$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ecccfd45-817e-3ca9-89ea-2d4a4c1d6ff4.roa File: ecccfd45-817e-3ca9-89ea-2d4a4c1d6ff4.roa (raw, json) Hash identifier: otODJA+0pdqoZ40ZCHlZd3/HklpYMZMcgLmXPkZRNlI= Subject key identifier: CB:38:EE:B5:5E:78:A2:4D:4C:F1:B9:0A:CC:C4:D4:FC:F2:22:A2:3F Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584DCAFB1E1BAF4E2DD6EB219E68 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ecccfd45-817e-3ca9-89ea-2d4a4c1d6ff4.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 4922 IP address blocks: 70.32.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:1e:1b:af:4e:2d:d6:eb:21:9e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=3013ac18-26f2-434e-8727-a1d9f4d321c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f1:72:1b:93:bd:23:54:b4:c0:c9:8d:b2:31: d8:29:24:86:7d:17:e6:56:ab:e4:18:7f:fe:a7:80: 25:b4:c2:10:0e:ea:5d:70:48:8f:a4:23:e5:09:db: 5f:bc:a7:a3:9d:75:d3:72:83:46:ec:de:ee:65:ae: 43:e1:32:84:28:40:c4:0a:d6:5a:2a:39:3d:e3:46: 54:be:5a:1b:b8:fb:45:ef:4a:10:95:55:c1:70:b7: f2:c9:3f:d6:d9:27:84:63:f6:21:2f:c3:61:f5:84: f8:6f:26:a7:c1:1e:96:ef:46:cb:2e:fe:df:d1:d2: e2:82:15:84:3a:72:3a:2e:9e:e9:3e:f4:d6:01:7c: 90:03:25:d7:fb:58:36:82:e8:ba:87:6e:74:16:3a: 7a:aa:f5:1e:df:5e:09:4d:16:85:5e:96:81:c0:48: 28:e0:d6:9d:63:b8:79:22:48:b0:33:95:8c:91:18: af:18:9f:30:a3:85:94:1c:a2:c2:c5:cb:1e:7a:df: 8e:46:15:f2:59:97:db:36:ca:37:5f:00:23:c9:65: 09:1f:05:b5:cb:a2:d6:76:78:d3:e3:11:a0:d9:52: 38:29:d1:39:18:82:84:44:8c:db:47:5f:f2:db:d8: 49:f2:cb:c5:a1:81:cf:0c:f6:ca:a6:cc:eb:83:3a: 39:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:38:EE:B5:5E:78:A2:4D:4C:F1:B9:0A:CC:C4:D4:FC:F2:22:A2:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ecccfd45-817e-3ca9-89ea-2d4a4c1d6ff4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 70.32.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:56:1f:9c:56:0d:2f:4c:c4:70:82:bf:6d:75:4f:ba:70:82: 9b:b8:93:b7:c8:96:82:d2:c9:83:fe:df:87:57:5b:52:65:2b: 3a:5e:8d:0e:66:e0:b8:fb:49:b9:62:36:f5:79:34:35:71:6c: 57:4d:bd:a0:2c:24:84:54:e5:51:d9:23:44:da:31:82:30:0f: 4a:fd:01:2b:68:73:18:7b:bc:95:f8:5e:e3:ec:be:76:14:11: 3e:02:74:ff:36:52:19:6b:c7:37:86:1d:43:a3:b5:c9:70:91: d6:00:7a:42:0e:e1:58:57:14:13:fd:21:eb:b5:e1:9b:48:8e: 1f:90:80:1e:52:78:53:90:48:e9:7c:81:04:28:8b:14:ef:d4: 0d:b2:21:a0:e6:ab:da:87:02:0c:46:df:6b:19:51:ac:d3:d3: ee:32:09:23:d2:5d:46:fa:a8:13:6e:34:22:f0:1b:7c:ea:26: f3:3d:d8:9d:1e:0c:ac:b6:35:98:e2:07:50:36:91:1f:c7:41: 29:3b:35:6c:2d:83:97:4e:bc:17:a8:20:b9:6a:9b:11:9e:9b: 27:50:91:c9:2a:e2:bb:f2:58:8c:3a:4b:be:cc:c6:23:01:ac: 9b:72:9d:22:75:54:c3:83:cf:0f:d1:1e:83:fa:0f:23:93:19: 8a:e0:f6:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+x4br04t1ushnmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MzAxM2FjMTgtMjZmMi00MzRlLTg3MjctYTFkOWY0ZDMyMWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/FyG5O9I1S0wMmNsjHYKSSGfRfmVqvkGH/+ p4AltMIQDupdcEiPpCPlCdtfvKejnXXTcoNG7N7uZa5D4TKEKEDECtZaKjk940ZU vlobuPtF70oQlVXBcLfyyT/W2SeEY/YhL8Nh9YT4byanwR6W70bLLv7f0dLighWE OnI6Lp7pPvTWAXyQAyXX+1g2gui6h250Fjp6qvUe314JTRaFXpaBwEgo4NadY7h5 IkiwM5WMkRivGJ8wo4WUHKLCxcseet+ORhXyWZfbNso3XwAjyWUJHwW1y6LWdnjT 4xGg2VI4KdE5GIKERIzbR1/y29hJ8svFoYHPDPbKpszrgzo5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs47rVeeKJNTPG5CszE1PzyIqI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvZWNjY2ZkNDUtODE3ZS0z Y2E5LTg5ZWEtMmQ0YTRjMWQ2ZmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpWH5xWDS9MxHCCv211T7pwgpu4k7fIloLSyYP+34dXW1JlKzpejQ5m 4Lj7SbliNvV5NDVxbFdNvaAsJIRU5VHZI0TaMYIwD0r9AStocxh7vJX4XuPsvnYU ET4CdP82UhlrxzeGHUOjtclwkdYAekIO4VhXFBP9Ieu14ZtIjh+QgB5SeFOQSOl8 gQQoixTv1A2yIaDmq9qHAgxG32sZUazT0+4yCSPSXUb6qBNuNCLwG3zqJvM92J0e DKy2NZjiB1A2kR/HQSk7NWwtg5dOvBeoILlqmxGemydQkckq4rvyWIw6S77MxiMB rJtynSJ1VMODzw/RHoP6DyOTGYrg9rU= -----END CERTIFICATE-----Generated at Wed May 13 06:36:59 2026 by rpki-client