$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa File: fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa (raw, json) Hash identifier: erBkJ5ztFI+DoNgJ1v+cnJZkiTORJxCATUsBTsZ753Q= Subject key identifier: 4E:81:05:2B:80:2C:1A:D7:19:38:75:17:7C:1D:AE:C5:E7:67:6D:B2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D893769A3D8471FEB1850 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:89:37:69:a3:d8:47:1f:eb:18:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f293b3d4-243c-4fe1-a2f4-4d205e885b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:72:21:92:4d:8a:51:fc:8b:32:e2:39:4e:c8: fa:a0:20:66:1f:09:23:48:9a:44:99:99:d1:31:ff: f8:4c:31:ce:be:7d:93:8d:de:7c:47:2b:77:98:15: 92:7b:1f:b2:89:64:1f:44:50:f5:76:cb:40:85:7d: 5a:fa:62:29:c1:1c:5e:17:c4:31:c9:67:04:2e:19: 3c:15:bb:85:a1:8f:e3:ec:31:a8:81:2c:e2:35:8f: f6:77:0a:1d:2f:b9:ba:56:62:4e:25:f7:2b:22:05: 1f:cf:86:76:f4:76:46:8b:7e:73:cf:df:fb:9c:66: fb:0f:c9:b0:76:93:41:b7:29:df:2d:30:7d:48:bb: 52:e1:64:c1:a5:5b:8d:38:73:a9:2a:6a:2a:ba:63: 22:32:3f:a2:8f:f6:64:d9:22:6d:9c:7c:9d:81:86: 04:17:77:79:a1:ba:45:b2:6e:0a:ee:5e:40:9f:75: 4a:2b:ac:10:93:50:28:ad:dc:6e:61:99:5e:fc:ad: 85:71:8f:d1:17:0d:da:89:cd:cd:8f:e5:20:23:f6: 8b:05:7f:f9:24:7b:95:30:57:dd:8e:72:a9:4c:52: 13:fa:22:9c:b4:b7:f6:0a:cc:4f:77:1e:50:57:00: c1:b5:07:fd:76:62:9d:40:a8:b0:8d:2a:5b:69:c4: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:81:05:2B:80:2C:1A:D7:19:38:75:17:7C:1D:AE:C5:E7:67:6D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:db:8b:c5:0f:13:8e:3c:b3:db:73:49:63:fc:bf:fe:75:a1: 0f:fd:0d:8b:6c:ed:26:b7:fd:98:11:7d:c6:be:0e:82:2d:12: 8d:45:76:18:68:e0:73:b6:1b:85:90:ed:f3:eb:4d:f4:1b:0d: 26:4d:da:69:72:c9:c5:08:89:3b:17:2a:46:46:41:18:9f:43: d6:7d:62:36:d2:12:bd:4f:c4:03:af:e2:1d:ad:28:72:f8:a0: 7a:ee:98:06:bd:04:1f:f4:d9:aa:9c:12:41:f9:eb:7e:08:01: 3d:79:5c:cb:5e:d6:cd:35:be:63:07:29:54:39:3a:48:97:08: de:73:e8:fb:53:7c:c4:72:14:fc:46:90:fb:1e:61:a0:85:b8: e3:33:2e:45:eb:de:ab:9d:5b:89:f4:73:4f:84:af:87:5c:ec: 4f:8a:cb:ca:c8:9e:da:1b:34:0e:88:8f:9f:fa:31:e8:d3:04: 0b:bb:85:6b:dd:6c:cf:2d:92:1e:87:d4:76:76:e0:85:b8:40: 8d:d9:bc:b7:f1:bc:13:3d:d4:39:74:f4:4d:72:25:b0:01:72: f0:30:b6:a4:4d:72:88:73:5d:45:d8:cb:3e:48:3b:dc:b5:4d: 89:f3:d8:99:ff:98:e1:9c:5a:3a:3e:ba:de:73:96:bc:92:39: 6e:3c:e7:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPYk3aaPYRx/rGFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjI5M2IzZDQtMjQzYy00ZmUxLWEyZjQtNGQyMDVlODg1YjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXIhkk2KUfyLMuI5Tsj6oCBmHwkjSJpEmZnR Mf/4TDHOvn2Tjd58Ryt3mBWSex+yiWQfRFD1dstAhX1a+mIpwRxeF8QxyWcELhk8 FbuFoY/j7DGogSziNY/2dwodL7m6VmJOJfcrIgUfz4Z29HZGi35zz9/7nGb7D8mw dpNBtynfLTB9SLtS4WTBpVuNOHOpKmoqumMiMj+ij/Zk2SJtnHydgYYEF3d5obpF sm4K7l5An3VKK6wQk1AordxuYZle/K2FcY/RFw3aic3Nj+UgI/aLBX/5JHuVMFfd jnKpTFIT+iKctLf2CsxPdx5QVwDBtQf9dmKdQKiwjSpbacRQsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6BBSuALBrXGTh1F3wdrsXnZ22yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmU0MzE5NmQtMGQ1ZC0z ZDhiLThiYjctNjQzNTZmYmE4NzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLbi8UPE448s9tzSWP8v/51oQ/9DYts7Sa3/ZgRfca+DoItEo1Fdhho 4HO2G4WQ7fPrTfQbDSZN2mlyycUIiTsXKkZGQRifQ9Z9YjbSEr1PxAOv4h2tKHL4 oHrumAa9BB/02aqcEkH5634IAT15XMte1s01vmMHKVQ5OkiXCN5z6PtTfMRyFPxG kPseYaCFuOMzLkXr3qudW4n0c0+Er4dc7E+Ky8rIntobNA6Ij5/6MejTBAu7hWvd bM8tkh6H1HZ24IW4QI3ZvLfxvBM91Dl09E1yJbABcvAwtqRNcohzXUXYyz5IO9y1 TYnz2Jn/mOGcWjo+ut5zlrySOW485zg= -----END CERTIFICATE-----Generated at Thu Nov 5 18:56:11 2026 by rpki-client