$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e56a5122-33fc-33a6-8667-2401e22bc665.roa File: e56a5122-33fc-33a6-8667-2401e22bc665.roa (raw, json) Hash identifier: sDz4bGQLqUxcmOtw4xm7GS7JJAkJcQIq7qPhRvpANLE= Subject key identifier: 9D:41:2E:AF:D0:4C:93:F1:0D:E9:1E:80:63:3F:40:72:AD:B5:15:C1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3DBB15E3E88944647EA44C Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e56a5122-33fc-33a6-8667-2401e22bc665.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 15169 IP address blocks: 70.32.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bb:15:e3:e8:89:44:64:7e:a4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=db4d3d04-3d7b-41e0-b549-3f68cd4d2348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:77:77:54:e8:7f:1b:64:5a:67:1f:4b:03: 0b:fa:ac:d6:9a:50:ee:d7:f3:ca:fa:7e:82:a1:6f: f0:31:15:c7:05:b9:3d:67:ae:69:94:3c:c9:22:1e: c5:2b:a7:c6:42:01:e8:bd:be:4e:28:b2:1d:52:0b: a5:c9:1c:79:e1:77:77:8f:e4:0a:d7:85:cc:30:a7: d4:3d:b6:a6:21:75:82:63:51:77:8e:05:40:1d:a7: 56:a8:07:4e:d3:c4:fb:0b:96:de:58:72:9d:a5:c5: 18:05:f0:23:43:7b:d6:dd:10:b0:cd:03:2a:76:3f: 23:94:c7:b2:ab:cf:aa:4a:a2:22:a9:0a:54:d7:5d: 2a:d4:dc:37:76:56:60:21:79:bb:01:85:07:fd:61: ea:19:2d:fb:3e:05:a8:56:e8:5b:ef:52:99:75:96: d2:31:66:8c:c8:f8:d0:92:e7:e9:42:2d:56:e3:6c: 00:e0:64:ab:20:59:ac:75:24:7f:d7:35:1b:01:c9: 90:19:ea:6f:95:7e:18:43:db:bf:b3:ff:51:fc:c1: 25:9e:97:1b:53:06:60:c8:c9:cf:f0:2c:65:18:00: bc:fc:bb:bb:b6:a6:4a:15:c9:d4:14:24:be:2c:2e: 45:b3:32:1d:c6:df:cb:79:9c:29:3e:08:b4:c5:67: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:41:2E:AF:D0:4C:93:F1:0D:E9:1E:80:63:3F:40:72:AD:B5:15:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e56a5122-33fc-33a6-8667-2401e22bc665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d4:ad:6d:a1:a0:80:81:ad:f1:57:5e:66:b3:4d:f8:05:24: 2a:df:4e:08:6b:31:39:0f:0a:7b:da:d0:62:3e:89:38:76:c2: 05:1c:53:62:35:46:a3:77:38:e2:9f:1d:d3:71:94:27:b8:f1: cd:8f:7f:27:ab:fa:9c:45:2a:13:88:74:f0:91:84:99:5f:2b: a0:0d:43:45:1e:50:2f:17:bf:22:e2:6b:94:41:f8:69:61:58: c2:6d:6e:8c:5e:13:e4:7b:6c:8e:7f:c2:c4:50:9c:4c:48:56: 66:c5:b8:3b:85:58:bd:0f:f3:59:3a:fc:d0:49:30:57:af:36: 43:8f:be:41:83:cd:80:f8:6d:d2:d9:dc:7a:7e:11:6d:31:6c: f2:5a:22:ae:74:a7:fb:1b:03:c9:7c:18:bf:33:f0:af:ca:84: d7:46:18:1c:3a:81:cc:2d:68:c6:b5:7b:1a:e5:4a:4e:65:36: 1e:3c:9b:4c:ca:50:11:b0:8e:dd:3a:12:fe:a7:95:52:dc:22: 59:79:79:21:e4:48:28:f1:b4:37:ed:5f:aa:1d:39:00:b9:72: 6a:59:3a:9a:70:5f:60:3c:14:ef:41:1c:25:49:e9:9f:1f:65: a8:41:2b:e9:33:35:f8:11:09:59:30:fe:af:9a:b0:dc:ad:fd: 25:b6:e2:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbsV4+iJRGR+pEwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGI0ZDNkMDQtM2Q3Yi00MWUwLWI1NDktM2Y2OGNkNGQyMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnN3d1TofxtkWmcfSwML+qzWmlDu1/PK+n6C oW/wMRXHBbk9Z65plDzJIh7FK6fGQgHovb5OKLIdUgulyRx54Xd3j+QK14XMMKfU PbamIXWCY1F3jgVAHadWqAdO08T7C5beWHKdpcUYBfAjQ3vW3RCwzQMqdj8jlMey q8+qSqIiqQpU110q1Nw3dlZgIXm7AYUH/WHqGS37PgWoVuhb71KZdZbSMWaMyPjQ kufpQi1W42wA4GSrIFmsdSR/1zUbAcmQGepvlX4YQ9u/s/9R/MElnpcbUwZgyMnP 8CxlGAC8/Lu7tqZKFcnUFCS+LC5FszIdxt/LeZwpPgi0xWermwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1BLq/QTJPxDekegGM/QHKttRXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTU2YTUxMjItMzNmYy0z M2E2LTg2NjctMjQwMWUyMmJjNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbUrW2hoICBrfFXXmazTfgFJCrfTghrMTkPCnva0GI+iTh2wgUcU2I1 RqN3OOKfHdNxlCe48c2Pfyer+pxFKhOIdPCRhJlfK6ANQ0UeUC8XvyLia5RB+Glh WMJtboxeE+R7bI5/wsRQnExIVmbFuDuFWL0P81k6/NBJMFevNkOPvkGDzYD4bdLZ 3Hp+EW0xbPJaIq50p/sbA8l8GL8z8K/KhNdGGBw6gcwtaMa1exrlSk5lNh48m0zK UBGwjt06Ev6nlVLcIll5eSHkSCjxtDftX6odOQC5cmpZOppwX2A8FO9BHCVJ6Z8f ZahBK+kzNfgRCVkw/q+asNyt/SW24qA= -----END CERTIFICATE-----Generated at Sun Nov 15 15:34:14 2026 by rpki-client