$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/915bf29b-2337-3554-a647-436a45672061.roa File: 915bf29b-2337-3554-a647-436a45672061.roa (raw, json) Hash identifier: 6+iiR40LxLDln2rIqCycSOKP0gsQspDg+xJiLY42g68= Subject key identifier: 13:AC:17:8B:78:4D:4F:10:C1:CB:7E:E6:A4:BB:7A:2A:63:2C:6C:16 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA9AD8451BEE6FB4F85DBC Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/915bf29b-2337-3554-a647-436a45672061.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 70.32.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:9a:d8:45:1b:ee:6f:b4:f8:5d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=bb45bb03-9ec1-4b71-9699-702c7716ef6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f6:b2:c6:98:24:6f:a7:d7:be:54:8a:fc:7f: 61:7b:9e:94:c2:76:cc:75:a6:dc:40:dd:8c:f3:6b: 13:d8:45:04:07:5f:f7:c1:e3:b0:d5:98:63:0e:46: 01:4d:c9:7e:04:61:49:12:d2:59:6a:1e:81:79:02: 70:b0:a4:49:3d:b8:9b:8d:fa:a5:51:ce:b0:b7:73: f5:59:a1:fb:04:93:44:38:45:c7:ba:88:51:e8:a7: 36:9a:5a:0b:a4:de:a0:71:6c:a9:a7:f3:1e:7f:a6: f1:75:d8:09:0e:d9:cf:af:23:de:ab:13:b8:b1:3e: 10:9d:56:28:6c:f9:6b:10:df:e1:db:6f:48:bc:cc: 88:5f:28:b5:7d:9e:9f:95:a8:ef:3e:0f:d5:7f:d5: b2:fa:7c:99:0f:b6:87:cf:75:8f:00:75:c1:85:30: 61:65:20:5e:81:59:31:a9:2d:d6:f4:ce:c5:e6:1b: 5e:c5:50:17:86:bc:77:12:6e:31:32:f1:b2:a5:2a: 4b:05:b3:52:34:b8:d3:f9:40:7d:ad:33:7c:bf:b4: 4a:36:e6:50:61:08:06:4b:46:b3:f5:e5:78:ea:83: 05:2f:96:db:c2:f4:d4:22:76:5a:bc:c9:35:1f:13: 79:29:93:44:99:42:af:85:18:0b:50:84:ee:88:2f: 69:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AC:17:8B:78:4D:4F:10:C1:CB:7E:E6:A4:BB:7A:2A:63:2C:6C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/915bf29b-2337-3554-a647-436a45672061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:fa:e6:e1:c4:9f:16:eb:b7:e2:93:6e:ce:28:a1:c8:05:1a: 6f:6c:5b:f9:0d:93:92:c0:73:5b:48:b5:d3:c3:a5:d3:8e:ce: b9:56:da:47:87:27:5f:33:2f:37:ed:0e:5e:d0:29:ea:40:4d: 00:ec:6b:7e:52:40:fe:48:41:65:30:25:c1:4e:4c:ba:74:b2: 94:a8:3f:21:ca:70:a7:50:b6:6c:1c:25:3b:be:8e:78:50:5f: f3:3e:79:fa:64:f1:1d:a2:c2:97:1f:4b:55:69:51:9b:95:0b: 1c:32:b0:dd:44:83:4b:e0:7d:0e:59:37:b7:38:02:d6:ea:8a: b6:a4:20:55:c5:be:27:11:25:4b:9f:6b:49:9b:2e:b8:46:40: a8:88:a7:85:37:64:99:59:01:f0:ea:71:de:0e:49:3f:3e:ff: b0:ed:c3:2e:8d:51:bb:4d:b4:40:7c:22:5a:5d:17:d5:e9:3c: 26:f1:7b:0f:60:c6:a0:b1:f8:22:db:25:5e:c4:3e:8c:6e:53: 21:6d:de:e3:bc:50:12:8c:1b:c9:15:21:5c:e4:49:3d:e9:4b: 47:a9:f1:e6:a9:e0:c8:89:6c:8a:67:6a:98:67:56:7a:7d:71: 0f:c4:ba:27:b0:2d:e3:0e:7c:13:27:32:66:74:33:66:a9:6d: 20:a0:92:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqprYRRvub7T4XbwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YmI0NWJiMDMtOWVjMS00YjcxLTk2OTktNzAyYzc3MTZlZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivayxpgkb6fXvlSK/H9he56UwnbMdabcQN2M 82sT2EUEB1/3weOw1ZhjDkYBTcl+BGFJEtJZah6BeQJwsKRJPbibjfqlUc6wt3P1 WaH7BJNEOEXHuohR6Kc2mloLpN6gcWypp/Mef6bxddgJDtnPryPeqxO4sT4QnVYo bPlrEN/h229IvMyIXyi1fZ6flajvPg/Vf9Wy+nyZD7aHz3WPAHXBhTBhZSBegVkx qS3W9M7F5htexVAXhrx3Em4xMvGypSpLBbNSNLjT+UB9rTN8v7RKNuZQYQgGS0az 9eV46oMFL5bbwvTUInZavMk1HxN5KZNEmUKvhRgLUITuiC9p7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOsF4t4TU8Qwct+5qS7eipjLGwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTE1YmYyOWItMjMzNy0z NTU0LWE2NDctNDM2YTQ1NjcyMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr65uHEnxbrt+KTbs4oocgFGm9sW/kNk5LAc1tItdPDpdOOzrlW2keH J18zLzftDl7QKepATQDsa35SQP5IQWUwJcFOTLp0spSoPyHKcKdQtmwcJTu+jnhQ X/M+efpk8R2iwpcfS1VpUZuVCxwysN1Eg0vgfQ5ZN7c4AtbqirakIFXFvicRJUuf a0mbLrhGQKiIp4U3ZJlZAfDqcd4OST8+/7Dtwy6NUbtNtEB8IlpdF9XpPCbxew9g xqCx+CLbJV7EPoxuUyFt3uO8UBKMG8kVIVzkST3pS0ep8eap4MiJbIpnaphnVnp9 cQ/EuiewLeMOfBMnMmZ0M2apbSCgkos= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:28 2026 by rpki-client