$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa File: 16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa (raw, json) Hash identifier: x6KEba98ORFM9dsjX93OOV6hj05Etayd7g534BmTMkY= Subject key identifier: AE:A4:5E:38:A9:90:B0:6C:79:D3:19:A4:62:12:75:88:BF:03:CB:DB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D9F9E53E608B60B45C380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9f:9e:53:e6:08:b6:0b:45:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=06aeef36-7089-410f-b49f-e709d900939f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:9a:a5:03:0a:1c:d1:91:6f:f0:1b:e2:90: 0f:49:80:2a:23:b0:16:26:47:f4:12:3b:8e:5d:ff: b8:67:9d:80:8d:86:be:d5:85:db:6c:4b:61:d4:93: 76:be:65:1f:f7:95:ab:70:9d:50:08:4d:68:b4:c0: df:fa:c6:d0:b5:7c:49:d2:d6:3f:c2:dd:28:06:b6: 80:f1:00:6d:63:ec:f3:eb:0d:3e:b6:c5:50:d3:4b: 43:76:9f:3b:ce:84:fe:ef:4d:db:bc:39:33:9e:fb: 4d:30:18:fd:93:1c:e4:90:9b:fc:be:b5:8c:2a:1a: fd:04:a0:88:c5:29:0d:66:e3:b1:65:8b:48:f3:61: 00:12:d8:ff:68:89:fc:ef:d5:d9:cb:2b:7d:93:46: de:0b:55:20:80:47:89:74:f3:d6:f7:8b:1b:f2:44: f7:da:c3:96:0b:2b:b9:b3:e3:c8:02:91:29:49:37: 25:7d:00:aa:98:4a:21:79:84:7b:da:f2:95:84:0f: ad:3b:08:10:60:ea:ec:dc:d3:7b:d3:e8:9a:56:25: 8d:6c:76:be:d7:8a:37:6e:f1:1d:78:bc:38:e7:77: f1:f4:84:e5:bb:91:cf:af:64:b9:92:16:5a:a0:e3: c2:82:d1:47:10:83:e4:50:fc:57:f9:ce:d6:83:bb: 54:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A4:5E:38:A9:90:B0:6C:79:D3:19:A4:62:12:75:88:BF:03:CB:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4e:0d:63:43:c4:f5:29:7b:4a:04:f7:ce:eb:06:e1:21:1c: 30:61:5e:39:e2:52:49:37:e3:7a:13:8d:31:9a:f5:41:a3:5b: 71:cb:80:11:85:58:04:87:4d:51:93:de:06:19:ca:a5:00:58: 68:e2:1d:4d:eb:b1:64:3e:e2:86:99:75:8b:24:2a:c5:f0:7d: 34:17:9a:b2:83:fb:69:7e:96:dd:dc:bd:f0:e8:83:7b:ea:f6: 9e:30:56:c8:0b:c2:19:19:5d:d0:ca:72:15:eb:ca:f6:d4:cd: 34:13:bc:f9:b5:3a:4a:f7:ae:04:5b:a3:d8:7f:51:bb:db:04: c7:89:79:a0:6c:56:20:fc:f0:71:1d:65:d9:bd:df:ee:76:f9: 17:18:6a:d7:e5:c0:42:b6:3c:e0:7d:d1:7e:6e:d1:b4:d2:6e: 46:23:25:f3:05:fb:8a:59:f3:86:8b:44:09:91:32:de:49:c8: c3:05:23:51:df:cd:7e:97:db:5b:f7:33:28:c0:b2:c3:f3:06: 43:89:7f:b2:c8:c5:2e:3c:82:7b:bd:52:3d:d7:72:c5:f9:31: 35:ed:4a:ef:b3:65:53:e3:67:ed:f4:9b:07:51:f0:03:9f:94: 85:df:85:4d:c8:bb:89:f3:2e:19:9b:db:00:ef:0c:64:11:15: 24:6b:fb:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ+eU+YItgtFw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDZhZWVmMzYtNzA4OS00MTBmLWI0OWYtZTcwOWQ5MDA5MzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06apQMKHNGRb/Ab4pAPSYAqI7AWJkf0EjuO Xf+4Z52AjYa+1YXbbEth1JN2vmUf95WrcJ1QCE1otMDf+sbQtXxJ0tY/wt0oBraA 8QBtY+zz6w0+tsVQ00tDdp87zoT+703bvDkznvtNMBj9kxzkkJv8vrWMKhr9BKCI xSkNZuOxZYtI82EAEtj/aIn879XZyyt9k0beC1UggEeJdPPW94sb8kT32sOWCyu5 s+PIApEpSTclfQCqmEoheYR72vKVhA+tOwgQYOrs3NN70+iaViWNbHa+14o3bvEd eLw453fx9ITlu5HPr2S5khZaoOPCgtFHEIPkUPxX+c7Wg7tU+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6kXjipkLBsedMZpGISdYi/A8vbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTZlMWFjODEtODBhOS0z ZGVlLTliZmEtYThhMGQzMjg1MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJODWNDxPUpe0oE987rBuEhHDBhXjniUkk343oTjTGa9UGjW3HLgBGF WASHTVGT3gYZyqUAWGjiHU3rsWQ+4oaZdYskKsXwfTQXmrKD+2l+lt3cvfDog3vq 9p4wVsgLwhkZXdDKchXryvbUzTQTvPm1Okr3rgRbo9h/UbvbBMeJeaBsViD88HEd Zdm93+52+RcYatflwEK2POB90X5u0bTSbkYjJfMF+4pZ84aLRAmRMt5JyMMFI1Hf zX6X21v3MyjAssPzBkOJf7LIxS48gnu9Uj3XcsX5MTXtSu+zZVPjZ+30mwdR8AOf lIXfhU3Iu4nzLhmb2wDvDGQRFSRr+3o= -----END CERTIFICATE-----Generated at Sat Sep 26 14:20:23 2026 by rpki-client