$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa File: 555e037a-a202-3c23-9d76-142b857e9d3c.roa (raw, json) Hash identifier: X/4s1jg2hK51kQsXRcjaki1IneBhm6+2cQdXUp+BrJY= Subject key identifier: BD:BB:F2:98:64:D6:C5:23:49:59:25:18:36:6B:AB:43:93:46:49:F0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DB46345D7E8D110FC5F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:b4:63:45:d7:e8:d1:10:fc:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c369609b-a774-42f5-802a-8f188e83a715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8d:b1:24:6f:8f:8d:2e:8f:8b:a3:ea:bc:39: 9e:ad:aa:3c:9e:a3:50:ec:12:10:28:34:59:88:4b: 75:42:cf:bf:11:c9:23:37:2e:df:69:82:80:9c:bc: 0c:7f:94:de:de:12:ca:44:78:1a:ab:90:29:29:49: 0e:0d:d9:6b:91:0f:d5:66:46:29:ca:ab:ac:42:6f: 66:17:68:c3:bb:a9:1b:9e:5b:2a:23:9b:7d:b5:b5: fd:5b:84:28:50:03:49:3f:33:e2:2d:06:a8:21:d3: e7:b2:a1:fc:9f:1f:1b:3a:50:2b:99:62:11:4b:6f: a9:5e:d4:74:f2:2c:4f:ee:7f:1d:d0:d1:14:02:74: 2f:7f:94:b2:be:9d:05:b3:c2:20:2a:9d:17:4f:d6: 5d:2a:c9:61:d4:d2:af:04:91:4b:c7:bc:fd:df:f3: ec:a0:c6:db:2d:67:af:28:ae:e4:06:8e:bf:c8:8a: 0c:c1:cd:08:1f:54:0f:1e:46:df:c8:5f:ae:72:b5: ae:f4:5b:d5:17:a8:05:fb:70:2c:79:8b:31:ca:1e: ff:a3:cb:1e:c7:65:eb:fe:d1:8c:15:ae:52:d0:70: 92:b5:e9:e3:dc:72:3a:91:1e:ba:4c:27:bd:b2:22: 2f:b4:75:bf:2e:66:bb:f1:a5:5a:55:a1:2e:1f:ab: b2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BB:F2:98:64:D6:C5:23:49:59:25:18:36:6B:AB:43:93:46:49:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b7:b4:e1:11:d5:98:8e:d2:f0:02:98:8e:32:95:70:08:64: 67:c7:f6:a1:1d:85:85:4f:18:5c:fe:6b:98:28:35:e1:28:ae: 30:af:f8:f2:64:94:13:e6:8a:1f:f7:f9:1d:9c:7c:90:c3:12: 43:f4:8f:8c:67:a9:b9:78:ff:10:f9:5a:4e:15:06:4a:1b:8d: a7:b5:7a:06:a1:21:90:39:88:fa:ea:3b:6d:a6:b4:9d:49:8e: f5:0a:55:a6:66:8c:42:f1:8d:08:23:ab:7b:cb:80:12:5f:6e: 8c:c7:5e:df:4c:1a:de:9d:04:84:f2:76:97:06:80:3a:37:d1: a3:57:48:24:21:eb:cc:78:22:d7:ac:9e:80:2b:8c:68:bf:25: 67:33:86:7a:37:07:b4:eb:f7:2f:15:12:15:d3:ef:83:cb:48: 2b:bd:54:2e:48:ec:8c:82:dc:c7:c9:23:06:c6:f5:6e:e5:de: a6:09:90:2c:51:9d:63:e5:db:3d:c6:5b:5c:47:95:b7:18:6a: c7:e5:eb:9b:37:7b:56:37:44:b9:f7:11:7f:a3:1b:fa:71:0d: df:65:2d:82:88:26:09:5c:13:c7:ec:b9:3c:b0:8b:01:ed:30: d5:d7:40:4a:b6:0e:98:f9:f8:42:25:1c:48:7b:1b:c2:2e:cd: fc:c8:85:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbRjRdfo0RD8X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YzM2OTYwOWItYTc3NC00MmY1LTgwMmEtOGYxODhlODNhNzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk42xJG+PjS6Pi6PqvDmerao8nqNQ7BIQKDRZ iEt1Qs+/EckjNy7faYKAnLwMf5Te3hLKRHgaq5ApKUkODdlrkQ/VZkYpyqusQm9m F2jDu6kbnlsqI5t9tbX9W4QoUANJPzPiLQaoIdPnsqH8nx8bOlArmWIRS2+pXtR0 8ixP7n8d0NEUAnQvf5Syvp0Fs8IgKp0XT9ZdKslh1NKvBJFLx7z93/PsoMbbLWev KK7kBo6/yIoMwc0IH1QPHkbfyF+ucrWu9FvVF6gF+3AseYsxyh7/o8sex2Xr/tGM Fa5S0HCStenj3HI6kR66TCe9siIvtHW/Lma78aVaVaEuH6uy2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL278phk1sUjSVklGDZrq0OTRknwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU1ZTAzN2EtYTIwMi0z YzIzLTlkNzYtMTQyYjg1N2U5ZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu3tOER1ZiO0vACmI4ylXAIZGfH9qEdhYVPGFz+a5goNeEorjCv+PJk lBPmih/3+R2cfJDDEkP0j4xnqbl4/xD5Wk4VBkobjae1egahIZA5iPrqO22mtJ1J jvUKVaZmjELxjQgjq3vLgBJfbozHXt9MGt6dBITydpcGgDo30aNXSCQh68x4Ites noArjGi/JWczhno3B7Tr9y8VEhXT74PLSCu9VC5I7IyC3MfJIwbG9W7l3qYJkCxR nWPl2z3GW1xHlbcYasfl65s3e1Y3RLn3EX+jG/pxDd9lLYKIJglcE8fsuTywiwHt MNXXQEq2Dpj5+EIlHEh7G8IuzfzIhVE= -----END CERTIFICATE-----Generated at Sun Sep 27 18:57:27 2026 by rpki-client