$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa File: 7badf292-b07f-35cd-bc0c-51d535a17ae4.roa (raw, json) Hash identifier: HDJq8rAvo5e3QeLftby3W2sV4ft1lH42UNqUm/6nICc= Subject key identifier: 37:9E:82:FE:AB:D7:F2:CC:8B:6E:C3:7F:C3:67:66:8A:9E:2C:F8:69 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DA8185CE675FA94969A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:a8:18:5c:e6:75:fa:94:96:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=419cdcb3-99f2-4b7d-a57b-639a9e6f4330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:f0:95:ad:b8:26:b1:25:43:66:ed:2a:af: a5:fa:33:ec:d4:f4:b3:4b:96:19:fd:e9:1b:bc:ad: c3:83:82:7c:28:41:f8:ae:f9:f0:1b:7f:f4:71:16: 50:e2:4c:1e:22:28:37:c3:7a:de:f8:30:cc:48:d9: f1:47:7d:00:24:00:a1:ac:19:09:9d:6e:2c:71:5a: 0b:8b:6b:92:96:0c:b2:55:01:d5:e8:75:ce:b3:c3: 6d:cb:91:57:c0:d0:d9:0b:3f:b4:0b:74:97:b2:3a: 17:d5:37:f2:1b:12:17:79:13:6e:fa:99:50:dd:f7: ac:bc:17:99:1d:a8:f2:7b:7e:df:f9:40:d6:d2:18: dc:98:51:1c:9c:99:43:ac:1d:97:d3:44:5b:3e:79: db:c4:c6:3c:5b:1d:4b:31:ba:cf:b4:dd:a2:04:0c: 3d:74:45:15:bf:8f:ef:34:8d:e6:e5:26:c8:e3:64: d6:45:0d:1e:7e:7d:04:6c:11:59:df:67:76:c9:8c: d1:82:66:44:a6:ba:bb:78:b8:26:c6:79:f1:3f:af: ed:c5:c1:07:2c:13:61:92:0c:76:af:1e:13:70:68: 68:a9:cd:4c:fd:22:88:42:df:8a:d0:d7:9a:b7:4f: 64:ec:ba:5b:89:bc:ff:55:02:35:da:d5:a8:96:fe: 6e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9E:82:FE:AB:D7:F2:CC:8B:6E:C3:7F:C3:67:66:8A:9E:2C:F8:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0c:a7:65:1e:02:92:ad:76:5b:ea:cf:b9:9f:d4:f6:18:b0: a6:49:33:f8:63:51:8a:e8:97:c2:0a:6f:58:e5:7f:ab:21:85: 39:0d:21:bb:97:c7:12:a9:ea:20:69:04:03:86:c2:d3:03:2b: 5a:eb:bc:42:54:01:12:25:76:fa:4f:e8:6d:31:ee:56:28:76: d2:f9:b7:2b:02:59:83:3c:64:61:e4:24:2a:d3:47:b7:68:a5: ee:d5:8f:57:aa:45:b5:12:78:4d:4c:3f:10:c1:d9:23:75:01: 90:d4:d8:50:a8:ae:3e:a1:32:ab:d6:b2:38:ec:17:fc:6f:bd: b7:3c:84:b6:74:d8:d9:98:52:c5:d0:8f:da:84:cc:29:a3:4e: 46:97:59:b7:0d:89:d5:7d:98:ad:1d:8d:bb:21:ef:f8:4b:11: de:6e:0d:a5:34:9e:83:9b:df:ba:83:0d:c7:89:d7:62:0d:2d: bb:ff:cc:c8:5f:26:eb:30:74:c6:63:a0:f4:b1:34:5a:00:73: a5:0e:b9:81:f6:a7:d5:73:3e:29:5e:3c:37:16:c5:43:ed:c0: cf:47:ba:4a:30:1e:91:d9:4b:7b:c0:b7:70:bf:2f:cf:55:d2: 9f:0c:57:a2:95:41:10:58:57:40:67:09:e2:95:0b:e6:f4:d1: 84:93:df:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPagYXOZ1+pSWmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDE5Y2RjYjMtOTlmMi00YjdkLWE1N2ItNjM5YTllNmY0MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn3wla24JrElQ2btKq+l+jPs1PSzS5YZ/ekb vK3Dg4J8KEH4rvnwG3/0cRZQ4kweIig3w3re+DDMSNnxR30AJAChrBkJnW4scVoL i2uSlgyyVQHV6HXOs8Nty5FXwNDZCz+0C3SXsjoX1TfyGxIXeRNu+plQ3fesvBeZ Hajye37f+UDW0hjcmFEcnJlDrB2X00RbPnnbxMY8Wx1LMbrPtN2iBAw9dEUVv4/v NI3m5SbI42TWRQ0efn0EbBFZ32d2yYzRgmZEprq7eLgmxnnxP6/txcEHLBNhkgx2 rx4TcGhoqc1M/SKIQt+K0Neat09k7Lpbibz/VQI12tWolv5udwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeegv6r1/LMi27Df8NnZoqeLPhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2JhZGYyOTItYjA3Zi0z NWNkLWJjMGMtNTFkNTM1YTE3YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIMp2UeApKtdlvqz7mf1PYYsKZJM/hjUYrol8IKb1jlf6shhTkNIbuX xxKp6iBpBAOGwtMDK1rrvEJUARIldvpP6G0x7lYodtL5tysCWYM8ZGHkJCrTR7do pe7Vj1eqRbUSeE1MPxDB2SN1AZDU2FCorj6hMqvWsjjsF/xvvbc8hLZ02NmYUsXQ j9qEzCmjTkaXWbcNidV9mK0djbsh7/hLEd5uDaU0noOb37qDDceJ12INLbv/zMhf JuswdMZjoPSxNFoAc6UOuYH2p9VzPilePDcWxUPtwM9HukowHpHZS3vAt3C/L89V 0p8MV6KVQRBYV0BnCeKVC+b00YST30s= -----END CERTIFICATE-----Generated at Sun Nov 15 10:29:56 2026 by rpki-client