$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b001049-2767-39ce-b192-9f580ee34804.roa File: 5b001049-2767-39ce-b192-9f580ee34804.roa (raw, json) Hash identifier: 5hpfuE0LDIcMNp/YikbxgEg7Yy3JupeVHQezDCEf1gs= Subject key identifier: E7:CC:7D:20:77:B9:57:62:F7:F0:75:0C:52:19:B8:31:2C:CD:2D:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DCFD57215D23220E23300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b001049-2767-39ce-b192-9f580ee34804.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:cf:d5:72:15:d2:32:20:e2:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=328841e5-d2b6-4286-a275-e9eeafc633be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:b8:24:a2:98:93:87:59:8a:2a:57:ab:cd: 96:d1:9c:5b:27:72:f9:3f:06:c9:13:74:9f:cf:7e: 80:5c:71:35:13:5d:5e:c2:c9:e3:69:e9:21:3f:bd: dc:9f:8b:5d:97:43:49:98:18:49:53:ac:3b:cd:5b: d9:aa:96:bb:84:ed:12:7e:db:40:f0:a3:f6:71:23: 71:bc:ba:5d:d9:b1:5b:69:df:e8:96:22:f8:e9:6d: 2f:02:18:11:24:7f:e8:65:c0:0b:ef:fb:54:c1:de: d2:1d:ca:f4:23:bd:21:84:52:c7:7b:d8:2f:dd:1a: d4:96:99:90:3f:4a:67:fd:d3:1e:77:2c:6b:8c:be: cb:83:2f:de:e6:1a:be:8e:02:fb:5f:f9:e5:9b:52: 2c:ea:c0:27:17:d2:c3:7d:6e:77:58:62:1e:29:4d: 7c:4a:97:37:3b:97:7c:a9:77:4d:11:ee:bb:87:eb: e2:c7:f0:be:6a:64:3e:ab:a5:5b:7f:cc:24:2b:b4: 1c:6f:6c:73:c7:76:6f:0d:eb:19:7d:f4:d9:84:80: 93:ea:72:7d:19:df:4b:3b:bc:1f:3c:33:ae:13:5d: e2:82:8a:42:46:39:ff:61:32:84:9c:58:81:0e:55: 61:e9:0a:7c:7e:45:93:fe:dd:5e:a7:74:a5:66:d2: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CC:7D:20:77:B9:57:62:F7:F0:75:0C:52:19:B8:31:2C:CD:2D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b001049-2767-39ce-b192-9f580ee34804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:91:69:23:6d:d7:dd:e5:c4:dd:99:95:15:e6:1f:97:87:00: c1:09:dd:cc:79:c6:78:45:4b:40:f8:de:ae:6e:39:f2:b6:ad: 7f:19:1b:07:e6:1d:0c:a8:fd:3e:86:1e:68:4f:32:8a:25:40: 2b:cf:23:89:a4:4b:04:19:2c:e2:e7:99:f6:3a:eb:4a:b8:82: c6:3d:c3:93:f8:48:7c:f3:b6:2d:40:b5:e0:df:7e:07:12:f9: e4:7c:20:11:6e:ff:e0:9c:92:d7:22:85:7c:97:e9:9d:6b:12: a1:6e:34:5f:a1:56:17:4b:ca:de:1d:1e:7b:00:f8:38:37:29: 91:20:dc:d9:61:e6:dc:d9:b1:10:73:9c:14:f7:b9:5e:17:93: 65:69:f1:f9:8b:90:22:cb:a9:e5:95:32:36:ec:b8:f1:0c:9d: 1d:d2:9a:a7:00:c7:ec:d4:3f:8d:bd:74:8d:94:b9:0f:c2:a8: 9d:bb:f7:06:e4:88:89:b3:28:2d:b5:a4:d2:eb:99:a4:3d:5a: 95:e1:2f:91:ca:fc:43:35:a9:c4:5c:ab:47:3d:cd:93:1d:7f: b6:3f:a4:7e:85:7b:bd:e3:e7:f7:47:0b:cc:af:a5:a0:a8:59: 15:6f:a5:b3:6b:a2:ef:81:37:7e:dc:b9:9d:b4:eb:79:ed:f9: ca:74:65:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPc/VchXSMiDiMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzI4ODQxZTUtZDJiNi00Mjg2LWEyNzUtZTllZWFmYzYzM2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBu4JKKYk4dZiipXq82W0ZxbJ3L5PwbJE3Sf z36AXHE1E11ewsnjaekhP73cn4tdl0NJmBhJU6w7zVvZqpa7hO0SfttA8KP2cSNx vLpd2bFbad/oliL46W0vAhgRJH/oZcAL7/tUwd7SHcr0I70hhFLHe9gv3RrUlpmQ P0pn/dMedyxrjL7Lgy/e5hq+jgL7X/nlm1Is6sAnF9LDfW53WGIeKU18Spc3O5d8 qXdNEe67h+vix/C+amQ+q6Vbf8wkK7Qcb2xzx3ZvDesZffTZhICT6nJ9Gd9LO7wf PDOuE13igopCRjn/YTKEnFiBDlVh6Qp8fkWT/t1ep3SlZtJOBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfMfSB3uVdi9/B1DFIZuDEszS2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWIwMDEwNDktMjc2Ny0z OWNlLWIxOTItOWY1ODBlZTM0ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGRaSNt193lxN2ZlRXmH5eHAMEJ3cx5xnhFS0D43q5uOfK2rX8ZGwfm HQyo/T6GHmhPMoolQCvPI4mkSwQZLOLnmfY660q4gsY9w5P4SHzzti1AteDffgcS +eR8IBFu/+CcktcihXyX6Z1rEqFuNF+hVhdLyt4dHnsA+Dg3KZEg3Nlh5tzZsRBz nBT3uV4Xk2Vp8fmLkCLLqeWVMjbsuPEMnR3SmqcAx+zUP429dI2UuQ/CqJ279wbk iImzKC21pNLrmaQ9WpXhL5HK/EM1qcRcq0c9zZMdf7Y/pH6Fe73j5/dHC8yvpaCo WRVvpbNrou+BN37cuZ2063nt+cp0ZeA= -----END CERTIFICATE-----Generated at Sun Sep 27 08:58:03 2026 by rpki-client