$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa File: 1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa (raw, json) Hash identifier: r/zhwgNEE5/3p3t2qeGahgNZerX/kfUoBV/pBGfSux0= Subject key identifier: 1C:5D:A3:26:DE:CA:C3:7A:F0:62:74:55:A4:56:A4:6C:37:64:BF:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA48AB00215135F9738600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:48:ab:00:21:51:35:f9:73:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=047c8f73-b4db-4738-9982-3a5c6fe27f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:fd:64:b2:63:9f:3c:53:97:78:9e:6d:f3: c8:ac:26:c2:bd:41:78:41:e9:b3:ba:d8:d1:ef:11: e0:06:b3:91:82:0e:0a:ca:74:3b:ea:32:ed:d5:46: ec:35:91:a1:a1:b0:be:22:ba:5a:f4:12:72:b9:4d: db:87:5f:64:a0:e0:35:26:0b:2b:f0:8a:68:73:a1: de:ff:dd:3d:2d:f8:67:2a:5f:d9:bd:d4:f8:5c:4d: 76:11:d1:1f:73:81:84:41:0e:4d:d4:7d:d2:ee:97: 5b:dd:57:8b:08:ef:7c:5a:c5:41:48:58:f9:ec:46: f9:99:94:ef:29:cc:1e:73:d5:6a:c6:6d:7f:d9:f1: bd:49:5d:49:74:01:ae:24:70:fe:62:78:6a:53:76: 34:4b:1a:44:83:6d:b6:68:9e:b4:31:a1:21:cf:1c: df:a9:35:c7:e5:59:96:9e:fc:11:80:c6:7a:38:bd: bc:f4:09:b8:65:ff:98:36:d0:cf:f5:3d:f3:22:39: df:f9:c8:ce:06:44:72:d1:9b:dd:c9:90:fd:41:60: 29:c6:3f:d2:93:38:36:aa:99:3d:bf:1b:bc:05:e0: 18:97:66:36:22:a9:c7:8a:3a:84:1b:02:ec:b5:4e: 0a:24:67:3d:aa:4d:63:71:35:09:8f:31:7e:2e:0b: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5D:A3:26:DE:CA:C3:7A:F0:62:74:55:A4:56:A4:6C:37:64:BF:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:13:aa:c8:63:45:0e:97:ab:dc:e6:07:56:ec:eb:ed:48:7b: 2d:56:cc:32:14:54:e6:98:52:52:a9:26:e3:1d:a5:90:d7:e5: bf:ef:02:62:6b:2d:cf:2d:61:4c:9e:ec:ce:80:3d:9b:1c:06: 35:fa:52:19:c4:3a:d2:9d:ae:9d:6b:79:58:c4:dd:ec:17:60: a6:c5:a0:06:98:bc:54:05:e9:93:3e:cd:49:bb:47:68:9b:21: 3b:21:65:5b:d2:c9:d5:3f:b3:6d:20:f6:6a:d9:fc:d7:03:24: 2a:91:3f:8a:c2:5d:48:da:e4:45:3c:ad:74:51:0a:c3:c2:62: c3:74:82:1b:ce:a6:4a:ca:74:7d:ca:b2:b3:65:bf:08:36:dc: 99:b7:82:b6:95:b4:c7:24:ad:be:73:31:fc:55:8a:5d:e9:ca: 13:f0:9d:f5:7d:19:27:9d:c7:89:91:d4:4d:29:2e:be:cd:36: d3:9d:a0:fc:d9:0d:f8:11:11:5f:12:5e:fe:f2:7b:ca:54:6d: 86:89:61:96:37:2a:71:73:61:47:02:64:81:3c:d1:65:26:4a: fd:14:dc:ad:ce:64:04:39:9c:f1:a3:1a:c0:9e:2b:d0:fe:3a: 34:ee:c9:a5:e6:9e:25:26:21:78:9b:fb:de:7d:f4:bf:cb:ac: 07:9c:b1:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkirACFRNflzhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDQ3YzhmNzMtYjRkYi00NzM4LTk5ODItM2E1YzZmZTI3ZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7/9ZLJjnzxTl3iebfPIrCbCvUF4QemzutjR 7xHgBrORgg4KynQ76jLt1UbsNZGhobC+Irpa9BJyuU3bh19koOA1Jgsr8Ipoc6He /909LfhnKl/ZvdT4XE12EdEfc4GEQQ5N1H3S7pdb3VeLCO98WsVBSFj57Eb5mZTv Kcwec9Vqxm1/2fG9SV1JdAGuJHD+YnhqU3Y0SxpEg222aJ60MaEhzxzfqTXH5VmW nvwRgMZ6OL289Am4Zf+YNtDP9T3zIjnf+cjOBkRy0ZvdyZD9QWApxj/Skzg2qpk9 vxu8BeAYl2Y2IqnHijqEGwLstU4KJGc9qk1jcTUJjzF+LgvphwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxdoybeysN68GJ0VaRWpGw3ZL/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTEwOGM1NWEtZDJjMC0z Y2YyLWE2NmItODY3NGE3MGU0Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0TqshjRQ6Xq9zmB1bs6+1Iey1WzDIUVOaYUlKpJuMdpZDX5b/vAmJr Lc8tYUye7M6APZscBjX6UhnEOtKdrp1reVjE3ewXYKbFoAaYvFQF6ZM+zUm7R2ib ITshZVvSydU/s20g9mrZ/NcDJCqRP4rCXUja5EU8rXRRCsPCYsN0ghvOpkrKdH3K srNlvwg23Jm3graVtMckrb5zMfxVil3pyhPwnfV9GSedx4mR1E0pLr7NNtOdoPzZ DfgREV8SXv7ye8pUbYaJYZY3KnFzYUcCZIE80WUmSv0U3K3OZAQ5nPGjGsCeK9D+ OjTuyaXmniUmIXib+9599L/LrAecsZo= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:30 2026 by rpki-client