$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa File: cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa (raw, json) Hash identifier: YNEG9epYuLAYtk9V6auoPZr6zSsQhKrCk+x9mwzgnig= Subject key identifier: 73:39:C6:19:4D:7D:18:13:CC:69:54:FB:2C:9E:06:81:07:FA:E2:95 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DB46EA4A7F8C05EEB2480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b4:6e:a4:a7:f8:c0:5e:eb:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=64f15bbb-5eeb-43e8-849a-9c0ed81752a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:82:9c:48:0b:a0:b0:cd:fc:33:cc:9b:b7:28: 89:16:cb:3c:e0:27:9a:11:1e:0a:45:7d:1e:df:bd: 54:93:d6:ae:d2:a6:dc:2d:98:d9:32:e9:96:2b:4f: 83:3c:29:78:de:67:82:e9:45:3a:f3:2a:2c:40:99: 30:96:7a:5b:f1:4c:44:d6:c7:8d:2e:16:c6:22:00: bd:10:e7:66:39:67:94:a0:92:e4:bb:1e:4f:17:6f: 96:8e:2c:71:b7:a8:f8:83:96:26:e7:2b:18:14:78: 5e:6c:97:06:2c:93:fb:d2:48:fc:dc:42:01:27:e7: 16:2e:24:a4:4b:a6:5a:d5:a4:d8:54:ab:2a:18:c7: c7:6c:66:07:f2:fd:c9:72:06:a0:0d:83:06:ef:4d: 11:46:9a:2f:c3:3c:03:b7:7f:c9:76:49:90:a7:61: f9:a9:1c:77:12:6d:6d:ea:c7:6c:0d:9d:92:03:72: e3:8e:34:89:09:f1:2a:48:e6:06:ce:ba:17:8b:9b: db:a9:dc:00:8b:c7:b2:fb:7f:49:61:2e:63:d4:f2: 56:77:75:d2:7b:0c:e9:e1:c5:e3:e7:69:61:4d:89: 37:3b:b0:1e:d6:81:68:f7:46:19:b5:42:5c:dc:78: 6e:d1:82:e6:bc:ac:f9:d7:19:b0:d6:49:1a:da:46: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:39:C6:19:4D:7D:18:13:CC:69:54:FB:2C:9E:06:81:07:FA:E2:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:61:18:f1:1f:75:03:ed:d4:93:85:47:5f:e7:f1:44:0d:0b: da:09:04:a6:95:ae:90:e7:f1:87:e6:2d:91:3e:f0:93:bb:03: 2a:49:2e:2e:e4:8e:e4:5d:54:b9:69:c7:23:6b:45:52:fe:c0: 0b:85:48:fc:60:39:bf:ba:a4:ac:b0:14:fb:9b:14:17:ba:35: f8:a5:e7:e1:3a:ff:70:97:3d:8b:ca:16:b9:ca:65:cb:a8:af: 5b:e4:f0:06:2b:a8:48:44:76:70:3a:c5:ad:df:b7:c0:4d:a1: 9c:1b:7e:56:ee:08:56:45:5a:ed:25:ee:58:6e:6b:20:08:6f: 3c:d5:eb:c5:07:25:25:c3:19:9c:ba:da:bf:b6:86:b6:07:b3: b0:02:73:fd:08:9d:df:b9:fc:19:e3:4e:b5:e6:37:d7:d7:c4: f6:e0:cc:ce:cf:cc:74:d3:f1:7e:6a:bb:e5:eb:de:2d:4b:52: cb:80:40:6c:42:e1:21:4a:a7:25:e1:e4:16:c5:d4:2b:24:f7: f0:0d:2c:10:b9:38:e4:b1:c6:2c:dd:18:f3:ba:2f:78:7c:99: 0f:02:d0:88:64:b9:b1:ec:5c:2f:e6:8b:3a:3a:e4:47:5d:de: f4:11:a0:83:74:24:05:a2:b4:3f:12:be:e5:fd:97:39:ad:0c: 5d:3e:90:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbRupKf4wF7rJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NjRmMTViYmItNWVlYi00M2U4LTg0OWEtOWMwZWQ4MTc1MmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4KcSAugsM38M8ybtyiJFss84CeaER4KRX0e 371Uk9au0qbcLZjZMumWK0+DPCl43meC6UU68yosQJkwlnpb8UxE1seNLhbGIgC9 EOdmOWeUoJLkux5PF2+Wjixxt6j4g5Ym5ysYFHhebJcGLJP70kj83EIBJ+cWLiSk S6Za1aTYVKsqGMfHbGYH8v3JcgagDYMG700RRpovwzwDt3/JdkmQp2H5qRx3Em1t 6sdsDZ2SA3LjjjSJCfEqSOYGzroXi5vbqdwAi8ey+39JYS5j1PJWd3XSewzp4cXj 52lhTYk3O7Ae1oFo90YZtUJc3Hhu0YLmvKz51xmw1kka2kZ3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM5xhlNfRgTzGlU+yyeBoEH+uKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Y2YjBkNjAtMTlmZi0z NzQyLTlkNjctZDRkNzNhYWJmOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNhGPEfdQPt1JOFR1/n8UQNC9oJBKaVrpDn8YfmLZE+8JO7AypJLi7k juRdVLlpxyNrRVL+wAuFSPxgOb+6pKywFPubFBe6Nfil5+E6/3CXPYvKFrnKZcuo r1vk8AYrqEhEdnA6xa3ft8BNoZwbflbuCFZFWu0l7lhuayAIbzzV68UHJSXDGZy6 2r+2hrYHs7ACc/0Ind+5/BnjTrXmN9fXxPbgzM7PzHTT8X5qu+Xr3i1LUsuAQGxC 4SFKpyXh5BbF1Csk9/ANLBC5OOSxxizdGPO6L3h8mQ8C0IhkubHsXC/mizo65Edd 3vQRoIN0JAWitD8SvuX9lzmtDF0+kDo= -----END CERTIFICATE-----Generated at Thu Nov 5 19:28:15 2026 by rpki-client