$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/192335d9-916c-318c-8388-956ea609b14b.roa File: 192335d9-916c-318c-8388-956ea609b14b.roa (raw, json) Hash identifier: M8zeabtyKqEyvgkm5Pj5ZZLbT9i9sVb90M8fekBK6Bk= Subject key identifier: B4:05:64:47:63:73:BA:52:CE:44:E6:80:70:02:1E:FC:5F:6F:41:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D91BBCABA312C66499300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/192335d9-916c-318c-8388-956ea609b14b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:91:bb:ca:ba:31:2c:66:49:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=da7a9e41-244a-454b-a9d7-e3ae0396d7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c1:18:58:a7:1f:0a:83:ce:45:da:71:0a:3b: 0b:87:69:3e:f7:0b:2e:66:16:5e:e2:dd:20:e5:a4: 21:ae:0c:3c:95:32:43:a9:a2:73:a9:9a:2f:30:35: 48:32:26:f4:19:05:be:82:7b:49:00:1e:41:8e:73: a5:63:3c:70:8f:cd:ab:35:48:28:db:2c:b3:60:22: 06:0a:45:e6:a1:2a:b2:b2:1b:52:12:c2:76:37:dc: 1f:0d:fb:f0:90:75:66:de:7b:68:17:d4:39:8c:00: 33:b3:b2:cc:e8:5a:86:12:93:65:1b:9e:ea:d6:dd: 72:b2:18:04:3f:08:33:5d:0e:25:e0:13:13:9c:f1: 3b:dd:91:c0:78:74:a0:db:d8:04:5e:1b:e7:2f:c6: 70:95:0b:9d:55:da:e6:50:d1:34:03:d2:35:a5:93: 1b:59:f3:e4:7d:d7:ec:97:c2:0e:b3:9e:4e:dd:4a: 3f:d1:4d:11:cb:8f:32:68:79:0e:69:46:fb:73:2b: 77:82:99:ad:ca:1d:a7:10:20:fe:3b:bc:20:3e:eb: 80:f0:d1:36:a6:ac:e0:4e:7e:59:59:68:a0:b9:89: ad:66:1e:8a:8e:aa:7e:a7:5b:fa:29:89:9d:40:0c: d3:a4:c8:27:26:0f:c0:42:3d:05:12:8e:b1:32:7d: 2d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:05:64:47:63:73:BA:52:CE:44:E6:80:70:02:1E:FC:5F:6F:41:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/192335d9-916c-318c-8388-956ea609b14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:57:87:ff:f1:15:58:d9:d4:5e:e5:e7:b8:ce:20:ff:e3:ce: 7f:ba:04:d0:56:2b:44:4a:7a:91:34:f8:47:8a:71:d5:24:a7: 32:b0:3c:d6:72:85:8e:da:34:ec:ec:9f:6a:8e:ce:4b:d0:00: 4e:d7:54:4e:94:34:a8:42:07:cd:d8:aa:67:5c:6f:ff:c2:86: ab:0f:c2:b0:c7:42:73:38:93:e0:ed:86:22:eb:05:6c:26:a0: 8b:1c:f1:de:77:ec:ac:26:b5:b6:06:6e:7c:59:11:23:d1:91: e6:a1:fc:68:6e:47:e5:76:f5:85:52:1b:56:c8:7c:3e:2c:c0: e7:9b:97:a5:bf:5f:27:22:b5:f5:e5:1e:90:15:55:c8:1e:82: f7:c5:fe:15:d4:8f:07:e9:c8:72:c5:8e:20:d4:44:41:b2:03: 82:24:21:78:b2:33:40:96:a8:6a:fb:18:22:bb:05:82:73:94: 61:17:77:84:e7:62:3b:3a:89:e6:85:63:43:3b:6c:82:f6:92: f8:4e:15:39:1d:e6:70:f2:b7:1c:58:71:66:41:e8:d0:10:a4: f4:c9:33:21:77:7c:c2:68:3f:d4:e2:58:0a:b3:90:fc:ac:68: 34:00:5b:dc:0d:33:ed:ec:dc:bc:d5:a6:d8:e6:d5:67:c8:a1: 33:fc:1e:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZG7yroxLGZJkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGE3YTllNDEtMjQ0YS00NTRiLWE5ZDctZTNhZTAzOTZkN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMEYWKcfCoPORdpxCjsLh2k+9wsuZhZe4t0g 5aQhrgw8lTJDqaJzqZovMDVIMib0GQW+gntJAB5BjnOlYzxwj82rNUgo2yyzYCIG CkXmoSqyshtSEsJ2N9wfDfvwkHVm3ntoF9Q5jAAzs7LM6FqGEpNlG57q1t1yshgE PwgzXQ4l4BMTnPE73ZHAeHSg29gEXhvnL8ZwlQudVdrmUNE0A9I1pZMbWfPkfdfs l8IOs55O3Uo/0U0Ry48yaHkOaUb7cyt3gpmtyh2nECD+O7wgPuuA8NE2pqzgTn5Z WWiguYmtZh6Kjqp+p1v6KYmdQAzTpMgnJg/AQj0FEo6xMn0tcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQFZEdjc7pSzkTmgHACHvxfb0G0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTkyMzM1ZDktOTE2Yy0z MThjLTgzODgtOTU2ZWE2MDliMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVXh//xFVjZ1F7l57jOIP/jzn+6BNBWK0RKepE0+EeKcdUkpzKwPNZy hY7aNOzsn2qOzkvQAE7XVE6UNKhCB83Yqmdcb//ChqsPwrDHQnM4k+DthiLrBWwm oIsc8d537KwmtbYGbnxZESPRkeah/GhuR+V29YVSG1bIfD4swOebl6W/XycitfXl HpAVVcgegvfF/hXUjwfpyHLFjiDUREGyA4IkIXiyM0CWqGr7GCK7BYJzlGEXd4Tn Yjs6ieaFY0M7bIL2kvhOFTkd5nDytxxYcWZB6NAQpPTJMyF3fMJoP9TiWAqzkPys aDQAW9wNM+3s3LzVptjm1WfIoTP8Hu8= -----END CERTIFICATE-----Generated at Sat Sep 26 12:38:46 2026 by rpki-client