$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa File: 5f1246fe-5889-33b0-9a38-bc38ab95466d.roa (raw, json) Hash identifier: dTuQFl0hrjQRPvb7AgO9opagFczuxtHxmAy51X+Y7kw= Subject key identifier: 02:70:A3:38:CA:50:E7:71:6F:07:12:23:DF:0E:F2:FB:71:52:0C:65 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA37318936924A2F881FD0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 70.32.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:37:31:89:36:92:4a:2f:88:1f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=a5f4541b-94e7-471f-91a2-7d834d69f5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:bf:61:0d:21:04:ed:fa:b8:1c:9b:98:5f: 7b:bc:50:4f:0a:30:d5:2b:cb:80:b2:cd:e7:68:68: ab:43:df:8b:01:ea:07:95:a5:00:09:42:aa:be:d4: 47:33:ba:cd:0f:1b:69:43:aa:79:43:c6:74:01:06: 1c:a1:1d:aa:55:49:fa:1e:92:b3:c1:37:57:0f:6e: 09:d9:5d:b1:23:e7:50:d3:79:e1:46:eb:25:01:70: 11:82:ee:26:48:d3:6f:88:0f:93:5d:33:9c:fa:e0: 33:46:26:e9:6e:9a:1d:e3:0d:f6:62:b5:1b:19:ed: aa:4d:a0:de:a6:17:9d:54:de:a6:0f:f0:15:a1:31: 50:de:2a:ee:c5:c8:23:26:eb:cf:6e:d7:9b:31:1a: e2:d6:1d:6a:b7:da:bc:21:1d:9a:5a:ff:7d:c4:76: 2d:fb:38:71:99:1a:d3:3e:c8:82:a7:dc:a9:25:8f: 2c:ef:ad:76:b6:c3:d2:40:a5:ce:c8:69:20:4f:96: a0:d7:18:88:2e:b1:aa:01:42:2d:20:9e:78:4e:87: 7d:1e:cf:c7:9a:59:b8:39:d6:93:74:3f:69:2d:2d: a1:ec:94:5b:a1:eb:cc:16:89:99:06:6c:48:7d:42: 7e:41:08:57:86:db:f6:3e:41:46:a6:62:38:46:e9: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:70:A3:38:CA:50:E7:71:6F:07:12:23:DF:0E:F2:FB:71:52:0C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:bd:2e:00:ce:9e:1b:f6:29:ed:d4:12:cf:e2:cc:4c:14:3e: f4:d7:cd:35:c9:ae:c8:42:c4:25:be:98:5e:f0:7c:ad:57:08: 49:3a:e1:75:26:f2:b4:3c:68:c7:d1:e1:00:9c:64:d8:8d:d6: 65:80:57:b5:3b:90:03:6e:bf:0f:dd:9c:84:8c:86:28:98:52: 8a:6c:32:d6:0c:14:49:7d:55:87:37:c2:dc:db:dd:be:0f:3e: bf:ac:8c:62:98:75:73:49:dc:9b:9c:a3:12:6a:60:0e:ed:c1: e1:22:32:26:a9:dc:87:78:df:e3:25:64:77:3b:5f:51:bd:70: fc:4d:d6:3c:cb:c2:13:9b:4e:9b:05:a6:30:af:bc:84:66:a2: 4c:48:7d:01:0e:df:1e:5b:a5:7e:c9:11:d5:81:c3:a1:1a:e0: c9:83:ad:a5:6b:26:5a:e0:56:16:ae:98:bf:2e:68:af:de:12: 08:76:f9:c5:8e:64:68:1a:3b:9d:47:f6:6a:88:44:3a:05:e3: cd:3c:dc:e0:ee:2d:f4:de:17:4d:25:21:1c:23:f3:7f:19:ff: 55:8b:91:46:48:bf:ae:d9:e2:45:07:43:46:84:ee:ca:1c:cc: e2:10:a6:e2:fe:44:34:7a:d3:6b:81:e7:2c:04:58:77:f5:85: af:2c:ff:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjcxiTaSSi+IH9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YTVmNDU0MWItOTRlNy00NzFmLTkxYTItN2Q4MzRkNjlmNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu32/YQ0hBO36uBybmF97vFBPCjDVK8uAss3n aGirQ9+LAeoHlaUACUKqvtRHM7rNDxtpQ6p5Q8Z0AQYcoR2qVUn6HpKzwTdXD24J 2V2xI+dQ03nhRuslAXARgu4mSNNviA+TXTOc+uAzRibpbpod4w32YrUbGe2qTaDe phedVN6mD/AVoTFQ3iruxcgjJuvPbtebMRri1h1qt9q8IR2aWv99xHYt+zhxmRrT PsiCp9ypJY8s7612tsPSQKXOyGkgT5ag1xiILrGqAUItIJ54Tod9Hs/Hmlm4OdaT dD9pLS2h7JRboevMFomZBmxIfUJ+QQhXhtv2PkFGpmI4RunQEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJwozjKUOdxbwcSI98O8vtxUgxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWYxMjQ2ZmUtNTg4OS0z M2IwLTlhMzgtYmMzOGFiOTU0NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa9LgDOnhv2Ke3UEs/izEwUPvTXzTXJrshCxCW+mF7wfK1XCEk64XUm 8rQ8aMfR4QCcZNiN1mWAV7U7kANuvw/dnISMhiiYUopsMtYMFEl9VYc3wtzb3b4P Pr+sjGKYdXNJ3JucoxJqYA7tweEiMiap3Id43+MlZHc7X1G9cPxN1jzLwhObTpsF pjCvvIRmokxIfQEO3x5bpX7JEdWBw6Ea4MmDraVrJlrgVhaumL8uaK/eEgh2+cWO ZGgaO51H9mqIRDoF48083ODuLfTeF00lIRwj838Z/1WLkUZIv67Z4kUHQ0aE7soc zOIQpuL+RDR602uB5ywEWHf1ha8s/xY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:11 2026 by rpki-client