$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa File: 8660f259-74b8-3570-a008-aac9009ba729.roa (raw, json) Hash identifier: +xWvltdnY9yyKcVT9EioP1/UIJ08vKozOBD/yfFeOK4= Subject key identifier: 46:36:6A:75:BF:51:22:03:DC:FF:63:22:20:5B:05:30:07:56:E3:B7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DAA3ACC74B0F435834B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:aa:3a:cc:74:b0:f4:35:83:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=770e539d-0d17-4c90-9a6e-3812f3be1d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:5a:ef:4c:33:aa:40:b2:00:3b:30:95:a4: 96:54:12:dc:e8:c3:ad:c9:9b:1f:03:23:ce:c2:d4: a0:bd:f3:99:fd:53:89:82:bf:b1:1b:97:ad:79:36: fe:41:7e:0c:14:53:da:f9:c0:89:30:dd:a8:80:67: 03:2c:c9:21:5a:b2:5f:6b:91:da:02:a2:13:1d:b7: 6b:bb:5d:4c:5c:d1:02:a1:2f:47:44:c0:5f:01:f2: 91:dc:08:55:b4:d4:76:1f:ba:b4:de:d8:28:e0:86: 82:b9:ed:f1:8e:43:94:96:7a:77:bb:bb:91:cc:5e: bd:43:63:75:00:4e:21:f0:26:2a:7a:a2:46:9e:a6: e0:3e:82:05:11:2e:1e:87:71:b9:c3:07:d7:63:f6: 1a:54:6d:cb:f7:40:2e:58:f1:33:5e:8d:aa:70:98: 80:e6:a6:05:e6:35:6f:05:45:d6:86:a2:94:c5:f4: a0:c3:a7:03:c0:3c:1a:a2:1d:c0:c1:d6:98:c3:cf: 11:fc:b1:ab:a1:34:85:12:3b:a5:8a:44:7c:12:34: 64:a7:51:5b:e9:a8:7e:5c:4e:f7:56:10:ef:55:95: c1:ff:89:79:ac:f6:9c:d4:f3:13:8a:79:c7:87:1e: 36:3e:a2:18:d4:03:5a:96:8f:ea:96:f8:a6:c3:65: 98:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:36:6A:75:BF:51:22:03:DC:FF:63:22:20:5B:05:30:07:56:E3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e3:e4:9d:3c:be:32:dd:a5:8f:cf:4a:c1:a5:9f:1c:16:65: 73:4e:be:cb:d8:ab:04:f5:ae:8a:a1:81:04:79:76:93:c8:96: 04:c9:0a:e8:5d:52:a2:ea:de:44:2d:99:26:e0:5e:bd:36:3e: 52:e6:87:03:74:07:e5:20:b1:dc:b3:41:69:8d:39:f9:b2:86: dc:3e:1c:74:2e:64:45:e5:37:5f:b2:6b:41:65:fe:63:06:4b: 6a:0d:9f:aa:0c:19:35:2d:ae:bf:f0:e0:86:c5:86:75:51:99: a7:96:45:02:ac:52:46:31:c4:52:c3:b8:b8:d6:22:ee:4a:48: 22:2b:ee:48:6b:52:00:0f:94:65:8c:a3:de:22:ff:1e:86:5d: 7e:fd:9a:41:e8:77:56:e6:f0:05:c1:78:11:27:e5:13:6b:2a: 2a:6b:bb:22:41:88:7e:60:eb:4b:46:6e:68:4b:cc:5c:95:14: 91:af:69:6c:08:64:30:0d:00:ca:a8:cd:ac:4d:71:c7:b8:13: c9:f0:be:75:1d:c6:f6:e9:5a:f3:92:d0:58:a0:4b:21:49:74: 5d:6d:f6:35:a9:5e:f9:b2:fe:b7:3c:0a:28:1e:38:73:cc:7d: 4c:73:d0:3a:a1:36:44:1c:09:59:38:88:eb:a6:19:47:99:29: 1e:96:a2:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPao6zHSw9DWDSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzcwZTUzOWQtMGQxNy00YzkwLTlhNmUtMzgxMmYzYmUxZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnVa70wzqkCyADswlaSWVBLc6MOtyZsfAyPO wtSgvfOZ/VOJgr+xG5eteTb+QX4MFFPa+cCJMN2ogGcDLMkhWrJfa5HaAqITHbdr u11MXNECoS9HRMBfAfKR3AhVtNR2H7q03tgo4IaCue3xjkOUlnp3u7uRzF69Q2N1 AE4h8CYqeqJGnqbgPoIFES4eh3G5wwfXY/YaVG3L90AuWPEzXo2qcJiA5qYF5jVv BUXWhqKUxfSgw6cDwDwaoh3AwdaYw88R/LGroTSFEjulikR8EjRkp1Fb6ah+XE73 VhDvVZXB/4l5rPac1PMTinnHhx42PqIY1ANalo/qlvimw2WYtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY2anW/USID3P9jIiBbBTAHVuO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY2MGYyNTktNzRiOC0z NTcwLWEwMDgtYWFjOTAwOWJhNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLj5J08vjLdpY/PSsGlnxwWZXNOvsvYqwT1roqhgQR5dpPIlgTJCuhd UqLq3kQtmSbgXr02PlLmhwN0B+UgsdyzQWmNOfmyhtw+HHQuZEXlN1+ya0Fl/mMG S2oNn6oMGTUtrr/w4IbFhnVRmaeWRQKsUkYxxFLDuLjWIu5KSCIr7khrUgAPlGWM o94i/x6GXX79mkHod1bm8AXBeBEn5RNrKipruyJBiH5g60tGbmhLzFyVFJGvaWwI ZDANAMqozaxNcce4E8nwvnUdxvbpWvOS0FigSyFJdF1t9jWpXvmy/rc8CigeOHPM fUxz0DqhNkQcCVk4iOumGUeZKR6Wohc= -----END CERTIFICATE-----Generated at Sat Sep 26 16:59:20 2026 by rpki-client