$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa File: 555e037a-a202-3c23-9d76-142b857e9d3c.roa (raw, json) Hash identifier: JzGJSObG5RCksT0RzAFHigzmXM9fiHUxK83w98PC/og= Subject key identifier: 41:A0:63:7A:E6:F7:37:E6:37:78:C0:21:E1:BC:97:0D:C7:B1:25:A6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA8245C4C4B1D4D76BA000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:82:45:c4:c4:b1:d4:d7:6b:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=cb7c518b-a1db-4be9-8461-1c808d22ed72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e7:e3:66:27:02:48:b1:9e:b1:47:03:6f:1c: 88:fb:1b:40:44:21:13:cb:ef:e7:58:5e:0b:16:bd: a1:19:6d:e2:fe:8a:a9:bb:27:90:7e:02:10:43:7c: c0:88:f4:84:04:6f:d1:82:d9:54:c5:69:d0:00:9c: fd:40:7c:03:8d:8d:56:e5:a1:5d:bb:3c:c9:fa:e7: f9:9f:52:6d:91:2a:3b:d0:b7:8a:11:ac:58:7f:5f: 2d:e1:5b:1e:61:cf:84:4f:d8:59:84:50:0d:b6:60: db:0b:3f:f7:45:93:02:d9:8a:57:d4:31:08:96:06: fa:a9:65:74:10:2a:5f:d7:e4:fb:d7:31:26:f0:38: b9:9e:25:e4:76:4c:b6:c0:0d:c5:71:63:d3:da:cd: 1c:8b:03:c0:d1:94:3d:6c:d0:fb:a1:d8:a9:2f:7b: 9f:b9:f9:1d:28:3b:f2:b3:5b:34:67:ae:1e:84:67: e5:67:69:5b:64:28:d6:6a:4e:a8:83:b8:ed:a5:d2: 92:05:80:12:e5:fc:70:23:6d:50:ce:11:e2:13:a7: a4:dd:ff:7c:3c:c9:1f:a3:fd:d9:6f:68:ab:77:43: 24:c1:6a:e9:db:ee:6d:a6:bb:e8:65:0c:b2:0b:ac: ac:22:a5:c0:73:8d:b0:ba:56:06:a3:6a:b7:30:8b: 60:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A0:63:7A:E6:F7:37:E6:37:78:C0:21:E1:BC:97:0D:C7:B1:25:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f8:7f:58:f6:0f:e9:c5:25:35:44:31:ac:53:b7:eb:64:b8: f1:e6:76:a3:5e:01:ae:20:11:3c:4e:09:42:10:7f:05:40:36: 3a:d3:86:71:f7:88:bc:a9:9f:a0:45:b5:e2:68:c4:17:8a:63: fc:24:2c:98:dd:5e:6e:92:64:8b:7d:bd:cb:56:51:37:b2:af: e0:5f:6d:90:28:da:0e:7a:1b:ac:72:4d:6c:5c:df:3a:02:7a: 93:13:43:9b:fe:57:ce:35:7b:26:67:fb:03:dd:41:6b:e2:52: 75:ec:d9:2d:3b:3b:ff:94:91:80:12:3b:2c:43:d0:71:d4:a6: 0a:9c:4a:21:a5:d5:2c:53:f5:ec:cf:5f:8a:06:d1:f0:66:35: 16:7c:ae:01:cb:13:21:f3:7f:b2:f0:d4:63:a1:e1:d7:94:1b: 3b:fd:eb:66:13:58:dd:19:b6:08:7a:c1:88:cd:f9:d2:04:24: a0:77:e2:48:0e:36:e9:d8:31:72:78:ac:01:2a:6e:1b:96:26: d8:fb:a6:6c:d2:18:03:00:39:cf:a6:5b:a7:23:84:a8:ad:e3: e4:fa:7e:f7:38:35:a1:02:9e:0e:27:d0:e6:d8:78:8e:85:29: ef:c4:52:51:21:f1:17:65:da:b6:0a:2f:0d:75:a6:a4:31:31: 63:68:b5:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqoJFxMSx1NdroAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Y2I3YzUxOGItYTFkYi00YmU5LTg0NjEtMWM4MDhkMjJlZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OfjZicCSLGesUcDbxyI+xtARCETy+/nWF4L Fr2hGW3i/oqpuyeQfgIQQ3zAiPSEBG/RgtlUxWnQAJz9QHwDjY1W5aFduzzJ+uf5 n1JtkSo70LeKEaxYf18t4VseYc+ET9hZhFANtmDbCz/3RZMC2YpX1DEIlgb6qWV0 ECpf1+T71zEm8Di5niXkdky2wA3FcWPT2s0ciwPA0ZQ9bND7odipL3ufufkdKDvy s1s0Z64ehGflZ2lbZCjWak6og7jtpdKSBYAS5fxwI21QzhHiE6ek3f98PMkfo/3Z b2ird0MkwWrp2+5tprvoZQyyC6ysIqXAc42wulYGo2q3MItgqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGgY3rm9zfmN3jAIeG8lw3HsSWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU1ZTAzN2EtYTIwMi0z YzIzLTlkNzYtMTQyYjg1N2U5ZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz4f1j2D+nFJTVEMaxTt+tkuPHmdqNeAa4gETxOCUIQfwVANjrThnH3 iLypn6BFteJoxBeKY/wkLJjdXm6SZIt9vctWUTeyr+BfbZAo2g56G6xyTWxc3zoC epMTQ5v+V841eyZn+wPdQWviUnXs2S07O/+UkYASOyxD0HHUpgqcSiGl1SxT9ezP X4oG0fBmNRZ8rgHLEyHzf7Lw1GOh4deUGzv962YTWN0Ztgh6wYjN+dIEJKB34kgO NunYMXJ4rAEqbhuWJtj7pmzSGAMAOc+mW6cjhKit4+T6fvc4NaECng4n0ObYeI6F Ke/EUlEh8Rdl2rYKLw11pqQxMWNotXM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:47 2026 by rpki-client