$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa File: 783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa (raw, json) Hash identifier: nfsg2deyg6/jJK3fbrQWxVWsSO/CtcKeVIqSKxg6I2A= Subject key identifier: 94:A4:26:BF:77:57:A6:3D:AA:30:A7:83:0F:73:9C:01:6D:1E:88:53 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DCC9E861171B7BB73A980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:cc:9e:86:11:71:b7:bb:73:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d908bc7d-6551-4713-9472-6d0b979b9504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:47:1a:09:aa:23:43:93:c1:ba:e1:fd:b7:bd: 4f:1f:f2:ae:24:f2:64:98:82:57:a4:23:5b:b5:15: 99:42:11:3c:b2:dd:d6:49:4f:d0:f8:0d:6a:61:53: 2b:e1:46:d5:9a:73:87:47:4e:c7:72:e7:c2:30:15: 52:9d:97:51:f8:bf:36:89:d8:57:28:3e:91:77:4f: dc:3f:6c:1c:fd:6c:3c:3f:ee:35:cd:3b:76:d0:5a: f5:c9:ab:7f:10:94:89:fc:5a:7d:41:8b:b9:91:42: 17:a1:62:7b:0f:e3:d8:a7:e1:e4:ea:e7:7d:e3:c2: d2:32:01:ed:2b:19:da:4e:e8:d1:65:3f:a2:8a:e9: 7b:3d:94:ab:02:ad:f3:ad:65:3f:55:a1:22:9b:f4: da:b8:3e:06:0f:f4:d5:9d:21:48:17:aa:61:75:cd: f9:fa:a8:81:13:8b:2a:f8:01:44:a2:53:a4:46:47: ac:05:67:31:30:ff:7e:01:5b:b2:b2:18:d8:23:a8: e7:84:20:78:dc:42:8c:4d:fc:c1:f5:b9:0d:24:7d: fd:c5:1e:23:36:69:a4:47:04:50:33:e9:37:9d:34: 0d:39:d4:d8:3a:60:a6:7b:76:e6:07:71:5a:cc:6e: 84:a3:ae:36:35:a8:32:1e:73:c7:68:d5:54:d6:28: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A4:26:BF:77:57:A6:3D:AA:30:A7:83:0F:73:9C:01:6D:1E:88:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:77:8a:0e:cb:96:be:88:f7:95:fd:30:8a:0f:0f:81:e8:70: fa:b1:d1:39:e0:11:9b:c3:c2:50:cf:20:c5:2a:c3:f5:69:fe: 52:49:f0:93:49:a3:d3:41:d0:6b:88:d9:ed:37:81:e4:d6:61: 63:95:20:ed:89:77:0f:7e:c8:58:d5:8b:c0:da:ff:a0:64:8b: 50:bd:7c:1c:c4:6b:16:07:b3:9f:95:2b:d6:f9:e9:e5:1b:26: 00:d0:59:52:4e:ca:4a:91:47:7d:25:a1:cc:0e:1e:6a:c0:b3: 19:b4:27:38:b6:1a:d1:55:e7:6b:2d:f7:81:93:bd:ec:d7:dd: b8:de:7d:51:31:c4:64:e2:bb:a0:d2:ef:8f:dc:03:c5:ec:26: a5:4c:c5:be:79:81:57:dc:ce:76:2a:e8:27:92:04:61:5b:dc: d9:1c:6f:75:08:9b:a9:e2:87:54:c6:95:45:ee:4b:30:ee:9e: de:9a:e8:2f:13:ea:b0:66:81:60:6a:17:a5:28:8c:7d:67:50: 4b:f8:9f:12:a8:45:9b:8b:a0:04:4d:4e:1e:de:77:95:3f:b3: cc:1b:ae:6c:df:0e:2d:54:b1:46:d8:fe:3a:28:3f:64:cd:0a: 52:d6:c6:af:31:07:f9:d4:0a:7d:e4:23:70:da:5d:1a:8d:e5: ab:96:c9:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPcyehhFxt7tzqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDkwOGJjN2QtNjU1MS00NzEzLTk0NzItNmQwYjk3OWI5NTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikcaCaojQ5PBuuH9t71PH/KuJPJkmIJXpCNb tRWZQhE8st3WSU/Q+A1qYVMr4UbVmnOHR07HcufCMBVSnZdR+L82idhXKD6Rd0/c P2wc/Ww8P+41zTt20Fr1yat/EJSJ/Fp9QYu5kUIXoWJ7D+PYp+Hk6ud948LSMgHt KxnaTujRZT+iiul7PZSrAq3zrWU/VaEim/TauD4GD/TVnSFIF6phdc35+qiBE4sq +AFEolOkRkesBWcxMP9+AVuyshjYI6jnhCB43EKMTfzB9bkNJH39xR4jNmmkRwRQ M+k3nTQNOdTYOmCme3bmB3FazG6Eo642NagyHnPHaNVU1iiv5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSkJr93V6Y9qjCngw9znAFtHohTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzgzZWFlYjMtNTEyYi0z ZGZhLWExZTktMjgyZDMyMWFhNzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx3ig7Llr6I95X9MIoPD4HocPqx0TngEZvDwlDPIMUqw/Vp/lJJ8JNJ o9NB0GuI2e03geTWYWOVIO2Jdw9+yFjVi8Da/6Bki1C9fBzEaxYHs5+VK9b56eUb JgDQWVJOykqRR30locwOHmrAsxm0Jzi2GtFV52st94GTvezX3bjefVExxGTiu6DS 74/cA8XsJqVMxb55gVfcznYq6CeSBGFb3Nkcb3UIm6nih1TGlUXuSzDunt6a6C8T 6rBmgWBqF6UojH1nUEv4nxKoRZuLoARNTh7ed5U/s8wbrmzfDi1UsUbY/jooP2TN ClLWxq8xB/nUCn3kI3DaXRqN5auWyfc= -----END CERTIFICATE-----Generated at Sun Sep 27 10:11:33 2026 by rpki-client