$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa File: 3821e3dc-b2a8-348a-8401-999696cbb28c.roa (raw, json) Hash identifier: C41f4QJSl5kSyeZOdH+7/OgJXEgka+OImxXKLuGWVIk= Subject key identifier: F4:7E:41:AA:51:CC:0A:46:2A:34:DA:14:71:33:B1:7D:39:45:5E:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA4678407DA8401AF726D8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:46:78:40:7d:a8:40:1a:f7:26:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=eeba7857-1d1a-419c-af88-ac7955c7d60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:93:13:7c:f6:4b:dc:cd:7f:d2:0b:47:8c: 0a:03:8b:e3:07:e2:d4:f9:d9:00:3b:00:fb:7d:64: 28:09:ca:25:c3:1f:af:13:2d:c1:3b:f6:d5:2f:66: a4:dc:e8:3a:7b:18:62:dd:a8:b7:cb:f5:41:96:94: 19:7d:39:73:f5:cd:a5:20:e7:4f:59:b8:35:cf:62: b6:67:0c:f0:b2:7b:e9:58:99:db:8b:06:3a:28:b3: 99:6a:bf:5a:f2:68:9d:ac:e9:70:ac:27:d2:b9:fd: 65:b4:70:6f:71:ee:5b:46:83:a0:f1:74:6f:85:57: 5c:9f:36:d5:88:67:25:09:54:ee:29:2c:26:93:c0: 39:0a:74:75:9e:07:02:08:25:a3:ac:fa:14:ef:43: b7:31:67:7e:5a:54:f7:7a:5e:41:62:9c:b6:88:15: 97:cf:a0:d7:58:40:54:d3:88:e9:38:d6:9b:0a:cb: ea:68:fa:20:62:63:41:69:0d:df:5d:3a:ae:54:2f: 88:0d:03:39:74:64:3a:bf:d2:07:fa:ce:e0:ad:a2: b2:ba:6a:f3:df:84:7b:09:51:b7:50:78:60:8c:56: 9c:a5:54:41:20:23:08:30:19:aa:fb:f4:8a:e2:de: aa:d2:6b:c7:56:0a:21:89:8c:70:ef:11:ec:75:26: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7E:41:AA:51:CC:0A:46:2A:34:DA:14:71:33:B1:7D:39:45:5E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3821e3dc-b2a8-348a-8401-999696cbb28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:62:2f:2c:d5:f4:11:c0:28:71:c9:3d:7f:f5:a6:93:61:17: fc:4c:a5:d3:94:0f:44:ae:64:79:83:89:87:da:02:3a:69:ce: 16:46:1a:fc:68:b6:82:c7:60:72:83:89:d8:1d:df:11:b3:66: 92:9f:5a:e3:20:e0:07:0c:33:82:7d:ef:aa:50:3c:db:e2:cc: 3c:83:78:af:dc:ae:b7:99:f9:c1:aa:b9:ca:9e:0a:9e:32:14: c5:7d:a9:4e:e0:e9:73:4c:b1:f4:6d:85:fc:e2:8d:bb:f5:c5: a3:f0:a2:3a:8f:44:5d:6b:66:0f:12:43:b8:0b:74:95:47:06: 3c:18:0e:13:65:f2:9e:e6:c7:82:5b:c0:82:02:da:26:4f:d4: fb:10:9c:55:99:9a:03:a8:c3:97:f9:92:e3:5e:17:c6:00:6a: 9b:c6:26:c2:1d:6d:fc:8b:0a:01:5a:dd:dd:50:58:89:13:5f: 75:fc:a4:a6:74:53:d6:bd:f3:07:f4:58:8e:08:6e:f2:b6:f3: 05:ed:86:d6:df:47:34:f8:d1:82:4b:8e:37:ea:33:56:87:ed: 21:aa:4c:96:23:9e:36:e4:7d:e2:e4:b1:30:0c:ef:af:d2:4e: 77:1f:e6:fc:94:f3:f9:8c:23:a5:3d:a9:ca:f7:70:fe:a4:ce: 79:1f:48:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkZ4QH2oQBr3JtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZWViYTc4NTctMWQxYS00MTljLWFmODgtYWM3OTU1YzdkNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3qTE3z2S9zNf9ILR4wKA4vjB+LU+dkAOwD7 fWQoCcolwx+vEy3BO/bVL2ak3Og6exhi3ai3y/VBlpQZfTlz9c2lIOdPWbg1z2K2 ZwzwsnvpWJnbiwY6KLOZar9a8midrOlwrCfSuf1ltHBvce5bRoOg8XRvhVdcnzbV iGclCVTuKSwmk8A5CnR1ngcCCCWjrPoU70O3MWd+WlT3el5BYpy2iBWXz6DXWEBU 04jpONabCsvqaPogYmNBaQ3fXTquVC+IDQM5dGQ6v9IH+s7graKyumrz34R7CVG3 UHhgjFacpVRBICMIMBmq+/SK4t6q0mvHVgohiYxw7xHsdSYyMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR+QapRzApGKjTaFHEzsX05RV5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzgyMWUzZGMtYjJhOC0z NDhhLTg0MDEtOTk5Njk2Y2JiMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1iLyzV9BHAKHHJPX/1ppNhF/xMpdOUD0SuZHmDiYfaAjppzhZGGvxo toLHYHKDidgd3xGzZpKfWuMg4AcMM4J976pQPNvizDyDeK/crreZ+cGqucqeCp4y FMV9qU7g6XNMsfRthfzijbv1xaPwojqPRF1rZg8SQ7gLdJVHBjwYDhNl8p7mx4Jb wIIC2iZP1PsQnFWZmgOow5f5kuNeF8YAapvGJsIdbfyLCgFa3d1QWIkTX3X8pKZ0 U9a98wf0WI4IbvK28wXthtbfRzT40YJLjjfqM1aH7SGqTJYjnjbkfeLksTAM76/S Tncf5vyU8/mMI6U9qcr3cP6kznkfSEE= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:17 2026 by rpki-client