$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa File: 43659337-d3a9-39a2-9081-bbcafeb0d57d.roa (raw, json) Hash identifier: 5zgf30Kkvt1wQOLVAjyo/0PDlan9oIEKuBoJE36fXIQ= Subject key identifier: 9B:13:09:D2:11:3B:8F:C0:E8:AE:F6:51:14:81:48:FD:52:6E:65:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA99F756AAA9E15314BF80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:99:f7:56:aa:a9:e1:53:14:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=450b9b33-09ff-43bd-a36f-6430743410e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:22:34:13:7d:1f:3a:5b:4f:d5:7f:d9:f1: 5f:b3:7b:52:6e:49:52:19:e8:a7:a5:69:70:1c:b7: b0:0c:47:5d:58:be:8b:8d:d2:96:0a:68:24:1f:45: 12:9d:3b:52:3c:95:c9:6e:f8:20:50:83:da:aa:33: 40:f5:5e:c4:26:9c:60:80:58:83:4d:b5:2f:6e:6d: c3:a7:c4:56:2e:e4:2c:b5:d9:c4:4f:26:29:10:f2: b3:45:33:a4:fa:14:0c:72:22:3d:10:43:e6:2f:23: 45:9a:fd:c4:36:92:b4:a5:20:97:0b:41:5e:84:fa: a0:35:8e:29:a8:ee:0a:4d:0b:a9:97:17:c5:57:98: 1b:a7:34:a4:ff:c5:04:0e:54:a8:7d:69:35:ee:06: 64:e5:83:99:b5:42:39:15:ab:4b:05:ba:9b:c2:75: 09:0a:e0:a9:88:4b:89:c8:6f:3b:07:26:68:59:84: f4:0e:d6:00:80:0c:e1:43:44:1a:82:93:48:f8:0a: 0c:4c:0d:44:89:b3:41:cc:0a:8e:7d:34:51:41:02: 93:52:5c:04:ff:d0:af:f7:d3:98:bf:f6:48:f9:6b: d1:2b:a4:ee:7f:40:60:46:4a:43:de:ec:96:e4:c5: 23:65:87:4d:51:1a:21:6b:37:37:03:5a:14:c3:26: f0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:13:09:D2:11:3B:8F:C0:E8:AE:F6:51:14:81:48:FD:52:6E:65:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e6:ba:17:81:6e:db:7c:60:5d:b5:2e:a9:4a:81:cf:79:7a: 62:b9:51:d1:19:0c:1e:10:71:86:69:be:f9:1b:29:30:66:6d: 3c:e3:04:b6:68:61:44:fa:67:3b:52:bf:68:05:91:74:fb:50: 0d:2e:c9:7e:50:ea:99:2a:2a:8f:62:60:0c:02:b3:30:3e:dd: b1:8c:93:1b:b4:3e:67:4f:73:d0:02:dd:e5:10:dd:d5:7d:3f: d0:ca:04:66:8c:11:ac:3a:32:e2:8d:86:36:85:00:a5:69:7b: 2c:f0:df:8b:66:77:3b:25:19:a5:70:5d:62:6f:99:95:ad:a4: 1f:ea:2d:29:13:92:5e:a6:88:b4:6f:26:1b:12:52:38:13:bb: 31:95:c2:3b:d6:0d:f0:40:e4:c9:6d:67:f3:5f:f5:45:dc:6e: b0:59:d2:eb:f1:4e:c7:42:54:0a:03:8a:fb:8f:7d:0d:f0:16: 59:43:12:84:7d:42:43:f1:cc:38:b9:c7:80:60:56:c3:9a:61: ca:99:82:63:6f:70:41:e0:16:5b:29:c7:d7:9f:15:68:ac:96: 10:89:1a:2b:06:1f:0a:36:ea:3d:79:b3:80:c3:6d:39:4a:ad: 22:53:b7:b3:e7:9b:b3:51:c3:b9:e2:ab:96:69:7e:54:e2:31: 6a:92:21:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpn3Vqqp4VMUv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDUwYjliMzMtMDlmZi00M2JkLWEzNmYtNjQzMDc0MzQxMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCAiNBN9HzpbT9V/2fFfs3tSbklSGeinpWlw HLewDEddWL6LjdKWCmgkH0USnTtSPJXJbvggUIPaqjNA9V7EJpxggFiDTbUvbm3D p8RWLuQstdnETyYpEPKzRTOk+hQMciI9EEPmLyNFmv3ENpK0pSCXC0FehPqgNY4p qO4KTQuplxfFV5gbpzSk/8UEDlSofWk17gZk5YOZtUI5FatLBbqbwnUJCuCpiEuJ yG87ByZoWYT0DtYAgAzhQ0QagpNI+AoMTA1EibNBzAqOfTRRQQKTUlwE/9Cv99OY v/ZI+WvRK6Tuf0BgRkpD3uyW5MUjZYdNURohazc3A1oUwybwSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsTCdIRO4/A6K72URSBSP1SbmVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDM2NTkzMzctZDNhOS0z OWEyLTkwODEtYmJjYWZlYjBkNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXmuheBbtt8YF21LqlKgc95emK5UdEZDB4QcYZpvvkbKTBmbTzjBLZo YUT6ZztSv2gFkXT7UA0uyX5Q6pkqKo9iYAwCszA+3bGMkxu0PmdPc9AC3eUQ3dV9 P9DKBGaMEaw6MuKNhjaFAKVpeyzw34tmdzslGaVwXWJvmZWtpB/qLSkTkl6miLRv JhsSUjgTuzGVwjvWDfBA5MltZ/Nf9UXcbrBZ0uvxTsdCVAoDivuPfQ3wFllDEoR9 QkPxzDi5x4BgVsOaYcqZgmNvcEHgFlspx9efFWislhCJGisGHwo26j15s4DDbTlK rSJTt7Pnm7NRw7niq5ZpflTiMWqSIWc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:38 2026 by rpki-client