$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa File: 43659337-d3a9-39a2-9081-bbcafeb0d57d.roa (raw, json) Hash identifier: h59oA6Lmw2AE2vZ3XgWmiLwuVBBHO788om6+zitTzGI= Subject key identifier: 66:FA:60:28:01:0C:6C:12:97:8F:63:59:62:22:41:19:05:C0:92:32 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DC50D0BF5E3147EEA04C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:c5:0d:0b:f5:e3:14:7e:ea:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8d417085-00c6-4039-861e-9db5ec4ed326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:a7:49:bc:09:62:23:7d:16:06:f2:5c:c0: 3c:42:ed:00:59:90:9e:e4:09:2b:1f:d5:a8:c2:6a: 03:c6:97:79:77:af:4a:96:d0:73:2e:98:1e:f3:a3: 73:48:74:0c:f5:be:79:a2:03:ba:c8:f2:84:02:cd: d6:65:c4:05:5e:a3:0d:c9:73:36:0a:78:63:e6:bc: 93:ae:d7:fb:f0:4d:f3:10:23:c9:b7:e6:28:d8:4b: af:51:4a:9d:e5:97:a9:83:fc:cd:9f:a2:d7:40:39: 44:98:d5:1e:1e:80:c0:a0:7c:36:a4:61:d3:d6:af: 7e:f0:22:dd:6b:b9:38:38:19:ed:25:ef:58:52:8f: be:13:de:1f:c9:0b:7e:b1:08:4d:e4:84:b6:04:00: 85:73:2a:bd:33:47:72:3a:c4:4a:d6:27:f7:8f:bd: f5:c5:7a:e2:10:d9:9f:ee:46:d6:c3:8a:2e:6f:45: f5:87:ea:08:37:ee:e6:9b:8b:28:56:ff:53:9a:d1: 56:0c:b7:75:04:9e:95:47:c7:d2:8c:ac:4d:f1:6a: ce:6e:71:87:bc:2c:d4:62:75:6a:51:31:ec:16:86: 54:56:1a:35:b8:6c:2a:97:48:ce:30:7f:30:6b:c8: ee:74:96:3b:f9:7f:e7:d1:58:e2:53:2d:23:a5:0e: 93:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FA:60:28:01:0C:6C:12:97:8F:63:59:62:22:41:19:05:C0:92:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b6:16:7b:30:2b:f2:03:85:47:50:df:11:56:e7:4f:af:53: ac:a4:e6:ea:c9:90:65:d1:28:85:96:df:19:57:3d:d9:2c:92: 65:59:0e:8c:2c:ce:e7:41:a3:91:94:8e:b1:e8:47:24:f6:ac: 9f:ed:2c:2a:24:7e:64:0f:c4:f9:f1:4f:c6:39:f2:6f:84:12: 67:99:e3:4a:bb:0d:d9:d2:25:d9:0c:7b:02:29:61:55:29:e7: 2f:41:52:16:dd:49:bd:63:3c:da:b1:4d:39:0e:05:44:d8:19: 71:29:b8:96:31:45:17:af:4f:4b:6f:7e:05:d2:9f:9f:64:6b: f2:50:60:8b:1c:1f:1f:f8:22:41:61:a5:85:ed:2e:87:44:55: 54:b5:d8:64:f8:93:63:81:2f:8b:04:c9:ce:cc:ca:32:95:e7: 3c:c7:ba:a6:1b:ea:1c:b8:3d:3f:90:14:4d:6d:82:6d:36:e1: af:82:9b:f7:d0:87:03:5d:cc:b6:83:ce:c3:41:51:ed:59:ef: 06:7d:0c:35:76:62:3b:63:d9:11:e8:ac:67:af:fe:7a:14:3b: 60:4a:be:25:3a:17:aa:39:09:ac:67:b0:b2:1a:fe:70:cc:38: 4f:68:67:63:3b:99:26:13:fe:03:32:34:23:ba:a0:d0:48:e0: 15:68:c9:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcUNC/XjFH7qBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OGQ0MTcwODUtMDBjNi00MDM5LTg2MWUtOWRiNWVjNGVkMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmqnSbwJYiN9FgbyXMA8Qu0AWZCe5AkrH9Wo wmoDxpd5d69KltBzLpge86NzSHQM9b55ogO6yPKEAs3WZcQFXqMNyXM2Cnhj5ryT rtf78E3zECPJt+Yo2EuvUUqd5Zepg/zNn6LXQDlEmNUeHoDAoHw2pGHT1q9+8CLd a7k4OBntJe9YUo++E94fyQt+sQhN5IS2BACFcyq9M0dyOsRK1if3j731xXriENmf 7kbWw4oub0X1h+oIN+7mm4soVv9TmtFWDLd1BJ6VR8fSjKxN8WrObnGHvCzUYnVq UTHsFoZUVho1uGwql0jOMH8wa8judJY7+X/n0VjiUy0jpQ6TEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb6YCgBDGwSl49jWWIiQRkFwJIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDM2NTkzMzctZDNhOS0z OWEyLTkwODEtYmJjYWZlYjBkNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW2FnswK/IDhUdQ3xFW50+vU6yk5urJkGXRKIWW3xlXPdkskmVZDows zudBo5GUjrHoRyT2rJ/tLCokfmQPxPnxT8Y58m+EEmeZ40q7DdnSJdkMewIpYVUp 5y9BUhbdSb1jPNqxTTkOBUTYGXEpuJYxRRevT0tvfgXSn59ka/JQYIscHx/4IkFh pYXtLodEVVS12GT4k2OBL4sEyc7MyjKV5zzHuqYb6hy4PT+QFE1tgm024a+Cm/fQ hwNdzLaDzsNBUe1Z7wZ9DDV2Yjtj2RHorGev/noUO2BKviU6F6o5CaxnsLIa/nDM OE9oZ2M7mSYT/gMyNCO6oNBI4BVoyWI= -----END CERTIFICATE-----Generated at Sun Nov 15 10:42:12 2026 by rpki-client