d: fb:a7:53:56:43:d2:8f:e6:24:f7:a0:55:f1:b3:8c: 14:c8:93:1a:5b:e6:ee:9e:f2:79:e1:d7:41:42:d9: 5d:12:e3:c0:08:f7:7a:21:5c:d3:24:c7:d7:95:4a: 7b:ea:d3:c5:d9:8e:5a:2b:c2:d1:30:24:43:f8:f7: f2:b7:5f:51:57:7d:2b:6d:63:13:ce:6a:b6:0b:90: 63:9c:c5:03:0d:47:62:e7:3f:b4:e0:0c:82:76:f4: d8:11:d0:95:ee:9b:a3:51:15:54:a0:c3:a0:24:5b: 52:8e:77:ac:c6:6b:b2:a8:40:72:5c:41:68:14:62: 1d:e0:df:c9:26:9a:16:a3:3c:b9:13:8b:89:d2:16: 00:82:d9:9b:73:98:71:9f:bd:45:4f:7b:ef:2b:64: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:84:2B:27:3D:A3:97:DD:AF:7D:1F:A6:32:5F:B4:A0:79:96:41:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:68:33:2b:9a:72:99:c4:76:1a:4e:7b:10:be:ce:10:43:3e: dc:4f:19:48:f0:75:67:6a:2d:99:09:3c:ff:e8:db:a7:4f:03: d9:82:0c:cb:f8:24:a2:b1:ff:b3:c3:60:49:e0:0e:17:de:52: 26:24:e5:b0:ff:52:a8:8d:d1:7e:47:99:35:55:6d:54:f4:f0: 73:40:72:67:4b:78:d5:67:14:0e:51:f8:13:57:d4:b6:59:23: 48:dc:df:cc:ec:ca:b2:3d:7c:0e:d6:32:7f:9b:3f:94:d0:6f: 2e:b9:76:55:f2:01:27:71:26:30:ab:f0:93:b7:c7:3b:63:16: 7d:0f:04:df:db:29:b4:76:96:09:71:f9:d1:f3:0d:6e:1c:aa: ed:4e:61:dd:d4:b5:9b:0c:13:dc:37:d6:54:57:39:98:7f:f1: a0:e9:82:76:66:f4:5a:70:3d:b7:4b:3f:46:37:67:0e:e1:13: f4:77:8b:62:ce:72:1f:fa:aa:fe:8a:96:36:c0:62:ed:ad:3d: af:cb:d4:4c:75:2f:62:9d:23:53:f6:65:40:e9:82:23:01:ee: 55:ea:1d:13:50:4c:da:5b:a4:34:16:50:e3:10:14:cb:e3:0a: ff:7b:b6:27:bb:54:69:00:28:de:ad:ce:49:45:06:43:c6:62: d6:4f:97:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPawCKWHBYfx6b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzdlNDkzNmQtNTVkMy00YWViLThiNGMtMDcyZGJhMTZhMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsN8UITv/nBryPV3f3q29DqWI+twRrp+IM6z CDFPX2ohEO78w5pC8VkOvu93ZT4g+WBztpPqoX40y4P/6jRlp8HpWAPZuQgNYRui uSua5nucQo5YesbU6ylCjxQY53ObL03RS0bCKx37p1NWQ9KP5iT3oFXxs4wUyJMa W+bunvJ54ddBQtldEuPACPd6IVzTJMfXlUp76tPF2Y5aK8LRMCRD+Pfyt19RV30r bWMTzmq2C5BjnMUDDUdi5z+04AyCdvTYEdCV7pujURVUoMOgJFtSjnesxmuyqEBy XEFoFGId4N/JJpoWozy5E4uJ0hYAgtmbc5hxn71FT3vvK2TcFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6EKyc9o5fdr30fpjJftKB5lkGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2RhODNhNWYtMjQ3NS0z NDRkLWJjN2MtMzMwNjY5MjdmODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpoMyuacpnEdhpOexC+zhBDPtxPGUjwdWdqLZkJPP/o26dPA9mCDMv4 JKKx/7PDYEngDhfeUiYk5bD/UqiN0X5HmTVVbVT08HNAcmdLeNVnFA5R+BNX1LZZ I0jc38zsyrI9fA7WMn+bP5TQby65dlXyASdxJjCr8JO3xztjFn0PBN/bKbR2lglx +dHzDW4cqu1OYd3UtZsME9w31lRXOZh/8aDpgnZm9FpwPbdLP0Y3Zw7hE/R3i2LO ch/6qv6KljbAYu2tPa/L1Ex1L2KdI1P2ZUDpgiMB7lXqHRNQTNpbpDQWUOMQFMvj Cv97tie7VGkAKN6tzklFBkPGYtZPlyQ= -----END CERTIFICATE-----Generated at Thu Nov 5 18:50:51 2026 by rpki-client