$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa File: 2917b113-9e5f-3763-84e3-6da8775eeb3e.roa (raw, json) Hash identifier: 2fHEXQNxNFRQRslmxNo+rY6tfp2xXjgyM2fblbKAd5M= Subject key identifier: 7D:19:3D:99:89:2F:BA:A0:8A:69:A0:44:9C:A4:3F:8E:D5:D3:96:96 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D9DC2E0E2C523353EB600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9d:c2:e0:e2:c5:23:35:3e:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b6010739-5bba-4808-9cce-95046c10c4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:83:80:79:eb:e6:0e:55:57:0d:2e:f3:c5: 99:82:c2:cf:9b:63:4d:57:1e:e0:1d:0c:be:22:4c: 84:a2:85:7f:0b:17:01:62:42:b5:01:00:b3:a5:b8: 22:37:e0:09:6a:f5:92:88:8d:34:a3:37:7e:7f:82: 43:e4:72:e3:4b:d2:20:13:ea:d1:23:af:88:91:b9: e3:0b:69:87:22:eb:41:1a:b0:43:18:81:3b:86:58: 9e:ce:f6:53:a5:95:1e:12:29:15:a4:78:f0:ee:77: 79:c8:44:cb:b0:a2:04:72:9f:a2:0c:2f:6a:4f:ac: ef:0a:86:01:4a:70:99:3a:a9:fd:26:25:53:3c:34: 56:00:6e:3a:c7:ad:5d:92:28:57:00:ea:85:42:27: 5b:55:a2:ea:20:10:31:42:bd:35:de:b0:69:32:65: 6b:f2:5e:22:07:fa:22:a2:33:c7:67:5f:82:f1:4a: 58:40:e8:3e:5f:c0:f1:63:08:dd:77:c8:26:1c:a9: 58:68:68:fd:ac:af:36:a2:22:91:26:c7:a7:ab:cb: 50:85:d6:8f:8e:39:e6:e8:86:1c:7d:05:72:cc:15: 8f:d0:c1:b0:a2:4a:17:e3:09:e4:44:e5:dc:2d:b9: fb:a2:bc:49:0a:2d:8a:39:ec:6e:0e:df:0c:99:f2: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:19:3D:99:89:2F:BA:A0:8A:69:A0:44:9C:A4:3F:8E:D5:D3:96:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:4b:81:14:cb:01:fb:88:86:0a:c3:9f:82:a3:a8:15:b3:54: c2:0e:25:7f:86:ea:0e:66:16:de:51:33:a9:f4:56:0b:00:ec: 8f:79:3f:ef:fa:49:f4:f9:46:8d:9d:ef:77:cf:5d:99:05:f2: 29:02:62:7e:55:c9:76:9f:ed:4b:89:35:e6:58:32:d2:85:e8: d7:f8:78:c3:d5:a3:dc:90:b7:92:38:7b:35:6c:19:55:a7:36: 1e:dc:f2:38:da:ef:e8:2e:e9:bb:29:e4:1a:39:a0:e4:29:c3: 8d:19:e5:3d:fa:a6:c2:d8:61:25:0d:e2:b6:10:cb:be:0b:a6: c6:06:27:15:5a:8b:c0:ea:08:24:1a:1c:c6:f8:7d:da:20:16: 6a:1f:20:51:0d:68:ae:51:27:90:43:cb:d8:9c:24:a8:1f:f9: 3b:4d:2a:1b:8a:1d:2e:b0:aa:ee:92:de:7b:bb:55:24:38:bb: 7c:0c:57:4d:d9:55:6e:69:d2:29:06:89:fe:9b:52:67:a4:b3: 3e:b0:a0:cb:4e:30:85:38:23:00:c2:f7:0d:0c:17:9a:da:d8: ae:ce:a6:ea:13:7d:66:15:e8:0c:5f:b8:d5:92:59:ff:a2:78: 5b:d5:af:d1:d3:7b:c1:b8:a7:1e:ee:46:76:2e:b8:b6:71:a2: b2:9a:9f:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ3C4OLFIzU+tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjYwMTA3MzktNWJiYS00ODA4LTljY2UtOTUwNDZjMTBjNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng2DgHnr5g5VVw0u88WZgsLPm2NNVx7gHQy+ IkyEooV/CxcBYkK1AQCzpbgiN+AJavWSiI00ozd+f4JD5HLjS9IgE+rRI6+Ikbnj C2mHIutBGrBDGIE7hliezvZTpZUeEikVpHjw7nd5yETLsKIEcp+iDC9qT6zvCoYB SnCZOqn9JiVTPDRWAG46x61dkihXAOqFQidbVaLqIBAxQr013rBpMmVr8l4iB/oi ojPHZ1+C8UpYQOg+X8DxYwjdd8gmHKlYaGj9rK82oiKRJsenq8tQhdaPjjnm6IYc fQVyzBWP0MGwokoX4wnkROXcLbn7orxJCi2KOexuDt8MmfIljwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0ZPZmJL7qgimmgRJykP47V05aWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjkxN2IxMTMtOWU1Zi0z NzYzLTg0ZTMtNmRhODc3NWVlYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5LgRTLAfuIhgrDn4KjqBWzVMIOJX+G6g5mFt5RM6n0VgsA7I95P+/6 SfT5Ro2d73fPXZkF8ikCYn5VyXaf7UuJNeZYMtKF6Nf4eMPVo9yQt5I4ezVsGVWn Nh7c8jja7+gu6bsp5Bo5oOQpw40Z5T36psLYYSUN4rYQy74LpsYGJxVai8DqCCQa HMb4fdogFmofIFENaK5RJ5BDy9icJKgf+TtNKhuKHS6wqu6S3nu7VSQ4u3wMV03Z VW5p0ikGif6bUmeksz6woMtOMIU4IwDC9w0MF5ra2K7OpuoTfWYV6AxfuNWSWf+i eFvVr9HTe8G4px7uRnYuuLZxorKan6w= -----END CERTIFICATE-----Generated at Tue Sep 29 15:11:09 2026 by rpki-client