$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa File: 3c659425-4a42-3ef9-8a3f-c568097ff599.roa (raw, json) Hash identifier: l9RwvMz3Hr71rfknJt+YYkAyNcXLBCqI8ZIuahd8Vr8= Subject key identifier: 93:EE:68:B2:52:C1:C1:A3:11:C7:C7:F0:43:CA:DD:E1:AE:27:C2:F1 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584FCE2BD70C40CF2694F54CE680 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa Signing time: Wed 11 Nov 2026 14:00:13 +0000 ROA not before: Wed 11 Nov 2026 14:00:13 +0000 ROA not after: Tue 09 Feb 2027 14:00:13 +0000 asID: 395383 IP address blocks: 70.34.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ce:2b:d7:0c:40:cf:26:94:f5:4c:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Nov 11 14:00:13 2026 GMT Not After : Feb 9 14:00:13 2027 GMT Subject: CN=7136a5c7-42ec-4c82-a803-e52e9b2cfdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:84:fb:68:42:ab:25:92:f1:84:17:04:85: c3:f2:6c:7b:82:b2:bd:d7:e0:c6:e8:ef:a3:14:73: 3c:38:b2:f2:e8:7a:59:40:4d:3b:77:99:1c:d5:06: 90:eb:24:76:fa:d3:3a:b8:0d:7c:2a:4d:cc:11:96: be:5d:76:eb:b0:1b:4f:8f:11:bb:a0:98:c1:f1:bc: e5:7d:ce:20:b2:2b:a8:26:47:38:fa:0b:ff:d1:e0: 0d:b6:cf:ac:4a:84:24:4e:45:ff:af:7c:94:60:7b: 99:20:c7:6e:5e:70:0c:97:71:c5:0b:2f:c6:f3:d8: 26:b8:3f:a6:d7:ec:f7:7d:cf:c6:3d:83:5c:5b:3d: 75:02:a6:70:9a:28:2a:14:c6:1e:ed:29:69:9f:55: 05:94:74:a1:d3:14:d7:51:44:22:75:ec:1e:d6:5f: 2d:f6:b2:b6:65:ad:4c:cc:1a:3c:81:1c:5a:f7:f5: e8:00:cd:21:6e:d5:26:c7:0c:91:c9:2b:96:d2:22: 3f:2a:24:f7:b6:a0:c3:ab:96:84:8d:47:67:6a:7e: e6:12:8c:cb:02:d7:1b:14:09:68:46:ce:d1:a1:a6: b9:33:f0:27:48:48:38:34:bf:77:d2:4d:68:6b:19: 50:79:10:1e:63:77:57:44:8e:be:29:77:b6:c7:52: 37:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EE:68:B2:52:C1:C1:A3:11:C7:C7:F0:43:CA:DD:E1:AE:27:C2:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:92:1a:49:80:9c:4d:66:4f:14:77:07:22:16:b4:7a:e2:ea: b4:73:1e:cf:dd:29:d2:20:02:15:e2:5c:32:0a:3e:55:ef:fd: 0e:7b:e6:78:fa:61:3b:02:1b:ee:5e:12:e6:b8:d9:48:7e:74: c1:c6:55:8a:d9:4f:62:88:b1:d0:a9:3e:8a:ee:aa:fb:8c:bc: 04:13:c7:17:e6:06:74:da:a5:25:11:75:cb:95:9a:ed:9f:48: ee:fc:fa:f4:30:6f:af:17:26:16:56:ff:b9:cd:f8:1f:70:ed: 72:e6:26:4e:13:f9:d9:a2:9e:57:a5:fb:38:be:bb:e0:39:24: 97:af:c0:bf:1c:4b:2e:d2:df:74:87:c5:0a:80:fe:f4:71:76: 04:5d:1b:92:bc:0f:c2:c1:f9:41:9b:c0:70:3e:3b:bc:7c:e5: e0:d4:78:6f:89:ba:db:c9:68:8f:bb:40:29:f9:4b:49:0c:4f: 68:a7:b4:86:36:1f:dd:63:96:d0:4b:38:46:a4:4b:62:7b:0b: 89:92:ee:5d:35:1f:b4:b7:c9:5e:be:79:5c:20:3c:83:e3:8d: e8:30:ec:d3:ed:6a:83:55:d7:47:3e:44:09:0a:85:66:50:6e: 5a:6a:57:1c:35:ef:2c:04:d9:b4:dd:6e:95:d0:3c:85:da:13: 3a:f9:ef:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/OK9cMQM8mlPVM5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI2MTExMTE0MDAxM1oXDTI3MDIwOTE0MDAxM1owLzEtMCsGA1UEAxMk NzEzNmE1YzctNDJlYy00YzgyLWE4MDMtZTUyZTliMmNmZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5CE+2hCqyWS8YQXBIXD8mx7grK91+DG6O+j FHM8OLLy6HpZQE07d5kc1QaQ6yR2+tM6uA18Kk3MEZa+XXbrsBtPjxG7oJjB8bzl fc4gsiuoJkc4+gv/0eANts+sSoQkTkX/r3yUYHuZIMduXnAMl3HFCy/G89gmuD+m 1+z3fc/GPYNcWz11AqZwmigqFMYe7Slpn1UFlHSh0xTXUUQidewe1l8t9rK2Za1M zBo8gRxa9/XoAM0hbtUmxwyRySuW0iI/KiT3tqDDq5aEjUdnan7mEozLAtcbFAlo Rs7Roaa5M/AnSEg4NL930k1oaxlQeRAeY3dXRI6+KXe2x1I3owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPuaLJSwcGjEcfH8EPK3eGuJ8LxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvM2M2NTk0MjUtNGE0Mi0z ZWY5LThhM2YtYzU2ODA5N2ZmNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANaSGkmAnE1mTxR3ByIWtHri6rRzHs/dKdIgAhXiXDIKPlXv/Q575nj6 YTsCG+5eEua42Uh+dMHGVYrZT2KIsdCpPoruqvuMvAQTxxfmBnTapSURdcuVmu2f SO78+vQwb68XJhZW/7nN+B9w7XLmJk4T+dminlel+zi+u+A5JJevwL8cSy7S33SH xQqA/vRxdgRdG5K8D8LB+UGbwHA+O7x85eDUeG+JutvJaI+7QCn5S0kMT2intIY2 H91jltBLOEakS2J7C4mS7l01H7S3yV6+eVwgPIPjjegw7NPtaoNV10c+RAkKhWZQ blpqVxw17ywE2bTdbpXQPIXaEzr570I= -----END CERTIFICATE-----Generated at Sun Nov 15 17:03:25 2026 by rpki-client