$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa File: 2917b113-9e5f-3763-84e3-6da8775eeb3e.roa (raw, json) Hash identifier: bheA0ceF6KKI4K9XyccbU3QTxTRDunjBy0oXjSssOxA= Subject key identifier: 28:5A:48:E0:09:DB:DA:72:D7:92:18:FF:86:59:81:F3:30:07:D1:CF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA61510D059D41356AB980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:61:51:0d:05:9d:41:35:6a:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=570555d4-6cd6-4663-84b2-1294caaa659e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:f9:f9:99:71:21:b0:04:b8:4a:7e:98:ea: 86:fe:c4:e9:a2:1e:70:9b:58:30:63:4b:80:7f:87: 99:4c:c6:c5:12:52:54:73:29:29:cd:ff:48:53:62: 65:e7:a5:d4:33:c3:64:c3:c4:16:53:32:86:d5:54: 2e:a4:9f:6d:59:71:c0:f0:3f:12:09:f1:22:3a:f2: 02:13:f3:e2:89:52:d9:40:ea:89:54:13:96:b8:78: 49:7d:4c:0c:c8:72:da:da:49:79:90:4e:38:70:b5: c9:c2:c3:be:e7:14:42:5e:03:8e:e9:90:48:91:6b: 22:db:e1:79:09:fe:b3:8a:20:2d:cc:12:47:8f:02: 98:60:e0:c9:7a:93:a7:62:38:b6:55:83:bd:bc:a1: 54:f1:9e:cf:92:2d:8e:61:0f:b6:d3:27:f9:c7:e2: 56:76:f0:f0:20:8f:af:93:f6:87:4f:ac:d8:c8:a3: 53:35:77:08:a8:f7:f7:95:ac:ba:61:b7:f8:05:fd: a6:d0:da:fc:8a:bd:3a:f0:75:6b:50:f6:2a:4d:27: 93:c8:f4:a3:05:9b:e9:eb:a0:ac:94:a3:44:99:8c: 6f:68:58:1e:48:60:44:9f:ae:48:54:16:d9:e5:a0: aa:1f:a2:51:ae:0f:72:e4:d4:76:ae:17:2f:1d:66: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5A:48:E0:09:DB:DA:72:D7:92:18:FF:86:59:81:F3:30:07:D1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:90:4b:dc:bd:e3:4b:e9:e6:c5:63:af:eb:fd:fa:19:ed:7a: f7:af:c6:bd:3e:6d:08:8e:31:4a:74:29:fe:27:5c:5b:80:14: 9e:d6:d7:ff:d4:2a:16:09:2d:65:e4:5c:74:f8:32:b1:cc:2b: 2c:55:20:31:4a:1b:c2:c4:09:3e:47:f6:c5:4c:c6:3b:36:fe: 43:32:33:e2:53:05:f0:a7:4c:6e:8a:1a:ee:b5:a0:8c:fc:b4: 34:82:d4:ea:8f:4e:0b:a9:9f:d0:bd:2a:ce:dc:80:78:c9:94: 6b:7b:15:f1:e1:c2:8b:88:ce:af:65:96:78:f5:3a:27:cd:af: d6:38:4f:c3:62:58:f9:d9:70:83:f6:c3:f0:ba:6d:77:f9:0b: 61:82:7b:04:81:1a:8e:85:9b:02:60:0c:45:98:39:7a:88:e2: 19:d6:37:55:18:18:26:20:96:1c:21:08:2b:26:9e:73:8b:25: 89:f4:d9:90:96:00:f1:9f:6a:25:14:0f:86:bd:03:94:df:75: 71:82:b1:25:8f:b4:68:e6:80:9f:ba:21:d5:d7:e9:4e:d8:a9: 7e:43:92:4a:d8:e8:a1:f7:fa:50:ce:2e:38:c4:c2:54:5f:71: a6:49:56:26:2e:94:97:34:1f:af:ef:48:75:ef:2d:63:84:f1: eb:5a:93:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmFRDQWdQTVquYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NTcwNTU1ZDQtNmNkNi00NjYzLTg0YjItMTI5NGNhYWE2NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlij5+ZlxIbAEuEp+mOqG/sTpoh5wm1gwY0uA f4eZTMbFElJUcykpzf9IU2Jl56XUM8Nkw8QWUzKG1VQupJ9tWXHA8D8SCfEiOvIC E/PiiVLZQOqJVBOWuHhJfUwMyHLa2kl5kE44cLXJwsO+5xRCXgOO6ZBIkWsi2+F5 Cf6ziiAtzBJHjwKYYODJepOnYji2VYO9vKFU8Z7Pki2OYQ+20yf5x+JWdvDwII+v k/aHT6zYyKNTNXcIqPf3lay6Ybf4Bf2m0Nr8ir068HVrUPYqTSeTyPSjBZvp66Cs lKNEmYxvaFgeSGBEn65IVBbZ5aCqH6JRrg9y5NR2rhcvHWaKkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChaSOAJ29py15IY/4ZZgfMwB9HPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjkxN2IxMTMtOWU1Zi0z NzYzLTg0ZTMtNmRhODc3NWVlYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmQS9y940vp5sVjr+v9+hntevevxr0+bQiOMUp0Kf4nXFuAFJ7W1//U KhYJLWXkXHT4MrHMKyxVIDFKG8LECT5H9sVMxjs2/kMyM+JTBfCnTG6KGu61oIz8 tDSC1OqPTgupn9C9Ks7cgHjJlGt7FfHhwouIzq9llnj1OifNr9Y4T8NiWPnZcIP2 w/C6bXf5C2GCewSBGo6FmwJgDEWYOXqI4hnWN1UYGCYglhwhCCsmnnOLJYn02ZCW APGfaiUUD4a9A5TfdXGCsSWPtGjmgJ+6IdXX6U7YqX5DkkrY6KH3+lDOLjjEwlRf caZJViYulJc0H6/vSHXvLWOE8etak3o= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:36 2026 by rpki-client