$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa File: 34bcf9a3-a232-3124-a010-fbd2231925d1.roa (raw, json) Hash identifier: 6+X4zghfVTsgHN8w426qywQscMRpw+t6dyrjuAbDrS8= Subject key identifier: D7:AE:4D:3A:34:72:5A:7E:F0:73:0F:ED:ED:1D:21:1C:D9:E8:FF:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA8ABF4322D30A6EEB7600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:8a:bf:43:22:d3:0a:6e:eb:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=24549fdc-2b2d-4611-abc9-a609ab25dc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:86:49:a3:97:83:8d:1a:c3:69:48:99:c4: b6:0a:07:c5:4b:33:c9:00:4f:d8:16:ff:63:a1:16: 70:3f:b8:30:2c:5c:9a:ad:75:61:60:23:bc:6d:02: 1f:d0:ec:bb:c4:e7:49:0a:77:80:db:87:98:c6:98: 3e:79:e2:00:33:c5:95:ff:d7:eb:1e:da:f7:e7:31: 93:07:99:bc:5f:d3:17:8e:f1:64:d5:f9:cb:44:eb: 7c:f3:fc:87:d5:aa:2a:fb:4b:16:16:9d:05:39:03: cf:18:67:4b:4a:4d:69:73:9f:cd:1a:bc:f7:0c:f7: 75:f9:8d:78:2b:bd:4b:54:96:66:31:e1:8f:2b:eb: 0f:16:25:7e:71:cc:5e:ef:43:a1:7a:54:7a:01:d7: 86:e9:81:02:5a:4e:cd:cd:07:a8:5f:b5:b7:32:43: c0:c2:e9:74:f9:0d:be:31:8c:00:93:30:66:d2:aa: 78:ff:12:d7:fa:8d:94:7a:17:3a:a6:e4:36:37:77: 44:94:e1:4a:2c:23:6d:80:05:2f:db:c3:fe:36:f4: fa:a4:d6:8b:d0:98:17:c9:b3:23:34:69:2d:bc:e8: 41:a4:c7:ba:01:85:5e:5c:d4:69:8d:bb:e5:6f:0d: f6:e7:db:54:d2:1c:8b:c2:9d:51:f0:10:11:38:f5: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AE:4D:3A:34:72:5A:7E:F0:73:0F:ED:ED:1D:21:1C:D9:E8:FF:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:b3:dc:5a:57:e3:23:47:7f:12:d8:6e:3c:62:31:5c:c2:c0: 0c:95:ab:ad:a1:72:6b:95:2b:ad:96:29:31:db:cb:de:01:fc: 4d:3b:5e:20:c2:dd:1b:30:87:55:da:20:96:85:25:dd:ea:77: 8e:9d:be:37:05:53:1c:5b:14:a4:83:cd:3b:4f:2c:4d:65:a6: 6f:45:16:70:93:d3:69:89:69:07:d3:30:97:dc:e5:07:67:7d: 74:13:4a:cf:ce:d8:0a:ad:e5:f4:84:f7:d2:56:c8:4d:23:dc: 08:96:5f:0e:77:d7:22:5c:98:bc:18:79:66:06:bf:59:a8:a9: 37:85:21:02:a6:48:80:87:79:66:ee:0a:1d:2d:1d:b4:40:40: 01:6b:34:6d:48:58:40:fd:68:09:ed:bf:b2:58:92:ce:d1:72: 28:c8:a2:b5:db:4b:e4:6a:22:54:84:50:5d:26:e2:ae:be:38: 22:69:2f:f2:a3:9d:c5:c9:07:84:7c:7a:b3:ce:73:a4:2e:d5: fa:ca:ed:8f:f6:a2:5d:ea:00:8c:0d:aa:0f:a5:46:9e:07:e3: 40:b7:a8:29:69:77:97:74:89:90:bb:f1:75:86:26:9f:98:68: 35:d1:3e:66:20:53:63:0b:09:4b:1a:26:e3:ec:0e:1b:fb:ae: ce:5a:77:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqoq/QyLTCm7rdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MjQ1NDlmZGMtMmIyZC00NjExLWFiYzktYTYwOWFiMjVkYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEuGSaOXg40aw2lImcS2CgfFSzPJAE/YFv9j oRZwP7gwLFyarXVhYCO8bQIf0Oy7xOdJCneA24eYxpg+eeIAM8WV/9frHtr35zGT B5m8X9MXjvFk1fnLROt88/yH1aoq+0sWFp0FOQPPGGdLSk1pc5/NGrz3DPd1+Y14 K71LVJZmMeGPK+sPFiV+ccxe70OhelR6AdeG6YECWk7NzQeoX7W3MkPAwul0+Q2+ MYwAkzBm0qp4/xLX+o2Uehc6puQ2N3dElOFKLCNtgAUv28P+NvT6pNaL0JgXybMj NGktvOhBpMe6AYVeXNRpjbvlbw3259tU0hyLwp1R8BAROPVKoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeuTTo0clp+8HMP7e0dIRzZ6P+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzRiY2Y5YTMtYTIzMi0z MTI0LWEwMTAtZmJkMjIzMTkyNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKz3FpX4yNHfxLYbjxiMVzCwAyVq62hcmuVK62WKTHby94B/E07XiDC 3Rswh1XaIJaFJd3qd46dvjcFUxxbFKSDzTtPLE1lpm9FFnCT02mJaQfTMJfc5Qdn fXQTSs/O2Aqt5fSE99JWyE0j3AiWXw531yJcmLwYeWYGv1moqTeFIQKmSICHeWbu Ch0tHbRAQAFrNG1IWED9aAntv7JYks7RcijIorXbS+RqIlSEUF0m4q6+OCJpL/Kj ncXJB4R8erPOc6Qu1frK7Y/2ol3qAIwNqg+lRp4H40C3qClpd5d0iZC78XWGJp+Y aDXRPmYgU2MLCUsaJuPsDhv7rs5ad3w= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:20 2026 by rpki-client