$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa File: 089de854-3bd0-3daa-8427-ce457804664f.roa (raw, json) Hash identifier: vmfaBMytQUA6QVUpiDwkg8iz+qglRLtRrIa2YuHee7Q= Subject key identifier: 76:4E:C3:95:57:DA:E8:EB:2B:AF:F6:B4:C6:1F:3B:47:95:CA:C3:27 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA57BAF399F4CC33F62480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:57:ba:f3:99:f4:cc:33:f6:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=942831c5-00ec-49f0-a952-cffa6da56941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:bd:fd:78:61:37:47:ec:7c:17:48:76:9a: 32:c0:30:87:95:97:eb:42:80:31:7c:5f:ed:5b:e2: 58:9b:ae:62:1d:c6:81:48:b1:ab:d1:62:02:43:bc: 8f:d4:84:b0:d1:35:6c:c9:74:1e:4f:96:b8:bb:dd: 8d:19:d7:b4:28:78:81:1c:15:e7:4d:cf:a8:eb:74: dc:5b:6e:80:6b:b2:ae:66:64:f9:06:8e:ed:da:e6: 90:48:90:b8:67:ec:d5:d0:d9:d9:44:ed:7d:56:78: bb:6c:a5:03:06:6e:34:f9:69:c0:e0:35:90:68:0e: ce:8a:e1:44:07:75:75:b2:4a:e5:70:46:f8:e7:69: 15:47:c1:cf:e5:6b:cd:15:d5:37:aa:a3:db:8a:8d: 64:73:6a:62:e0:ff:fd:ce:53:2d:e7:fc:7a:5b:d2: 8e:9d:0b:1f:81:78:af:78:c8:05:d4:5b:e7:4e:ad: 7c:d5:cb:8f:6b:54:09:ff:a4:db:a0:e3:3c:1a:12: de:db:75:a8:30:07:82:96:fa:63:6a:6c:c2:53:a3: 9e:f6:30:83:e3:31:4b:ca:67:a5:2b:be:e3:1a:7a: 40:55:46:1e:a9:66:c7:f5:ef:e0:0c:22:b8:9b:c8: 44:ab:54:6c:49:0d:e9:19:7b:70:f6:8a:b6:cc:6c: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4E:C3:95:57:DA:E8:EB:2B:AF:F6:B4:C6:1F:3B:47:95:CA:C3:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/089de854-3bd0-3daa-8427-ce457804664f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:19:3b:6b:44:ef:2c:a8:67:ec:35:99:e1:c2:f2:4f:34:24: 3f:89:80:07:de:c7:30:5d:35:72:26:50:2a:2e:57:41:b2:6f: 56:f0:ea:a9:90:bb:64:34:fc:a2:20:92:bc:25:cb:3c:3f:12: 90:44:c6:c6:29:15:54:a0:75:26:74:ff:96:3f:18:ed:d5:e1: 9a:8d:c5:58:19:aa:4f:ed:84:03:8e:7a:ee:91:36:56:bf:d8: fc:80:7a:5a:a4:17:0b:25:12:c8:8f:96:c2:a4:4a:81:e0:47: d4:88:4a:e8:2c:77:9e:3d:9c:aa:ce:dc:63:9a:51:1f:c8:af: a0:6c:c2:f9:74:51:25:42:17:e1:9e:5e:12:ae:f1:30:0f:33: 6e:43:81:e2:23:dc:98:b1:3d:28:37:03:1d:cc:3c:4c:24:da: 05:5d:22:c9:f6:7b:d3:52:88:04:a0:07:9e:fa:b6:7d:48:72: 3d:be:fb:1b:5d:e4:27:2f:a4:dc:79:5f:63:60:06:69:ee:2a: 79:ac:42:ec:50:b6:ff:b9:08:f6:4d:f1:cf:25:1b:ec:8a:5b: af:90:27:b6:d8:15:b1:44:25:7f:3a:5f:09:7e:a0:fc:45:49: 53:e9:11:74:66:5c:d5:1f:09:a0:0d:d9:86:32:bc:a7:64:06: 0b:8c:b4:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqle685n0zDP2JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OTQyODMxYzUtMDBlYy00OWYwLWE5NTItY2ZmYTZkYTU2OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztq9/XhhN0fsfBdIdpoywDCHlZfrQoAxfF/t W+JYm65iHcaBSLGr0WICQ7yP1ISw0TVsyXQeT5a4u92NGde0KHiBHBXnTc+o63Tc W26Aa7KuZmT5Bo7t2uaQSJC4Z+zV0NnZRO19Vni7bKUDBm40+WnA4DWQaA7OiuFE B3V1skrlcEb452kVR8HP5WvNFdU3qqPbio1kc2pi4P/9zlMt5/x6W9KOnQsfgXiv eMgF1FvnTq181cuPa1QJ/6TboOM8GhLe23WoMAeClvpjamzCU6Oe9jCD4zFLymel K77jGnpAVUYeqWbH9e/gDCK4m8hEq1RsSQ3pGXtw9oq2zGwrJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZOw5VX2ujrK6/2tMYfO0eVysMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDg5ZGU4NTQtM2JkMC0z ZGFhLTg0MjctY2U0NTc4MDQ2NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwZO2tE7yyoZ+w1meHC8k80JD+JgAfexzBdNXImUCouV0Gyb1bw6qmQ u2Q0/KIgkrwlyzw/EpBExsYpFVSgdSZ0/5Y/GO3V4ZqNxVgZqk/thAOOeu6RNla/ 2PyAelqkFwslEsiPlsKkSoHgR9SISugsd549nKrO3GOaUR/Ir6Bswvl0USVCF+Ge XhKu8TAPM25DgeIj3JixPSg3Ax3MPEwk2gVdIsn2e9NSiASgB576tn1Icj2++xtd 5CcvpNx5X2NgBmnuKnmsQuxQtv+5CPZN8c8lG+yKW6+QJ7bYFbFEJX86Xwl+oPxF SVPpEXRmXNUfCaAN2YYyvKdkBguMtFw= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:29 2026 by rpki-client