$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa File: 8660f259-74b8-3570-a008-aac9009ba729.roa (raw, json) Hash identifier: hy4+3PTREqqfoqYUTsjxHyGHYvP+fBayHTMULshJdr0= Subject key identifier: 21:1F:3D:10:34:D6:4F:5E:91:FC:DE:75:BA:27:CA:03:C4:5A:9C:5A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA738C7FB57A8DFE97A815 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:73:8c:7f:b5:7a:8d:fe:97:a8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=6eef1e82-5789-4660-a709-b39f50f7f536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:fc:2e:bf:8d:2f:24:94:5f:7f:e7:1b:10: 7b:50:01:83:f2:3f:0e:fb:c5:97:81:40:ce:87:2c: c7:d0:ae:e2:b9:f5:ce:81:cf:d3:2b:fa:8c:be:aa: 5f:07:5b:44:ed:83:b9:3c:6e:3a:25:dc:ea:f1:fe: 38:23:84:bd:23:32:c1:ee:06:7e:fd:bb:25:ba:95: 3f:e4:ea:c0:5c:82:c7:24:6a:8b:c7:40:f0:10:d1: d0:b8:21:41:3b:48:f1:94:80:08:7a:57:30:56:a7: c7:d0:56:5c:e4:c3:8a:22:f9:e5:18:d9:87:44:3a: 4f:2d:3e:4c:cf:ca:3b:e2:7e:b5:66:a9:e0:ad:ab: 9c:6f:b9:6e:b1:db:14:76:5b:8c:c0:a8:4e:4f:fa: 84:eb:50:ff:9c:b3:a1:87:9e:95:d6:72:09:f0:c5: 4e:47:4b:7d:99:e0:85:4d:88:68:93:35:eb:bc:74: 54:fb:c9:89:2f:6b:52:f6:cc:2b:66:b3:2b:52:42: 8e:38:b1:88:8c:eb:bc:22:57:ea:6b:f9:e2:ea:5b: e7:86:5d:38:4b:65:fa:fb:c7:0e:1b:04:36:26:01: 74:bc:d4:c0:ef:45:49:e9:52:e6:b8:4b:01:1e:7d: 5e:92:ec:06:21:bf:f6:21:ca:f4:e6:eb:d2:19:fe: 2f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1F:3D:10:34:D6:4F:5E:91:FC:DE:75:BA:27:CA:03:C4:5A:9C:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ee:90:7d:39:b8:85:01:cd:db:66:42:93:d6:11:67:68:c3: 57:53:cb:40:3d:50:66:ed:ed:1c:ca:23:26:f3:a4:43:df:79: ad:8a:e4:f6:11:b4:4e:b6:fd:7a:43:b0:28:28:c9:b9:88:37: fc:ce:71:ef:f6:72:02:c4:17:0b:12:03:4e:02:61:f8:d6:79: 7c:be:2d:05:00:29:59:08:9c:7e:3c:d7:d6:c4:7b:22:5e:ba: 9b:96:25:c2:4e:60:7d:6f:63:c0:12:96:04:a3:08:9b:38:2f: 2b:57:73:53:f4:68:ef:0a:32:e1:e1:7c:4a:fd:06:0f:06:31: 5c:ab:c3:93:37:78:af:1d:c5:fd:a4:b4:9d:7f:03:d3:58:f4: a1:ae:9b:91:18:43:78:fc:57:ce:48:ea:f6:92:e7:bd:60:b8: 23:89:77:25:d9:ec:2b:4f:84:c1:bd:d0:55:91:94:cc:d3:5e: 07:40:57:fe:76:66:fc:f3:da:72:2d:b4:fc:c8:4c:75:9c:6d: f7:76:c2:05:8d:54:23:c8:6c:93:8b:06:a6:48:d7:a9:f9:7e: a6:39:c5:f4:09:ae:8b:c0:35:bd:2b:94:6a:05:59:7c:7d:4f: 4a:51:29:fe:cb:4a:77:44:36:f8:ef:11:fa:9f:45:41:76:6e: 95:0a:6c:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqnOMf7V6jf6XqBUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NmVlZjFlODItNTc4OS00NjYwLWE3MDktYjM5ZjUwZjdmNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ78Lr+NLySUX3/nGxB7UAGD8j8O+8WXgUDO hyzH0K7iufXOgc/TK/qMvqpfB1tE7YO5PG46Jdzq8f44I4S9IzLB7gZ+/bslupU/ 5OrAXILHJGqLx0DwENHQuCFBO0jxlIAIelcwVqfH0FZc5MOKIvnlGNmHRDpPLT5M z8o74n61Zqngraucb7lusdsUdluMwKhOT/qE61D/nLOhh56V1nIJ8MVOR0t9meCF TYhokzXrvHRU+8mJL2tS9swrZrMrUkKOOLGIjOu8Ilfqa/ni6lvnhl04S2X6+8cO GwQ2JgF0vNTA70VJ6VLmuEsBHn1ekuwGIb/2Icr05uvSGf4vawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEfPRA01k9ekfzedbonygPEWpxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY2MGYyNTktNzRiOC0z NTcwLWEwMDgtYWFjOTAwOWJhNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLukH05uIUBzdtmQpPWEWdow1dTy0A9UGbt7RzKIybzpEPfea2K5PYR tE62/XpDsCgoybmIN/zOce/2cgLEFwsSA04CYfjWeXy+LQUAKVkInH4819bEeyJe upuWJcJOYH1vY8ASlgSjCJs4LytXc1P0aO8KMuHhfEr9Bg8GMVyrw5M3eK8dxf2k tJ1/A9NY9KGum5EYQ3j8V85I6vaS571guCOJdyXZ7CtPhMG90FWRlMzTXgdAV/52 Zvzz2nIttPzITHWcbfd2wgWNVCPIbJOLBqZI16n5fqY5xfQJrovANb0rlGoFWXx9 T0pRKf7LSndENvjvEfqfRUF2bpUKbIM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:29 2026 by rpki-client