$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa File: 8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa (raw, json) Hash identifier: 95x7P+wqqfS2OSr4zFQOPfSWxSO8nel22GALyCMxCtQ= Subject key identifier: 9D:FA:26:B1:A5:36:58:EF:00:A1:21:34:55:8C:40:24:92:60:E4:99 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AAB2A7ADF36DAE7954ED80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b2:a7:ad:f3:6d:ae:79:54:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=b235d4a6-2fc4-4eaa-9476-39cc89909251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bc:cc:d4:48:a4:be:c2:7b:99:cd:1b:24:0d: 02:cd:9a:84:b5:e3:3b:f3:c9:65:91:3f:21:b8:6e: 3d:f1:64:32:b8:f7:dd:26:af:99:21:9f:69:db:71: 1a:b2:15:fa:79:de:c9:fc:3e:4e:fa:a0:01:7e:19: 78:09:db:1f:42:b1:8c:88:1a:c5:01:88:f3:07:7d: ea:d1:72:ff:c9:b2:e6:76:c7:3d:ab:f3:01:c6:b9: 45:76:c5:34:b0:ed:99:47:3d:e4:ee:f6:56:0f:d9: bf:ea:89:37:dd:b8:53:39:36:92:22:69:7e:b6:29: a7:f4:7a:da:97:21:be:1a:dd:ec:13:c7:9a:5e:f2: 49:51:70:a9:31:15:f0:12:51:01:12:05:c4:d5:87: a4:16:e1:8b:89:e5:4d:f7:ee:63:cc:68:15:21:11: 75:cc:0d:34:61:55:28:52:fd:ee:8f:d2:c3:f3:de: 4c:c7:b8:91:a1:b3:04:ce:5c:56:92:e9:cf:08:e4: 05:dd:dc:81:cf:96:09:93:ce:11:a5:3d:0d:78:fb: 0b:fd:b2:30:86:fa:c8:ba:51:da:99:81:22:b9:76: cc:d0:fb:ae:3b:10:65:c8:76:6a:67:d8:46:2f:a8: 75:e7:86:d2:3d:44:9c:36:6d:a0:b7:99:ab:27:3f: ff:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FA:26:B1:A5:36:58:EF:00:A1:21:34:55:8C:40:24:92:60:E4:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:5b:7a:c2:37:7a:33:da:51:7c:10:af:6e:f4:38:50:d5:f5: 22:42:45:97:05:0e:f5:6a:d8:99:3b:88:0a:9b:e3:25:b9:e8: 72:7b:a4:76:22:c9:e7:d2:0a:a6:ce:90:a7:8d:f4:87:93:04: d5:5d:38:91:f0:1c:fd:7d:85:1c:1d:20:7c:c5:ce:eb:aa:92: 38:ba:a4:b5:3b:24:47:52:1a:f9:bd:f9:bf:51:38:9d:50:1a: fc:81:4d:2c:d7:a3:fe:b8:f2:39:3a:83:a0:20:f7:03:00:88: 89:37:8d:1b:f8:f4:9a:c1:73:10:7b:4b:30:95:5c:1a:8c:65: e9:23:03:13:3f:96:83:73:1f:a0:fd:47:34:f3:d6:45:48:41: 86:9b:d6:e9:37:14:97:bf:c5:c9:c4:53:68:5f:6a:c4:56:9f: 38:ce:f4:6a:41:61:f3:64:c4:95:8c:ad:e8:60:5b:16:14:37: 1f:27:73:50:a1:9e:c1:6b:d8:04:6c:21:af:ed:71:27:d9:01: 5b:43:4c:2a:50:6d:72:7c:98:ae:c1:d6:95:0a:7a:df:43:d7: a1:4d:b5:3c:da:1d:c2:a8:6b:8e:58:19:89:34:17:77:9f:8a: c3:7b:5c:c7:99:6d:aa:15:71:99:32:4b:5b:26:aa:f6:3d:07: 1e:e8:a5:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrKnrfNtrnlU7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YjIzNWQ0YTYtMmZjNC00ZWFhLTk0NzYtMzljYzg5OTA5MjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7zM1EikvsJ7mc0bJA0CzZqEteM788llkT8h uG498WQyuPfdJq+ZIZ9p23EashX6ed7J/D5O+qABfhl4CdsfQrGMiBrFAYjzB33q 0XL/ybLmdsc9q/MBxrlFdsU0sO2ZRz3k7vZWD9m/6ok33bhTOTaSIml+timn9Hra lyG+Gt3sE8eaXvJJUXCpMRXwElEBEgXE1YekFuGLieVN9+5jzGgVIRF1zA00YVUo Uv3uj9LD895Mx7iRobMEzlxWkunPCOQF3dyBz5YJk84RpT0NePsL/bIwhvrIulHa mYEiuXbM0PuuOxBlyHZqZ9hGL6h154bSPUScNm2gt5mrJz//iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ36JrGlNljvAKEhNFWMQCSSYOSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGE5ZjMxODEtOGU2MC0z MzA3LTlkYTItZDliYjZmYjIyYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5besI3ejPaUXwQr270OFDV9SJCRZcFDvVq2Jk7iAqb4yW56HJ7pHYi yefSCqbOkKeN9IeTBNVdOJHwHP19hRwdIHzFzuuqkji6pLU7JEdSGvm9+b9ROJ1Q GvyBTSzXo/648jk6g6Ag9wMAiIk3jRv49JrBcxB7SzCVXBqMZekjAxM/loNzH6D9 RzTz1kVIQYab1uk3FJe/xcnEU2hfasRWnzjO9GpBYfNkxJWMrehgWxYUNx8nc1Ch nsFr2ARsIa/tcSfZAVtDTCpQbXJ8mK7B1pUKet9D16FNtTzaHcKoa45YGYk0F3ef isN7XMeZbaoVcZkyS1smqvY9Bx7opa4= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:55 2026 by rpki-client