$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa File: 16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa (raw, json) Hash identifier: mO+uv9Z+98OLGUzo766/EEMS4XyvM4t+rff7pj8XWvk= Subject key identifier: F4:2D:AA:D8:4A:D9:8F:01:DF:12:93:1F:F6:55:8E:FB:7B:30:7F:E5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA640BC807BC95F0954C50 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:64:0b:c8:07:bc:95:f0:95:4c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=5e925af6-607f-45a9-86da-bbcc316cea77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:96:4d:eb:3b:5d:60:f5:88:82:0f:6b:05:9d: ed:24:71:5c:8e:46:88:c8:47:bf:e4:f6:20:73:11: 47:f9:02:c2:b7:b5:28:2e:fe:d1:58:6b:3e:46:aa: bc:93:94:b3:76:99:46:2f:b8:84:67:48:1e:e6:b8: 36:26:b4:60:06:1f:1e:2a:9e:79:0b:98:42:35:11: a6:19:5c:90:d5:b8:4c:c5:19:87:50:bd:a0:48:55: 07:57:58:e9:ff:1a:34:80:ca:f0:26:c0:6c:cc:4b: 49:b0:a1:10:cd:fd:94:86:8c:fb:a8:af:9e:cb:f2: f5:c9:89:33:6c:68:25:2f:0f:ca:d2:99:b8:57:2b: 86:2e:93:6d:d5:c2:3d:e0:21:83:1f:9e:f1:a0:3a: 50:88:05:38:8b:b1:e2:f9:73:5f:9a:a9:9c:80:64: 5d:8e:19:c0:60:68:0f:20:12:9f:d9:3f:e4:8c:e3: 6f:24:69:a7:26:7c:bf:f5:4c:ba:48:e4:43:43:de: fd:84:6c:da:7a:79:85:ff:73:12:75:cb:ec:0f:ec: 80:7d:1d:a9:a3:75:6f:5e:0f:bf:53:4e:05:f2:ba: 37:1a:b7:8e:f6:19:a8:a3:d4:5f:30:ba:07:b4:86: af:74:1d:4e:c1:39:2c:dc:c3:c5:e3:b9:2e:85:d9: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:AA:D8:4A:D9:8F:01:DF:12:93:1F:F6:55:8E:FB:7B:30:7F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/16e1ac81-80a9-3dee-9bfa-a8a0d3285198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9e:90:b1:aa:1b:80:6d:51:e4:9b:8d:d2:ad:ad:5f:90:3d: 3c:17:52:e9:29:2a:a8:24:96:e5:95:29:81:15:5c:c5:63:c0: d9:36:7a:2e:99:92:10:3e:4b:87:9f:f9:22:28:0a:4e:cc:61: 11:bf:84:4f:91:5f:4c:c7:49:66:81:04:ce:2e:1d:2b:b9:8c: 18:75:6f:82:e8:08:7d:5a:04:5d:90:39:be:0f:01:96:63:5f: 2e:31:b8:be:74:c5:77:ad:1a:36:42:35:3e:0f:18:7b:f1:1c: 53:af:09:4c:26:29:f4:b3:90:89:b3:00:05:cb:51:8b:98:09: 13:d1:e1:45:b2:8d:16:06:45:09:99:fc:be:5d:38:66:5e:c3: 44:a2:6f:f3:a2:ec:0e:a8:d4:da:00:73:e3:3e:25:31:51:41: 65:aa:d2:2a:dd:07:e9:21:14:90:01:24:20:66:2e:6c:fb:2b: 08:e6:5f:37:43:31:0b:87:c8:94:7f:a7:0e:28:fd:8c:8a:3a: 57:6a:5b:97:52:53:df:2c:f1:2e:ff:a5:93:f3:3a:30:1f:74: 86:bf:46:54:22:be:05:f1:cf:fe:b3:b4:e5:9a:98:bd:32:16: 21:67:e2:91:a3:e4:23:90:13:a4:af:ba:c6:ef:93:58:10:fa: a8:c0:65:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmQLyAe8lfCVTFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NWU5MjVhZjYtNjA3Zi00NWE5LTg2ZGEtYmJjYzMxNmNlYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ZN6ztdYPWIgg9rBZ3tJHFcjkaIyEe/5PYg cxFH+QLCt7UoLv7RWGs+Rqq8k5SzdplGL7iEZ0ge5rg2JrRgBh8eKp55C5hCNRGm GVyQ1bhMxRmHUL2gSFUHV1jp/xo0gMrwJsBszEtJsKEQzf2Uhoz7qK+ey/L1yYkz bGglLw/K0pm4VyuGLpNt1cI94CGDH57xoDpQiAU4i7Hi+XNfmqmcgGRdjhnAYGgP IBKf2T/kjONvJGmnJny/9Uy6SORDQ979hGzaenmF/3MSdcvsD+yAfR2po3VvXg+/ U04F8ro3GreO9hmoo9RfMLoHtIavdB1OwTks3MPF47kuhdk3KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQtqthK2Y8B3xKTH/ZVjvt7MH/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTZlMWFjODEtODBhOS0z ZGVlLTliZmEtYThhMGQzMjg1MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByekLGqG4BtUeSbjdKtrV+QPTwXUukpKqgkluWVKYEVXMVjwNk2ei6Z khA+S4ef+SIoCk7MYRG/hE+RX0zHSWaBBM4uHSu5jBh1b4LoCH1aBF2QOb4PAZZj Xy4xuL50xXetGjZCNT4PGHvxHFOvCUwmKfSzkImzAAXLUYuYCRPR4UWyjRYGRQmZ /L5dOGZew0Sib/Oi7A6o1NoAc+M+JTFRQWWq0irdB+khFJABJCBmLmz7KwjmXzdD MQuHyJR/pw4o/YyKOldqW5dSU98s8S7/pZPzOjAfdIa/RlQivgXxz/6ztOWamL0y FiFn4pGj5COQE6Svusbvk1gQ+qjAZbA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:49 2026 by rpki-client