$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa File: acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa (raw, json) Hash identifier: 14ZNWFnWiDI6D3HX3fxF2mKtU++jWiu/RRD2UPIXe2Q= Subject key identifier: 2C:66:DA:4D:C6:C7:E0:F4:D0:FF:60:01:A8:24:4C:75:9C:BD:24:EC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D8317B0F632A702B29D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:83:17:b0:f6:32:a7:02:b2:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0ee27873-0717-47ba-8187-a1843b2199a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ca:ed:d6:e7:40:6b:15:80:77:49:96:c5:1e: 5e:ef:5d:0a:63:a9:8f:9a:f9:25:ac:31:63:13:c7: 5b:e4:59:90:17:6b:59:03:c8:cb:0e:d9:a4:24:4b: 07:40:45:4d:63:44:f6:46:2a:0b:11:ee:d1:e8:a3: ff:c0:99:b2:7f:cb:83:72:58:96:90:b0:6a:69:7d: c9:fd:11:32:a1:f7:a8:d8:83:34:02:38:e6:f3:7a: 2f:5f:09:47:21:bd:44:4f:7a:4a:e9:d1:a9:05:d6: d2:8d:22:81:c9:60:0c:4d:6b:7c:ef:6c:04:4c:c2: 7e:99:9a:af:38:83:30:59:5b:1e:ad:9a:8a:02:3a: d4:7b:d6:27:69:0d:4e:4b:f3:1e:73:87:88:cf:bf: c4:b7:0a:8c:f2:24:b2:07:f3:5d:92:c3:17:63:f3: 5b:be:99:4d:3b:1a:eb:de:1f:e2:7c:73:77:27:3f: 67:84:3b:78:a3:bf:2e:8d:58:71:14:26:14:e1:df: 24:23:02:de:f7:05:7c:7e:fe:00:ab:78:fe:f0:21: 58:df:09:eb:db:9e:f4:e4:de:9a:c9:1f:33:31:65: 03:0a:78:a8:88:23:05:b8:0e:69:32:39:93:17:66: 93:d9:30:69:71:68:22:bf:88:a0:60:bd:0e:00:17: b5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:66:DA:4D:C6:C7:E0:F4:D0:FF:60:01:A8:24:4C:75:9C:BD:24:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acc1fdc6-30db-3af4-b8f5-32551a330b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0c:c6:6b:71:ed:1c:a8:aa:45:2c:36:af:ea:f5:83:72:d8: 91:24:58:b5:8b:50:85:ed:05:a2:68:68:fd:38:01:f9:95:48: 1e:a5:62:73:fc:72:2e:ec:af:ac:cf:75:ef:a5:0d:89:ed:8c: 93:80:b7:02:52:17:82:90:f8:cb:09:93:d8:98:eb:c1:20:74: c2:d3:37:c9:c3:1c:51:e0:18:0e:a4:e4:45:03:81:ee:59:b3: f8:14:5d:04:a7:56:ae:17:5e:6a:26:ba:10:42:da:fe:c8:ab: 62:38:6a:87:54:db:85:ed:2e:59:27:0f:0d:a7:12:07:f2:ba: 6f:1c:a6:8f:3c:92:41:d3:e6:7f:f2:e7:a4:93:85:72:c4:01: 15:32:44:49:bb:11:2a:de:a8:91:c8:df:ea:6c:a6:ea:4f:92: df:5a:f6:e2:1d:96:ee:43:9f:95:56:9f:25:b2:6f:23:77:ef: b6:ce:f5:4c:19:1f:28:6f:8e:14:31:19:a4:12:dc:96:54:97: 7d:c0:68:81:0a:16:ae:31:47:2d:10:9d:64:bf:86:3f:5a:02: ca:a1:ac:82:bd:23:d3:b6:3c:d0:85:3b:ab:b9:32:7d:2d:42: 2b:c2:68:0d:f6:bb:e6:dd:09:47:89:42:18:fd:4f:9f:95:76: d2:78:4d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYMXsPYypwKynYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGVlMjc4NzMtMDcxNy00N2JhLTgxODctYTE4NDNiMjE5OWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMrt1udAaxWAd0mWxR5e710KY6mPmvklrDFj E8db5FmQF2tZA8jLDtmkJEsHQEVNY0T2RioLEe7R6KP/wJmyf8uDcliWkLBqaX3J /REyofeo2IM0Ajjm83ovXwlHIb1ET3pK6dGpBdbSjSKByWAMTWt872wETMJ+mZqv OIMwWVserZqKAjrUe9YnaQ1OS/Mec4eIz7/EtwqM8iSyB/NdksMXY/NbvplNOxrr 3h/ifHN3Jz9nhDt4o78ujVhxFCYU4d8kIwLe9wV8fv4Aq3j+8CFY3wnr25705N6a yR8zMWUDCnioiCMFuA5pMjmTF2aT2TBpcWgiv4igYL0OABe1qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxm2k3Gx+D00P9gAagkTHWcvSTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWNjMWZkYzYtMzBkYi0z YWY0LWI4ZjUtMzI1NTFhMzMwYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwMxmtx7RyoqkUsNq/q9YNy2JEkWLWLUIXtBaJoaP04AfmVSB6lYnP8 ci7sr6zPde+lDYntjJOAtwJSF4KQ+MsJk9iY68EgdMLTN8nDHFHgGA6k5EUDge5Z s/gUXQSnVq4XXmomuhBC2v7Iq2I4aodU24XtLlknDw2nEgfyum8cpo88kkHT5n/y 56SThXLEARUyREm7ESreqJHI3+pspupPkt9a9uIdlu5Dn5VWnyWybyN377bO9UwZ HyhvjhQxGaQS3JZUl33AaIEKFq4xRy0QnWS/hj9aAsqhrIK9I9O2PNCFO6u5Mn0t QivCaA32u+bdCUeJQhj9T5+VdtJ4TVY= -----END CERTIFICATE-----Generated at Thu Nov 5 18:51:02 2026 by rpki-client