$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa File: 6801e350-c9f9-3400-a69b-b70a48ee4a10.roa (raw, json) Hash identifier: uE5jNv9PShv9MPSYRip5rLtb6G7qNNrJ0CFLHiAmdBE= Subject key identifier: EE:9A:8A:AC:4F:D6:19:B0:74:F0:5D:90:BE:75:24:F5:C7:C6:DE:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA5283333E9D3558B31F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:52:83:33:3e:9d:35:58:b3:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=9794dc68-73dd-4973-a0c2-60ab3edbfed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:31:31:03:05:e9:5e:cd:10:f6:2a:f5:57:bc: da:e9:6e:9a:81:1f:02:5b:14:06:3c:d4:5a:d5:a6: 5b:3b:55:2d:25:43:04:48:dd:32:99:f2:ae:86:84: 62:ee:00:02:69:48:26:6b:2c:c5:b4:21:de:80:0e: 32:2f:0a:4c:61:6e:9d:32:18:a2:f8:79:db:f1:f0: 68:9d:08:47:44:54:90:1b:f4:e9:70:88:ae:2e:a8: a6:72:44:a7:af:70:3e:69:85:05:ae:89:85:dc:41: b5:5b:77:4b:eb:c4:83:36:de:b9:a5:76:39:55:b5: 97:3e:8e:9e:95:ca:47:c2:1f:8a:4c:ca:3a:1d:98: 34:17:56:61:92:60:88:2c:b4:2e:e9:ad:f9:fa:5e: 1c:d4:22:d7:d8:16:de:41:ea:7d:06:34:53:32:8f: 57:30:e6:9d:d1:a8:2c:ae:22:5c:73:6b:be:a8:84: 9b:3c:c8:e9:63:9a:c1:06:e4:66:09:bc:e9:e8:e8: dc:dc:e2:b0:b5:df:02:f2:ab:6e:30:24:da:d1:fe: 26:79:7b:0a:2f:bc:18:23:7b:c3:44:38:17:44:61: 80:d2:71:e9:84:7e:d1:d7:0b:4e:c5:58:80:87:0a: 20:9b:c0:ef:0e:d3:b7:ad:2c:72:0c:11:7a:88:23: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9A:8A:AC:4F:D6:19:B0:74:F0:5D:90:BE:75:24:F5:C7:C6:DE:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:59:e8:26:a8:da:56:5b:05:4b:63:ee:71:39:6b:15:65:cd: 77:f7:94:37:1a:39:f6:6e:06:e1:d9:84:10:7d:70:ac:c9:8f: 22:5c:e0:a7:8a:3a:95:cf:5f:77:82:69:b4:54:71:43:b1:0e: 07:71:23:a5:7c:6a:8d:31:ae:a7:08:2f:a7:c0:12:07:8a:59: 95:a3:fd:1a:d5:4f:5e:5c:5e:29:8e:76:27:af:38:b0:c8:cd: 27:a6:4f:a6:54:8d:7d:7c:c1:8b:03:b0:19:bf:09:cb:ac:e2: 2c:d2:9e:6f:70:28:a8:94:04:07:4a:6b:25:cc:13:2d:74:d4: 02:12:08:2b:c0:f0:22:5e:35:40:5c:90:7f:95:22:55:30:84: f4:3b:46:a1:aa:c7:af:a0:3b:3f:3b:5f:95:e6:c7:20:c9:59: f8:88:d1:d5:b3:7c:29:1b:9b:ff:92:a2:67:19:d1:3e:d9:57: 76:70:68:7c:b5:cf:89:03:6a:c6:2e:3a:5c:fd:21:52:28:96: 40:9a:74:6b:6c:21:a6:83:74:10:a9:16:24:25:bd:69:db:6c: f7:7d:47:e5:ae:42:ef:2f:ab:e3:10:b9:66:ae:76:65:0b:7e: bd:02:3c:82:2d:d6:e6:23:ed:79:2f:59:81:5e:10:3d:ec:0f: 4a:59:40:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqlKDMz6dNVizH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OTc5NGRjNjgtNzNkZC00OTczLWEwYzItNjBhYjNlZGJmZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzExAwXpXs0Q9ir1V7za6W6agR8CWxQGPNRa 1aZbO1UtJUMESN0ymfKuhoRi7gACaUgmayzFtCHegA4yLwpMYW6dMhii+Hnb8fBo nQhHRFSQG/TpcIiuLqimckSnr3A+aYUFromF3EG1W3dL68SDNt65pXY5VbWXPo6e lcpHwh+KTMo6HZg0F1ZhkmCILLQu6a35+l4c1CLX2BbeQep9BjRTMo9XMOad0ags riJcc2u+qISbPMjpY5rBBuRmCbzp6Ojc3OKwtd8C8qtuMCTa0f4meXsKL7wYI3vD RDgXRGGA0nHphH7R1wtOxViAhwogm8DvDtO3rSxyDBF6iCMOMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6aiqxP1hmwdPBdkL51JPXHxt61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjgwMWUzNTAtYzlmOS0z NDAwLWE2OWItYjcwYTQ4ZWU0YTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZZ6Cao2lZbBUtj7nE5axVlzXf3lDcaOfZuBuHZhBB9cKzJjyJc4KeK OpXPX3eCabRUcUOxDgdxI6V8ao0xrqcIL6fAEgeKWZWj/RrVT15cXimOdievOLDI zSemT6ZUjX18wYsDsBm/Ccus4izSnm9wKKiUBAdKayXMEy101AISCCvA8CJeNUBc kH+VIlUwhPQ7RqGqx6+gOz87X5XmxyDJWfiI0dWzfCkbm/+SomcZ0T7ZV3ZwaHy1 z4kDasYuOlz9IVIolkCadGtsIaaDdBCpFiQlvWnbbPd9R+WuQu8vq+MQuWaudmUL fr0CPIIt1uYj7XkvWYFeED3sD0pZQIY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:49 2026 by rpki-client