$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/26eebd20-e9b6-3412-a1c1-b485ce0dd35e.roa File: 26eebd20-e9b6-3412-a1c1-b485ce0dd35e.roa (raw, json) Hash identifier: FyHRwlrxqgpogV6PJc5ZIrHmhKS3AaV0H4fh30qll5E= Subject key identifier: CD:5A:58:83:55:51:BB:60:1B:E3:F3:0C:6E:DF:00:E2:27:97:57:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AABA1B5BEF8868067E6B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/26eebd20-e9b6-3412-a1c1-b485ce0dd35e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ba:1b:5b:ef:88:68:06:7e:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=0e9dc585-dede-44a3-8e30-7e13bb89d6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:53:6c:ab:d6:b8:f7:b8:0b:62:1c:d2:b4:03: 4c:de:ad:12:fe:e4:ba:56:c2:95:e6:51:93:5b:f4: b3:2f:3d:bc:18:f9:bd:16:89:b9:74:d0:d0:9b:11: 75:99:b0:43:2b:3f:e4:78:71:5d:4b:ce:16:04:2c: 4c:d7:78:60:9c:ab:8d:c4:38:eb:7c:51:45:f2:fa: a1:cc:32:81:95:4e:8c:21:50:8b:aa:58:1e:86:49: 5a:49:f0:23:2f:ed:85:8a:26:5f:0e:fc:b2:a4:52: f9:46:1f:c2:a6:1b:ce:c6:86:00:f1:c3:23:c0:ee: 8e:36:33:35:bb:f5:49:1a:5a:8e:78:3a:b2:7f:9e: ed:24:8b:87:c4:25:f6:0a:78:bb:8e:ca:de:80:3a: c6:54:7f:e2:46:1f:95:74:b4:0a:35:53:0d:90:58: 8c:f7:b3:50:1c:55:a0:4d:2b:0d:01:d8:bb:55:8d: 16:c8:73:92:7d:41:15:a1:ef:f2:ef:4a:c7:82:bc: 20:ee:1a:28:d0:28:88:41:6b:ed:bb:80:0a:e1:54: dc:76:c2:04:14:ee:4a:06:f7:8a:d1:3a:1d:54:18: b5:70:62:c7:a0:4e:3f:d0:b5:2f:70:20:17:93:bc: 1d:94:63:50:48:a1:3d:09:3b:53:54:85:42:4e:28: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5A:58:83:55:51:BB:60:1B:E3:F3:0C:6E:DF:00:E2:27:97:57:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/26eebd20-e9b6-3412-a1c1-b485ce0dd35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e3:8f:3e:c6:9d:0b:5b:7d:4a:25:79:33:6e:07:89:79:08: e8:1b:9b:be:98:9d:11:50:e8:eb:22:84:dd:6a:5f:d6:30:93: 8c:5e:e1:b0:8f:f4:4d:12:d7:29:79:3c:67:5a:7f:3a:6d:ca: 01:36:50:4c:74:35:e5:d8:ca:ed:39:6d:32:f2:d2:03:d6:d5: 78:b3:df:fe:f2:85:98:99:a3:b1:3e:9d:4e:92:41:07:01:b7: a2:ef:92:2b:5b:80:53:8e:5a:45:61:32:f7:53:c0:d2:53:6f: 3c:b6:57:14:34:32:3c:23:99:80:81:11:4b:db:83:91:ef:dc: 04:ee:d2:50:6b:6d:ac:68:be:7a:32:43:6f:c1:a0:53:8d:44: 59:0d:51:d5:61:92:78:70:34:ab:d5:68:f0:c6:c9:42:d4:02: fb:15:3c:07:7b:8f:13:c7:45:c4:79:ff:de:da:51:2a:c1:6f: f1:1c:5d:5d:32:69:a5:b7:06:e5:8b:90:a8:b1:e8:68:6f:9f: 4a:7b:79:1f:8a:6e:c2:30:d2:ec:d1:fe:e7:12:ee:16:e3:e4: 60:ed:13:db:b3:15:4b:90:62:52:e3:54:0f:e3:38:7d:84:62: 74:b9:03:70:0f:1a:33:e7:91:9a:f8:74:0a:31:6d:5e:c4:e0: b0:7f:e4:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrobW++IaAZ+a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MGU5ZGM1ODUtZGVkZS00NGEzLThlMzAtN2UxM2JiODlkNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlNsq9a497gLYhzStANM3q0S/uS6VsKV5lGT W/SzLz28GPm9Fom5dNDQmxF1mbBDKz/keHFdS84WBCxM13hgnKuNxDjrfFFF8vqh zDKBlU6MIVCLqlgehklaSfAjL+2FiiZfDvyypFL5Rh/CphvOxoYA8cMjwO6ONjM1 u/VJGlqOeDqyf57tJIuHxCX2Cni7jsregDrGVH/iRh+VdLQKNVMNkFiM97NQHFWg TSsNAdi7VY0WyHOSfUEVoe/y70rHgrwg7hoo0CiIQWvtu4AK4VTcdsIEFO5KBveK 0TodVBi1cGLHoE4/0LUvcCAXk7wdlGNQSKE9CTtTVIVCTiimrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1aWINVUbtgG+PzDG7fAOInl1d/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjZlZWJkMjAtZTliNi0z NDEyLWExYzEtYjQ4NWNlMGRkMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTjjz7GnQtbfUoleTNuB4l5COgbm76YnRFQ6OsihN1qX9Ywk4xe4bCP 9E0S1yl5PGdafzptygE2UEx0NeXYyu05bTLy0gPW1Xiz3/7yhZiZo7E+nU6SQQcB t6LvkitbgFOOWkVhMvdTwNJTbzy2VxQ0MjwjmYCBEUvbg5Hv3ATu0lBrbaxovnoy Q2/BoFONRFkNUdVhknhwNKvVaPDGyULUAvsVPAd7jxPHRcR5/97aUSrBb/EcXV0y aaW3BuWLkKix6Ghvn0p7eR+KbsIw0uzR/ucS7hbj5GDtE9uzFUuQYlLjVA/jOH2E YnS5A3APGjPnkZr4dAoxbV7E4LB/5LA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:04 2026 by rpki-client