$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b001049-2767-39ce-b192-9f580ee34804.roa File: 5b001049-2767-39ce-b192-9f580ee34804.roa (raw, json) Hash identifier: GJpMgXkw2zTUTDqg04xIvzPxih+1g5p5alN2cCd20WQ= Subject key identifier: 50:11:59:39:59:49:CB:86:47:36:F9:C5:91:FC:7F:94:8C:6F:C1:93 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AAA9192B18BFAA93C6C740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b001049-2767-39ce-b192-9f580ee34804.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:a9:19:2b:18:bf:aa:93:c6:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=ce713037-3973-42bc-9f99-246e7b8997de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:e1:ea:2c:a8:a4:7e:0f:ba:62:d0:15:97: 67:e0:82:3f:92:5b:00:86:91:ce:c2:69:54:c3:37: bd:dc:7f:9e:b1:2a:bf:1c:c0:ac:9f:09:06:43:e1: 2e:6e:fb:fa:73:36:ea:8d:3d:3b:9b:1a:6b:f6:d3: ef:b8:9b:aa:33:3b:23:e2:a3:b2:85:ba:a8:38:e5: 17:95:b0:49:51:cb:ed:59:c5:73:9e:63:e3:16:86: 5b:1e:02:f9:81:1f:42:c9:1a:b1:a9:c2:43:70:ae: 67:59:26:c7:cd:e7:f1:36:5a:08:e2:6a:33:80:67: ce:15:97:55:3d:e6:64:ac:46:e5:32:d9:10:b9:91: 65:9a:36:0d:91:ac:cf:51:2c:e9:a0:e4:60:88:ac: d4:99:84:aa:78:34:8b:57:8a:c7:66:44:8e:10:0e: ad:1c:6a:64:45:0a:8b:e3:b4:2a:dd:d4:df:48:30: 13:49:e2:04:7d:46:49:39:e0:e9:2a:ae:97:d5:da: 32:72:61:c5:ae:01:bd:35:30:8d:6f:6b:09:a4:83: b5:26:da:43:13:64:76:f2:cf:47:88:45:d2:f9:27: 8a:78:97:a4:81:63:26:c4:97:8c:54:f0:f4:02:a7: 76:d6:91:fc:29:16:89:62:ab:5d:73:11:85:b2:e0: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:11:59:39:59:49:CB:86:47:36:F9:C5:91:FC:7F:94:8C:6F:C1:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b001049-2767-39ce-b192-9f580ee34804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fe:02:e5:9c:cb:79:bf:7f:e8:73:78:7b:63:c3:55:07:09: 50:11:88:4e:1c:1c:3f:ac:88:d8:88:a2:18:00:eb:82:0f:59: 55:53:83:19:ea:52:f5:c0:22:69:29:37:14:92:ce:0b:ea:3b: 8f:6a:92:b8:c1:5b:cb:ff:c9:a0:84:8a:cd:b5:5f:b7:e1:c5: 3b:02:b7:a1:57:8a:c4:f2:29:c3:e7:cc:0e:aa:24:36:c4:0b: a7:10:7b:f2:a5:92:ad:4a:12:a6:a0:88:77:00:5e:98:a7:b1: 02:13:88:bc:48:94:fc:3b:2b:7c:42:b6:62:da:ba:31:60:fd: 40:38:ba:16:34:ab:6a:52:60:b2:46:2c:42:93:de:63:5d:07: 9c:de:1a:d9:bb:ac:a2:0f:c8:a1:04:81:6b:8f:1c:c7:ee:dc: 2e:26:2b:6f:7b:e0:bf:85:31:5a:ce:0a:20:4c:7b:2c:d4:50: 02:63:68:2b:53:13:0e:8e:41:c6:47:29:11:b1:e1:4f:aa:59: 29:b4:6a:e6:6f:15:9f:b4:f4:00:fc:36:f2:58:f0:e2:05:7b: 16:c1:01:ee:70:84:c4:08:af:3e:0d:d8:69:5b:19:9b:c9:9e: 04:61:4a:d6:2f:95:e7:1c:39:92:c3:e4:93:92:a3:2e:c1:aa: 67:a8:70:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqqkZKxi/qpPGx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Y2U3MTMwMzctMzk3My00MmJjLTlmOTktMjQ2ZTdiODk5N2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxDh6iyopH4PumLQFZdn4II/klsAhpHOwmlU wze93H+esSq/HMCsnwkGQ+Eubvv6czbqjT07mxpr9tPvuJuqMzsj4qOyhbqoOOUX lbBJUcvtWcVznmPjFoZbHgL5gR9CyRqxqcJDcK5nWSbHzefxNloI4mozgGfOFZdV PeZkrEblMtkQuZFlmjYNkazPUSzpoORgiKzUmYSqeDSLV4rHZkSOEA6tHGpkRQqL 47Qq3dTfSDATSeIEfUZJOeDpKq6X1doycmHFrgG9NTCNb2sJpIO1JtpDE2R28s9H iEXS+SeKeJekgWMmxJeMVPD0Aqd21pH8KRaJYqtdcxGFsuAdKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFARWTlZScuGRzb5xZH8f5SMb8GTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWIwMDEwNDktMjc2Ny0z OWNlLWIxOTItOWY1ODBlZTM0ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr+AuWcy3m/f+hzeHtjw1UHCVARiE4cHD+siNiIohgA64IPWVVTgxnq UvXAImkpNxSSzgvqO49qkrjBW8v/yaCEis21X7fhxTsCt6FXisTyKcPnzA6qJDbE C6cQe/Klkq1KEqagiHcAXpinsQITiLxIlPw7K3xCtmLaujFg/UA4uhY0q2pSYLJG LEKT3mNdB5zeGtm7rKIPyKEEgWuPHMfu3C4mK2974L+FMVrOCiBMeyzUUAJjaCtT Ew6OQcZHKRGx4U+qWSm0auZvFZ+09AD8NvJY8OIFexbBAe5whMQIrz4N2GlbGZvJ ngRhStYvleccOZLD5JOSoy7BqmeocOQ= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:16 2026 by rpki-client