$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa File: fa6d7785-b363-37e6-834e-f8ca6302050e.roa (raw, json) Hash identifier: TcD44bYASJ8MptXlSGIpOzYQ1QjxJasPcEGGqFYGw9I= Subject key identifier: 25:D1:89:31:5D:96:8F:90:CD:0E:F3:C2:89:88:07:04:F7:B5:97:B8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DD8BC67CA8BCDCE279E40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d8:bc:67:ca:8b:cd:ce:27:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a6edee49-b733-4305-9a90-6a0d62550c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b8:06:3e:74:bd:fc:a5:e0:82:ea:f5:b6:21: 4d:24:e1:dd:2a:e4:bf:fd:bc:83:3a:68:58:15:b0: eb:38:cd:14:5a:2c:dc:93:01:a4:a6:3d:08:65:da: d6:3f:df:ce:3e:10:80:2b:e1:31:1b:2a:54:f1:09: 76:9f:f3:13:09:25:56:9f:47:d6:ce:d7:ba:5b:4e: f4:03:61:37:bc:f0:3b:26:36:3b:6f:6a:7b:78:7e: e4:8a:c8:7c:cf:90:44:ef:27:cc:d0:dc:d0:51:c2: ad:7f:f3:99:0b:6a:58:b7:56:24:3c:74:76:83:2b: b9:9f:4e:8c:92:f9:b0:90:ff:6a:21:50:8c:95:28: 75:ca:8b:70:ea:27:4c:a6:5b:4a:e1:14:3e:44:40: 65:56:5a:20:6e:73:44:ac:0e:aa:1a:7b:51:98:af: 95:94:3d:ec:69:c6:a3:2e:86:00:1f:40:6f:d4:ae: 71:0d:51:3d:e9:a3:2b:e4:d9:34:da:9e:da:97:f8: 3a:1d:b0:5e:1b:82:b8:3b:d5:60:dc:56:cb:ec:d2: c8:4c:25:bd:d1:c5:1b:88:28:84:c0:13:58:5a:f8: de:b9:e6:26:f0:ce:7f:ec:e6:ea:e1:c4:4c:a4:30: ca:64:85:be:55:bf:5e:1c:07:ba:be:0b:2c:b8:c5: fd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D1:89:31:5D:96:8F:90:CD:0E:F3:C2:89:88:07:04:F7:B5:97:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0d:64:a1:24:74:d0:99:28:08:97:ef:72:14:b8:a7:47:91: 10:ab:bb:67:69:77:56:48:d2:2c:52:83:f1:2d:47:f9:db:55: cc:31:ca:b6:ef:4e:0b:7b:55:52:78:e7:84:c4:39:e4:9a:c1: 1a:16:03:84:4b:dc:ba:89:fd:de:c5:77:18:56:45:0a:95:4a: f7:47:05:2b:99:bc:6b:ca:17:f7:b5:ca:15:4f:75:13:06:2b: 5a:a3:c8:a6:87:67:dc:b6:b7:c4:3d:36:a0:b0:41:24:f5:55: e2:a8:a2:fe:db:38:f0:16:9a:22:1f:2f:bf:a8:af:dc:66:80: ba:e1:56:ae:ba:3c:ff:55:ab:d9:2f:f0:d2:6a:7b:7b:1f:d0: 35:db:93:58:1a:99:86:d5:45:1a:35:31:6e:55:d8:2f:bf:10: b7:cf:90:f3:6c:d2:2f:14:e6:ee:cf:43:70:02:c4:dc:cd:3d: 2d:84:49:37:f7:5c:4f:06:ce:4e:28:75:97:dc:b0:ee:75:26: cd:75:c0:8e:32:a6:bd:1f:ee:7b:6b:e3:65:22:29:20:ee:c7: e1:c7:cd:a1:c2:a3:4d:02:6c:a7:35:e1:46:9d:77:5c:bd:9b: 39:91:89:0c:74:4d:0e:c5:6b:33:71:c7:07:f4:16:17:71:ce: 20:ba:ef:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdi8Z8qLzc4nnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTZlZGVlNDktYjczMy00MzA1LTlhOTAtNmEwZDYyNTUwYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7gGPnS9/KXggur1tiFNJOHdKuS//byDOmhY FbDrOM0UWizckwGkpj0IZdrWP9/OPhCAK+ExGypU8Ql2n/MTCSVWn0fWzte6W070 A2E3vPA7JjY7b2p7eH7kish8z5BE7yfM0NzQUcKtf/OZC2pYt1YkPHR2gyu5n06M kvmwkP9qIVCMlSh1yotw6idMpltK4RQ+REBlVlogbnNErA6qGntRmK+VlD3sacaj LoYAH0Bv1K5xDVE96aMr5Nk02p7al/g6HbBeG4K4O9Vg3FbL7NLITCW90cUbiCiE wBNYWvjeueYm8M5/7Obq4cRMpDDKZIW+Vb9eHAe6vgssuMX99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXRiTFdlo+QzQ7zwomIBwT3tZe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmE2ZDc3ODUtYjM2My0z N2U2LTgzNGUtZjhjYTYzMDIwNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkNZKEkdNCZKAiX73IUuKdHkRCru2dpd1ZI0ixSg/EtR/nbVcwxyrbv Tgt7VVJ454TEOeSawRoWA4RL3LqJ/d7FdxhWRQqVSvdHBSuZvGvKF/e1yhVPdRMG K1qjyKaHZ9y2t8Q9NqCwQST1VeKoov7bOPAWmiIfL7+or9xmgLrhVq66PP9Vq9kv 8NJqe3sf0DXbk1gamYbVRRo1MW5V2C+/ELfPkPNs0i8U5u7PQ3ACxNzNPS2ESTf3 XE8Gzk4odZfcsO51Js11wI4ypr0f7ntr42UiKSDux+HHzaHCo00CbKc14Uadd1y9 mzmRiQx0TQ7FazNxxwf0FhdxziC675g= -----END CERTIFICATE-----Generated at Sat Sep 26 06:08:55 2026 by rpki-client