$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa File: d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa (raw, json) Hash identifier: b6qXqi//AhSnlyXweV65i3ieFbbLxnaUU8teq1FfeTs= Subject key identifier: 7F:D3:6B:2B:34:B8:18:32:74:96:8E:66:C2:7B:1F:71:28:F1:CA:95 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D901AE1EED6F4C774D280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 2386 IP address blocks: 70.32.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:90:1a:e1:ee:d6:f4:c7:74:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a8f185a3-3118-4e7e-a978-7946dacfef54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:44:c8:04:e2:2a:7b:b6:52:bb:0c:cd:5b: 2a:ca:c5:2d:11:09:66:5f:26:7c:87:86:a6:ba:0a: 91:1c:ff:52:83:ec:ce:1f:72:4d:ee:ba:52:b4:5c: 90:1d:31:13:11:15:b4:94:32:01:3a:93:b1:42:2f: 50:81:0b:32:16:2b:5b:a1:19:85:0a:4f:9f:7a:ca: 1b:ef:25:81:64:fa:72:c4:7f:b1:5e:40:f2:55:1f: 50:25:a0:48:3d:a2:8a:7b:4e:ff:c2:71:bb:58:a9: 52:56:d0:1f:77:67:2f:ab:ac:a2:2f:17:85:9a:1c: 1e:cf:23:60:5d:94:28:f9:bf:46:48:cb:bd:51:cc: 30:74:0c:c0:fd:ac:a7:08:03:fa:a0:36:0b:f2:7e: 04:5a:f6:f8:f2:eb:2d:9e:84:e3:01:04:4a:da:a2: 12:a6:d7:0b:d6:03:16:b6:41:dc:29:e7:3e:02:c1: fb:29:8f:3b:b7:51:f0:1c:58:46:74:1d:c6:b3:a9: 84:7e:9c:18:78:35:4d:01:b9:38:c6:9d:b4:66:a0: 8d:84:5e:58:66:87:62:f0:73:f2:01:93:e0:95:a4: 5e:03:38:f9:52:6c:13:22:05:12:f3:b1:89:92:b6: ff:30:9f:a5:03:1f:17:fc:a9:fb:fd:da:34:d9:1f: 05:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D3:6B:2B:34:B8:18:32:74:96:8E:66:C2:7B:1F:71:28:F1:CA:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6adb4-69a5-3a42-b4aa-3b7058a73a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a5:d2:62:4e:59:46:fe:21:7d:7b:90:f8:98:54:4d:38:4d: 73:1c:b7:c8:6b:d9:8f:31:f2:2f:a1:e4:9e:4d:f8:ad:8e:3a: 84:b1:f0:59:c9:af:3e:2c:c9:23:55:e3:af:1d:aa:d6:8d:39: 92:b3:04:c3:a1:18:4a:8c:4c:04:f0:3f:23:32:56:e6:bc:4d: b1:ef:c9:01:18:b7:f4:b5:6f:53:a8:53:b9:06:65:83:f8:49: fe:62:72:c5:80:3c:3a:08:ae:02:de:0e:bc:97:37:18:77:dc: fd:21:74:4c:7d:63:b7:1f:2c:54:fe:45:8f:b5:79:8a:f7:a7: de:ea:98:be:3f:32:a2:9d:80:0e:7a:c4:33:02:e8:ee:b3:d6: b1:7e:e0:c3:bf:95:e2:16:cc:9e:d3:7f:d9:2c:d5:e1:d0:3d: fb:ba:ce:e8:2f:46:5c:45:6f:58:76:55:6a:31:e6:0e:d0:7a: 59:b8:c1:61:e5:ae:09:ab:a2:31:a0:0b:56:75:89:b6:40:6a: aa:89:64:a1:59:c2:32:f9:f9:15:fb:8e:7e:ca:a3:bd:39:6b: 1b:4e:3f:50:19:88:38:fd:7a:be:84:87:3e:a3:92:71:55:82: 4b:09:cb:b8:29:8e:18:1a:b5:49:8c:c5:65:91:c3:79:00:95: 27:76:94:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZAa4e7W9Md00oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YThmMTg1YTMtMzExOC00ZTdlLWE5NzgtNzk0NmRhY2ZlZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApblEyATiKnu2UrsMzVsqysUtEQlmXyZ8h4am ugqRHP9Sg+zOH3JN7rpStFyQHTETERW0lDIBOpOxQi9QgQsyFitboRmFCk+fesob 7yWBZPpyxH+xXkDyVR9QJaBIPaKKe07/wnG7WKlSVtAfd2cvq6yiLxeFmhwezyNg XZQo+b9GSMu9UcwwdAzA/aynCAP6oDYL8n4EWvb48ustnoTjAQRK2qISptcL1gMW tkHcKec+AsH7KY87t1HwHFhGdB3Gs6mEfpwYeDVNAbk4xp20ZqCNhF5YZodi8HPy AZPglaReAzj5UmwTIgUS87GJkrb/MJ+lAx8X/Kn7/do02R8FGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/Tays0uBgydJaOZsJ7H3Eo8cqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDlhNmFkYjQtNjlhNS0z YTQyLWI0YWEtM2I3MDU4YTczYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKl0mJOWUb+IX17kPiYVE04TXMct8hr2Y8x8i+h5J5N+K2OOoSx8FnJ rz4sySNV468dqtaNOZKzBMOhGEqMTATwPyMyVua8TbHvyQEYt/S1b1OoU7kGZYP4 Sf5icsWAPDoIrgLeDryXNxh33P0hdEx9Y7cfLFT+RY+1eYr3p97qmL4/MqKdgA56 xDMC6O6z1rF+4MO/leIWzJ7Tf9ks1eHQPfu6zugvRlxFb1h2VWox5g7Qelm4wWHl rgmrojGgC1Z1ibZAaqqJZKFZwjL5+RX7jn7Ko705axtOP1AZiDj9er6Ehz6jknFV gksJy7gpjhgatUmMxWWRw3kAlSd2lNk= -----END CERTIFICATE-----Generated at Sun Nov 15 10:27:28 2026 by rpki-client