$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa File: bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa (raw, json) Hash identifier: tl5l7FWjXJoy3orEsNYMwqANjOUCtC+4wKJ9uBPA4ms= Subject key identifier: 2C:4D:75:E6:C4:DA:51:C4:99:3A:04:9C:21:77:D8:4D:80:B0:BE:D5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E086617C6296E9F3E4B080690 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 70.32.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:17:c6:29:6e:9f:3e:4b:08:06:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=c4576b13-8fb8-4173-a9ea-9a92d3ab5e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:12:0f:11:e7:78:04:15:db:68:97:55:c7: b2:d9:34:04:eb:a3:c9:8e:0e:4c:55:4d:fb:03:9d: 2d:b6:4c:42:98:f2:88:31:60:d7:d2:0b:42:61:90: 6d:7c:5e:33:06:94:51:76:88:3c:41:9c:ac:1e:be: e7:9a:81:c8:85:81:ea:e3:a5:ee:f8:89:a9:b5:8d: 01:3a:db:33:23:4e:36:ff:83:dc:48:e5:fd:2b:f1: a7:df:99:ac:ad:b8:19:e8:d2:e1:00:df:cc:40:06: 3f:5d:1a:2e:4b:0b:ba:4d:89:0d:47:45:09:64:b5: 37:6b:b9:fa:42:3a:7d:e8:a0:76:3f:a1:7e:6d:91: 87:57:74:da:5a:d3:95:dc:88:4b:51:6b:6c:c2:04: d1:da:8e:b4:fa:db:05:b1:e8:52:1d:e5:55:46:3e: 15:35:5f:c5:ac:0d:f4:3d:7a:5e:e6:b5:d3:26:e6: 8f:0e:3d:88:46:65:59:de:b4:1b:2b:92:5f:f5:49: c3:0f:51:c0:c3:bc:7c:42:cf:20:73:53:15:59:b1: 55:22:32:d1:9c:96:99:bb:c9:5b:87:a5:a8:62:fa: 94:66:6b:3b:f2:25:6c:43:a0:2a:50:dd:7a:ea:e4: 66:b2:37:23:cb:6e:1c:0b:e4:d8:d8:7c:87:f7:7f: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4D:75:E6:C4:DA:51:C4:99:3A:04:9C:21:77:D8:4D:80:B0:BE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:33:7b:0d:58:8c:d6:c7:b1:4e:e7:3e:92:d2:e0:b8:11:f0: e6:b1:b0:2c:08:79:b9:07:49:06:42:1c:a8:c8:60:9c:49:38: 33:7a:24:01:63:15:78:1d:d7:61:8e:dc:84:ca:f0:ba:82:6f: 01:4c:06:c1:75:6c:8f:40:e8:3a:7a:ac:fb:ab:4e:0b:20:5d: 32:fd:3b:c3:27:35:03:b1:a5:c2:9c:af:a9:5f:09:49:16:3e: 03:1e:f9:ea:f9:32:26:41:dd:5e:df:f4:97:08:95:8c:02:1f: e9:09:66:c6:8f:e5:ab:3d:a3:90:c5:fa:72:2b:2d:e2:ae:28: a9:67:47:4e:f3:b0:df:1e:a7:80:18:24:fe:57:8c:32:3d:26: 78:3d:96:ee:e1:ff:64:26:e8:91:1a:22:14:1f:29:33:15:ef: 21:42:43:04:6d:86:73:e5:68:b2:8d:7a:46:4c:3a:8e:9f:27: 78:ca:16:57:bc:b6:7f:12:82:87:13:64:3a:1a:e2:7b:c5:57: 5d:58:4e:d8:e9:62:8d:1d:35:bb:bb:1c:7c:9c:d3:ab:14:25: 35:eb:bd:71:e9:c4:e7:64:31:ad:1b:92:08:07:43:b3:86:9f: 69:75:10:9c:85:e1:7a:8e:61:28:ba:ff:9f:3a:95:7e:b5:d0: a9:d9:3b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZhfGKW6fPksIBpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk YzQ1NzZiMTMtOGZiOC00MTczLWE5ZWEtOWE5MmQzYWI1ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7YSDxHneAQV22iXVcey2TQE66PJjg5MVU37 A50ttkxCmPKIMWDX0gtCYZBtfF4zBpRRdog8QZysHr7nmoHIhYHq46Xu+ImptY0B OtszI042/4PcSOX9K/Gn35msrbgZ6NLhAN/MQAY/XRouSwu6TYkNR0UJZLU3a7n6 Qjp96KB2P6F+bZGHV3TaWtOV3IhLUWtswgTR2o60+tsFsehSHeVVRj4VNV/FrA30 PXpe5rXTJuaPDj2IRmVZ3rQbK5Jf9UnDD1HAw7x8Qs8gc1MVWbFVIjLRnJaZu8lb h6WoYvqUZms78iVsQ6AqUN166uRmsjcjy24cC+TY2HyH93+U8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxNdebE2lHEmToEnCF32E2AsL7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmFiMzdiNWQtNTVkYi0z ZjU3LWEwYTYtNWQzM2MzZGRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4zew1YjNbHsU7nPpLS4LgR8OaxsCwIebkHSQZCHKjIYJxJODN6JAFj FXgd12GO3ITK8LqCbwFMBsF1bI9A6Dp6rPurTgsgXTL9O8MnNQOxpcKcr6lfCUkW PgMe+er5MiZB3V7f9JcIlYwCH+kJZsaP5as9o5DF+nIrLeKuKKlnR07zsN8ep4AY JP5XjDI9Jng9lu7h/2Qm6JEaIhQfKTMV7yFCQwRthnPlaLKNekZMOo6fJ3jKFle8 tn8SgocTZDoa4nvFV11YTtjpYo0dNbu7HHyc06sUJTXrvXHpxOdkMa0bkggHQ7OG n2l1EJyF4XqOYSi6/586lX610KnZO6A= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:53 2026 by rpki-client