$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa File: 026b8b08-d03f-336f-8c9f-25cac406fa0b.roa (raw, json) Hash identifier: m72YnmtnA7fooQJWOtVe4EHCwZ2g9TzdFLpOgcDQPyg= Subject key identifier: 3A:E5:BA:67:85:72:C9:BB:B8:FE:84:B6:89:1A:E8:88:C1:38:25:E5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DDCC261E8D9977A34B638 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 70.32.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:dc:c2:61:e8:d9:97:7a:34:b6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=af9f52f9-10a8-4edb-9baf-c97696f562a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:38:91:cb:d5:f5:68:89:76:e5:17:fa:fc:35: b3:74:19:2f:2e:1b:d0:5b:fc:fe:55:e0:90:f9:af: 56:cf:e8:26:42:41:01:a5:1d:2d:1a:54:b4:91:7e: a6:ef:ed:4d:5b:21:18:0d:79:5c:1c:97:72:aa:b6: 4f:16:9f:85:40:68:df:21:3d:1c:73:91:76:7d:af: 55:18:7f:08:d8:a4:e0:13:dd:c6:60:81:e4:ef:fd: 79:b7:4f:e7:4d:d2:14:10:ef:e6:4e:ce:19:26:ba: 63:9e:30:3a:4a:de:eb:74:f8:16:f5:9f:df:19:cb: 64:f3:bb:b0:e0:40:02:c0:f6:32:10:fd:08:45:c2: 14:95:78:65:56:cc:b3:76:64:1e:72:55:ca:1b:a5: 05:45:dc:18:8b:0f:7d:ad:13:e5:8a:74:a2:17:38: 0a:19:bb:93:91:db:f6:0a:b8:45:d2:14:58:7f:d2: 6f:a8:54:c7:3c:af:c8:4e:7a:87:ed:5d:7b:98:39: 3a:3a:e5:2c:43:9d:7f:34:e5:1e:e3:c2:c0:9b:01: 6c:45:1a:a2:04:db:1b:2c:8a:e6:bc:e6:1a:f6:c2: f2:ae:ae:ba:7c:57:09:2e:51:b0:19:e4:d0:02:27: e8:e9:2b:ea:7e:3b:bd:de:8b:9c:21:d7:17:0b:ce: 23:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E5:BA:67:85:72:C9:BB:B8:FE:84:B6:89:1A:E8:88:C1:38:25:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:10:11:81:be:ff:f7:f5:b6:79:fe:75:ca:10:70:99:93:0d: a8:27:f1:9a:e5:b7:4e:8d:01:85:ba:4f:7a:31:73:21:5e:89: e4:a1:86:30:28:e9:04:7f:09:fb:73:1b:97:93:12:b1:fd:73: 2b:ad:70:0f:3e:6e:6a:89:fa:af:4d:20:aa:1a:64:e6:e5:fc: b1:84:1c:3c:73:7e:a1:8d:51:91:2f:8c:14:35:43:00:3e:05: de:28:56:3e:b5:ff:dc:8c:1d:55:21:f7:63:04:03:57:f6:33: 8d:e0:95:0f:85:c9:22:58:d1:cc:3b:0b:61:ee:36:67:1e:0a: 6d:b2:9f:4f:de:a1:bd:66:32:23:1b:53:5e:42:2b:68:9d:e4: f4:c5:12:44:8b:0b:f9:18:85:82:99:5f:b7:66:94:ec:41:b8: f6:a5:b4:62:6a:b7:5d:34:f6:a6:7c:fd:89:90:da:d1:86:d3: 6e:7d:3a:1b:15:23:f9:dd:93:6e:ee:4b:48:91:23:4d:ec:23: 3b:8f:5a:c0:5e:29:13:f4:70:e3:92:c5:e2:2b:3c:9c:66:05: 64:aa:0b:c1:41:a1:88:ee:10:ed:e8:c4:28:d2:91:f8:9c:4e: 72:b7:ff:d2:a6:0d:0c:54:09:72:69:b3:5b:87:aa:8f:99:b4: 10:c8:44:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdzCYejZl3o0tjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWY5ZjUyZjktMTBhOC00ZWRiLTliYWYtYzk3Njk2ZjU2MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DiRy9X1aIl25Rf6/DWzdBkvLhvQW/z+VeCQ +a9Wz+gmQkEBpR0tGlS0kX6m7+1NWyEYDXlcHJdyqrZPFp+FQGjfIT0cc5F2fa9V GH8I2KTgE93GYIHk7/15t0/nTdIUEO/mTs4ZJrpjnjA6St7rdPgW9Z/fGctk87uw 4EACwPYyEP0IRcIUlXhlVsyzdmQeclXKG6UFRdwYiw99rRPlinSiFzgKGbuTkdv2 CrhF0hRYf9JvqFTHPK/ITnqH7V17mDk6OuUsQ51/NOUe48LAmwFsRRqiBNsbLIrm vOYa9sLyrq66fFcJLlGwGeTQAifo6Svqfju93oucIdcXC84jmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrlumeFcsm7uP6Etoka6IjBOCXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI2YjhiMDgtZDAzZi0z MzZmLThjOWYtMjVjYWM0MDZmYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0QEYG+//f1tnn+dcoQcJmTDagn8Zrlt06NAYW6T3oxcyFeieShhjAo 6QR/CftzG5eTErH9cyutcA8+bmqJ+q9NIKoaZObl/LGEHDxzfqGNUZEvjBQ1QwA+ Bd4oVj61/9yMHVUh92MEA1f2M43glQ+FySJY0cw7C2HuNmceCm2yn0/eob1mMiMb U15CK2id5PTFEkSLC/kYhYKZX7dmlOxBuPaltGJqt1009qZ8/YmQ2tGG0259OhsV I/ndk27uS0iRI03sIzuPWsBeKRP0cOOSxeIrPJxmBWSqC8FBoYjuEO3oxCjSkfic TnK3/9KmDQxUCXJps1uHqo+ZtBDIRJQ= -----END CERTIFICATE-----Generated at Sun Nov 15 11:51:59 2026 by rpki-client