$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa File: d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa (raw, json) Hash identifier: Y+rZVdizyjX/PZDgOxqAMVR74Kz4+nYs5v6clMDYUHI= Subject key identifier: 72:1D:3E:90:72:73:A0:82:1E:4F:B8:DA:6E:1B:44:C8:2D:05:6C:6D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DD371B35D9AFC39881940 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:d3:71:b3:5d:9a:fc:39:88:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1e982a25-5b8e-47c4-80e0-490febc5b886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:87:01:d2:af:6d:65:5a:a3:ad:1a:15:ac: ec:60:78:b7:96:e3:6b:22:d2:0d:19:88:9c:ed:94: db:a6:cd:2f:a3:fb:dd:f4:7d:d0:a2:bf:0d:41:91: 57:56:f2:08:0c:7d:6a:bc:a4:4a:54:45:bc:b5:69: 48:24:26:da:46:ca:d7:27:c5:dc:52:0a:72:6f:f2: a8:95:b0:e9:6d:63:ec:10:ef:c3:87:f7:0e:a3:de: 97:c3:9f:2e:89:02:2d:b0:84:58:88:c7:b4:fa:7d: 81:bd:d0:4e:dc:05:7c:9f:b9:c1:86:a1:6b:83:2c: ad:14:a1:73:65:c2:96:df:f3:11:a3:75:41:d7:54: 66:61:b4:f6:58:e3:5d:ab:f0:42:44:3a:eb:e9:b6: bb:35:90:fe:fe:83:f3:cb:43:bc:47:25:bb:a6:34: 3e:81:81:59:2e:76:c0:6e:c6:a3:68:10:38:c6:74: 12:89:64:d1:8b:18:f5:9f:a3:f8:33:4f:ad:77:1d: bf:56:c5:ff:26:21:a0:a6:70:26:1f:42:51:fb:96: ac:25:d2:37:54:2f:58:23:0f:58:bf:bf:b4:2d:48: 84:02:74:d4:ab:1e:c0:53:83:90:58:84:ad:48:7d: 3a:de:d9:e7:79:e7:4a:5e:1a:07:f2:27:97:df:fe: 7a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:3E:90:72:73:A0:82:1E:4F:B8:DA:6E:1B:44:C8:2D:05:6C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b9:f5:c2:77:81:54:58:5f:a1:af:85:8d:01:89:94:ba:b7: 6e:69:58:aa:73:aa:1a:b2:56:99:d1:1f:96:d0:e8:80:e2:f6: 24:4e:b9:82:d2:2c:b6:d8:c1:48:87:50:b3:ad:fd:7d:a6:a6: 40:36:de:64:43:68:19:28:2c:51:78:c5:27:1a:99:ff:d5:6d: 87:a0:4b:91:9d:38:f5:32:0d:ff:9d:82:84:d9:a8:c5:13:42: be:7f:ae:65:6b:b4:49:ff:a5:7e:6a:ba:04:52:18:d0:7f:36: ea:1f:c4:25:5d:2b:89:73:25:c5:4d:af:2f:6a:53:28:55:98: a0:4f:f4:9d:16:c7:f9:88:a2:bf:ca:4a:13:02:17:3e:5f:36: 2f:d5:93:a5:87:c1:87:61:f8:06:df:a5:8d:a9:cf:ba:01:02: c3:4a:ab:92:9c:93:15:8a:a2:c1:1b:b8:73:80:72:52:25:11: de:d8:a0:c6:2a:04:86:b1:c8:e1:aa:a9:fa:10:80:bf:9f:36: e8:57:3f:d6:cc:9a:50:ef:da:7c:b4:e6:91:db:6f:ea:87:ca: 4d:2f:ca:75:31:66:3c:46:85:82:cb:9f:96:c3:48:74:4a:6d: de:14:f8:2f:de:98:87:69:6a:f6:12:59:78:6f:4d:f6:89:4c: c7:63:1e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPdNxs12a/DmIGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWU5ODJhMjUtNWI4ZS00N2M0LTgwZTAtNDkwZmViYzViODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzOHAdKvbWVao60aFazsYHi3luNrItINGYic 7ZTbps0vo/vd9H3Qor8NQZFXVvIIDH1qvKRKVEW8tWlIJCbaRsrXJ8XcUgpyb/Ko lbDpbWPsEO/Dh/cOo96Xw58uiQItsIRYiMe0+n2BvdBO3AV8n7nBhqFrgyytFKFz ZcKW3/MRo3VB11RmYbT2WONdq/BCRDrr6ba7NZD+/oPzy0O8RyW7pjQ+gYFZLnbA bsajaBA4xnQSiWTRixj1n6P4M0+tdx2/VsX/JiGgpnAmH0JR+5asJdI3VC9YIw9Y v7+0LUiEAnTUqx7AU4OQWIStSH063tnneedKXhoH8ieX3/56zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIdPpByc6CCHk+42m4bRMgtBWxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDM3MzQ1OTItMjA0MS0z NGZlLWE3NDktYjFiNmE1ZmQ4YmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi59cJ3gVRYX6GvhY0BiZS6t25pWKpzqhqyVpnRH5bQ6IDi9iROuYLS LLbYwUiHULOt/X2mpkA23mRDaBkoLFF4xScamf/VbYegS5GdOPUyDf+dgoTZqMUT Qr5/rmVrtEn/pX5qugRSGNB/NuofxCVdK4lzJcVNry9qUyhVmKBP9J0Wx/mIor/K ShMCFz5fNi/Vk6WHwYdh+AbfpY2pz7oBAsNKq5KckxWKosEbuHOAclIlEd7YoMYq BIaxyOGqqfoQgL+fNuhXP9bMmlDv2ny05pHbb+qHyk0vynUxZjxGhYLLn5bDSHRK bd4U+C/emIdpavYSWXhvTfaJTMdjHv4= -----END CERTIFICATE-----Generated at Sun Nov 15 10:28:19 2026 by rpki-client