$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa File: 3af32542-c9f5-3111-92af-80e94a931b6a.roa (raw, json) Hash identifier: OUGDUEYqs092hcliFzKfzpQSapyivIn3XPKMzw89/3o= Subject key identifier: 85:A8:48:8F:4A:C4:C6:DE:F0:A7:26:1A:C3:77:FF:A1:5D:58:A0:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA3C7DE235D791C6887480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:3c:7d:e2:35:d7:91:c6:88:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=4bbdc06c-84f2-4c59-b139-8a8f6e8ff40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6b:a9:52:a0:19:09:87:fc:63:01:8b:a8:e8: cd:0b:2a:19:96:58:db:c0:c1:a1:a8:a0:b5:ee:6f: 11:67:19:6e:1f:c1:85:d6:d1:f8:6e:95:e8:b5:b8: c7:9e:ef:97:14:0c:ab:71:1a:33:9c:36:85:4e:84: 24:31:af:a3:73:1b:36:86:f8:06:c9:64:5f:ae:4f: a8:e5:3c:9b:10:22:9e:35:4e:66:94:c7:f4:d9:9d: 56:b8:f4:aa:3b:d2:04:6b:56:e4:50:42:c8:a1:89: f7:a1:75:32:71:de:bf:39:6f:c7:38:65:b7:8d:66: 95:46:b4:e9:4f:e3:34:95:d3:0e:a3:7c:ee:31:13: 52:33:55:1c:bc:49:aa:22:e1:b7:e8:31:4e:7e:d7: d5:27:c9:5f:e3:98:79:f7:cf:7e:92:66:cf:74:9d: 7a:7c:52:84:92:11:5c:55:4e:5a:d0:fe:01:b5:2a: 70:37:2d:c4:93:1f:98:83:b2:7a:b3:99:c2:71:e1: 07:c2:bf:76:f5:71:4f:7d:2c:38:35:6a:5a:73:0e: 3d:df:5d:d9:f3:26:cf:fe:8f:34:73:f1:c3:3c:87: 20:2b:f8:7a:88:1c:24:16:80:67:a1:31:2e:8d:32: a2:d5:27:a7:11:10:cb:7a:6b:b0:9f:d8:ca:fe:9f: 82:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A8:48:8F:4A:C4:C6:DE:F0:A7:26:1A:C3:77:FF:A1:5D:58:A0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:5d:3f:c6:2c:c3:5a:08:cc:87:52:c6:82:33:23:39:c1:6c: e2:f7:0e:de:5e:a3:68:86:96:81:a5:78:57:2e:16:af:74:48: 19:8c:a8:35:26:11:d0:62:a2:58:4c:5a:cc:e1:95:03:5d:7a: 64:23:61:b9:33:aa:0f:03:dc:09:a1:25:cb:39:56:1c:fc:41: 8d:67:4b:70:98:aa:0a:aa:b2:a1:2c:ae:a3:d3:84:cf:89:ee: 85:b2:da:11:c7:6c:ff:c9:fe:1a:9d:10:39:4e:d4:a5:85:5d: df:b8:ec:64:01:74:2f:0a:91:54:c7:1d:53:55:47:83:6c:42: c6:60:3d:1b:6c:6c:35:5b:ec:78:24:3c:d4:e2:6c:aa:63:3f: 61:ac:5b:4c:ce:a4:0a:d8:2e:72:ef:ab:0f:12:4c:8d:96:ab: ca:32:8c:a4:6e:e5:72:e9:c9:8b:8f:b4:cf:75:62:34:5c:29: 4a:76:7c:16:4a:27:2f:63:0f:01:2d:30:12:bd:98:4b:e4:ae: 9a:5c:bf:32:0b:d9:ba:2b:4f:2b:0f:e6:36:4d:c5:e5:bd:7f: 8c:5c:42:ec:f8:3b:1f:df:ea:97:d1:a7:d1:20:30:85:60:94: e5:b6:1a:38:6d:24:28:97:a9:75:5c:97:f0:67:e0:0f:4a:dd: 16:01:89:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjx94jXXkcaIdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NGJiZGMwNmMtODRmMi00YzU5LWIxMzktOGE4ZjZlOGZmNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGupUqAZCYf8YwGLqOjNCyoZlljbwMGhqKC1 7m8RZxluH8GF1tH4bpXotbjHnu+XFAyrcRoznDaFToQkMa+jcxs2hvgGyWRfrk+o 5TybECKeNU5mlMf02Z1WuPSqO9IEa1bkUELIoYn3oXUycd6/OW/HOGW3jWaVRrTp T+M0ldMOo3zuMRNSM1UcvEmqIuG36DFOftfVJ8lf45h5989+kmbPdJ16fFKEkhFc VU5a0P4BtSpwNy3Ekx+Yg7J6s5nCceEHwr929XFPfSw4NWpacw49313Z8ybP/o80 c/HDPIcgK/h6iBwkFoBnoTEujTKi1SenERDLemuwn9jK/p+C4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWoSI9KxMbe8KcmGsN3/6FdWKDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FmMzI1NDItYzlmNS0z MTExLTkyYWYtODBlOTRhOTMxYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFdP8Ysw1oIzIdSxoIzIznBbOL3Dt5eo2iGloGleFcuFq90SBmMqDUm EdBiolhMWszhlQNdemQjYbkzqg8D3AmhJcs5Vhz8QY1nS3CYqgqqsqEsrqPThM+J 7oWy2hHHbP/J/hqdEDlO1KWFXd+47GQBdC8KkVTHHVNVR4NsQsZgPRtsbDVb7Hgk PNTibKpjP2GsW0zOpArYLnLvqw8STI2Wq8oyjKRu5XLpyYuPtM91YjRcKUp2fBZK Jy9jDwEtMBK9mEvkrppcvzIL2borTysP5jZNxeW9f4xcQuz4Ox/f6pfRp9EgMIVg lOW2GjhtJCiXqXVcl/Bn4A9K3RYBiZY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:17 2026 by rpki-client