$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa File: 60899ba4-2e02-3634-b503-2d70ad64f496.roa (raw, json) Hash identifier: shh1Bq+yeqLe3SdY1FAtT4wyuw65Oln8SqAedwmFo60= Subject key identifier: FF:4C:2A:5C:1E:BE:1F:86:8D:37:FC:81:4F:89:22:06:A8:8A:40:E9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA527268BDA1897C180500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:52:72:68:bd:a1:89:7c:18:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=448f069f-0a20-4df6-a15e-95a59b9a3ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:03:d6:05:fa:95:3b:e1:ab:f3:e5:c7:ba: 15:0c:67:9f:56:7f:b8:1e:39:a7:71:ca:9a:ba:1c: 16:be:77:3b:a6:ed:ad:0b:c2:43:35:88:00:03:c3: 77:ac:3d:89:e6:5c:e4:09:93:1a:37:ff:21:0c:c8: 6d:75:aa:81:08:21:55:4b:11:f1:dc:11:cc:16:30: f9:57:f4:5c:37:5d:26:2b:17:7e:97:c6:73:17:4e: 31:15:88:fa:d7:3f:0b:49:60:c1:c6:e4:32:82:c8: 7e:bf:ae:20:ee:24:36:3e:c2:34:78:3e:71:d8:2a: 66:6c:8a:9a:3a:c9:18:e9:58:09:6a:b6:14:6a:39: 2f:f1:81:12:3b:23:10:8c:ad:bb:d2:6b:59:67:9f: 23:92:ec:09:27:f6:84:f0:a2:60:1a:39:69:ef:9f: 14:59:37:bd:86:c9:55:3a:60:23:8c:43:5b:22:c1: e1:5c:73:67:70:37:ad:7a:52:41:50:65:61:d0:39: b4:25:9d:fb:cf:a7:ff:71:93:00:3c:df:bf:29:5f: 8d:a8:3f:7f:6d:92:52:12:f9:2b:d6:15:5b:7c:dd: cd:ef:91:d4:ce:5f:b2:fc:23:d3:00:5f:c6:23:f6: a7:bc:bd:ae:6a:cb:2f:c6:41:da:c3:eb:10:24:81: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4C:2A:5C:1E:BE:1F:86:8D:37:FC:81:4F:89:22:06:A8:8A:40:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:40:d0:14:df:b2:2e:71:b6:20:c2:e3:e5:6e:82:8e:96:92: 51:c6:6e:ca:87:75:f5:ca:94:c2:3d:79:b5:a2:c8:cb:c9:80: ee:4b:9e:a3:39:9c:6a:b6:80:b3:86:96:87:c0:d5:43:c9:a4: ae:40:04:7d:5c:33:fc:3f:81:5b:0a:b1:17:fb:5b:6b:4d:a1: 77:cf:06:b1:97:a5:83:0f:d2:cd:54:24:39:13:c0:ec:a6:f7: 5a:36:c6:22:54:3c:11:d8:6b:f5:45:31:ca:ae:8b:c0:7f:2c: 68:25:66:ab:0b:58:ae:06:e2:8c:b5:d4:fd:7f:60:81:14:13: 10:1a:9e:9b:af:f7:a8:bb:36:61:3a:d7:00:fb:49:d7:7d:7f: 77:90:b4:98:7e:d5:ea:b6:d6:95:8c:f0:37:e0:dc:eb:40:e7: cd:da:e5:b2:5c:31:70:cc:4a:de:7f:04:13:6c:4d:3b:c5:dd: bb:cd:7c:54:00:f7:3f:c0:2a:77:77:ba:57:c8:50:a2:39:19: 27:52:38:4f:5b:50:34:f5:f8:54:a9:0a:61:79:c6:ce:e8:b9: 82:e7:fd:04:9e:be:7e:37:9a:96:89:d5:6c:9b:d6:4f:69:cf: 4a:e7:27:3f:b4:c3:64:ba:cc:ba:37:9a:37:ca:df:cd:db:3c: 5d:4b:1e:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlJyaL2hiXwYBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDQ4ZjA2OWYtMGEyMC00ZGY2LWExNWUtOTVhNTliOWEzZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIAD1gX6lTvhq/Plx7oVDGefVn+4Hjmnccqa uhwWvnc7pu2tC8JDNYgAA8N3rD2J5lzkCZMaN/8hDMhtdaqBCCFVSxHx3BHMFjD5 V/RcN10mKxd+l8ZzF04xFYj61z8LSWDBxuQygsh+v64g7iQ2PsI0eD5x2CpmbIqa OskY6VgJarYUajkv8YESOyMQjK270mtZZ58jkuwJJ/aE8KJgGjlp758UWTe9hslV OmAjjENbIsHhXHNncDetelJBUGVh0Dm0JZ37z6f/cZMAPN+/KV+NqD9/bZJSEvkr 1hVbfN3N75HUzl+y/CPTAF/GI/anvL2uassvxkHaw+sQJIFllQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9MKlwevh+GjTf8gU+JIgaoikDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjA4OTliYTQtMmUwMi0z NjM0LWI1MDMtMmQ3MGFkNjRmNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpA0BTfsi5xtiDC4+Vugo6WklHGbsqHdfXKlMI9ebWiyMvJgO5LnqM5 nGq2gLOGlofA1UPJpK5ABH1cM/w/gVsKsRf7W2tNoXfPBrGXpYMP0s1UJDkTwOym 91o2xiJUPBHYa/VFMcqui8B/LGglZqsLWK4G4oy11P1/YIEUExAanpuv96i7NmE6 1wD7Sdd9f3eQtJh+1eq21pWM8Dfg3OtA583a5bJcMXDMSt5/BBNsTTvF3bvNfFQA 9z/AKnd3ulfIUKI5GSdSOE9bUDT1+FSpCmF5xs7ouYLn/QSevn43mpaJ1Wyb1k9p z0rnJz+0w2S6zLo3mjfK383bPF1LHr0= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:53 2026 by rpki-client