$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8088853-ffa0-3fe4-83b6-aad75caef4cc.roa File: b8088853-ffa0-3fe4-83b6-aad75caef4cc.roa (raw, json) Hash identifier: PT+O9seuEPK+92vHXIOVfdBIHRZj6BXbglzNscrlpPo= Subject key identifier: DF:5B:96:A2:A4:D2:CD:08:C2:93:B7:7A:46:6A:AA:EC:0F:55:7E:07 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA9C0EE8BE1EE9393C90C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8088853-ffa0-3fe4-83b6-aad75caef4cc.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:9c:0e:e8:be:1e:e9:39:3c:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=b8f7b1e6-5900-4365-a1b2-0f48fbac5c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:70:ba:2f:95:86:6a:0a:74:17:d7:8a:68: 7f:f1:0c:e1:cc:17:b2:8e:4a:07:83:cf:fb:d9:41: 73:08:1f:29:33:c2:c2:a0:4e:29:14:46:bb:da:12: a5:87:7b:96:e0:8d:9d:56:37:9e:0e:0c:8a:12:4b: c6:c5:10:c0:d5:ab:0f:53:17:cc:a7:31:01:04:46: cd:f9:ca:07:4c:3b:0a:60:1b:6a:da:ba:67:ca:b5: 25:68:6d:c5:68:cc:ea:d3:54:ad:41:db:90:8b:ed: f4:6f:9a:1a:ba:6b:51:bd:4a:fa:f2:45:c3:4e:b4: ee:87:4a:ae:39:81:e0:06:a7:ad:6a:54:85:36:ac: 11:1a:d1:dd:ea:41:11:d2:2a:bd:69:c6:85:89:d5: ee:f8:e2:1a:bc:17:c7:74:bc:d6:13:07:7d:5f:a3: b7:51:a5:f0:1d:c5:e1:d7:d8:a5:10:d4:f0:a6:46: 5f:a0:fe:6f:da:0f:b0:a2:68:38:5e:6b:ab:74:de: fe:6a:d3:af:8e:96:fb:a7:a4:5e:5f:22:01:cd:32: ba:a6:ec:cd:24:28:8b:58:c9:82:cf:e3:17:a4:8b: a0:60:c5:41:61:58:47:31:d7:f7:34:cf:a5:b1:c2: dc:4e:60:80:07:00:ce:b4:6e:d8:3f:e5:a4:c9:ba: 72:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5B:96:A2:A4:D2:CD:08:C2:93:B7:7A:46:6A:AA:EC:0F:55:7E:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8088853-ffa0-3fe4-83b6-aad75caef4cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:96:b5:cb:ae:56:ec:e5:77:82:f3:cc:a4:02:3c:63:09:8d: 21:5c:1d:85:eb:11:2b:c7:80:98:20:e8:88:74:67:53:b5:20: de:22:9b:cd:5c:bc:0f:a1:36:5b:23:8c:bd:c0:2d:f4:8a:e7: 50:2d:97:9a:2e:23:3d:73:92:c8:4d:b9:fd:cd:b8:60:21:ca: 8f:56:65:26:c3:83:06:62:8b:23:37:81:38:62:c6:a8:d5:de: be:b2:16:78:f3:13:4b:09:0d:9b:e4:40:13:3f:25:55:5d:ad: ef:49:4b:1d:87:87:cc:6d:e2:07:00:ac:27:a2:06:e1:8b:02: 75:c4:99:2a:e7:50:83:80:46:f9:a1:ba:7f:05:71:4b:c1:2e: a3:ed:81:40:6f:72:4d:4d:f4:ee:68:bb:77:28:1b:ce:50:14: 01:43:a1:b1:6d:1d:07:17:28:e0:1a:4f:83:e9:bd:2c:b4:f7: 87:34:e0:e8:12:ac:b8:cf:cc:db:0f:de:2d:ec:35:b2:d1:09: c5:de:c7:69:9b:e8:d5:1b:8c:e2:78:a4:5b:ba:53:bb:23:ea: 02:18:64:a6:28:76:b1:3c:72:bd:31:6e:90:28:b7:54:2a:91: 28:4e:1f:c6:81:c6:bc:94:51:12:c0:68:9d:62:9b:27:30:0c: 9c:00:f1:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqpwO6L4e6Tk8kMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YjhmN2IxZTYtNTkwMC00MzY1LWExYjItMGY0OGZiYWM1YzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/dwui+VhmoKdBfXimh/8QzhzBeyjkoHg8/7 2UFzCB8pM8LCoE4pFEa72hKlh3uW4I2dVjeeDgyKEkvGxRDA1asPUxfMpzEBBEbN +coHTDsKYBtq2rpnyrUlaG3FaMzq01StQduQi+30b5oaumtRvUr68kXDTrTuh0qu OYHgBqetalSFNqwRGtHd6kER0iq9acaFidXu+OIavBfHdLzWEwd9X6O3UaXwHcXh 19ilENTwpkZfoP5v2g+womg4XmurdN7+atOvjpb7p6ReXyIBzTK6puzNJCiLWMmC z+MXpIugYMVBYVhHMdf3NM+lscLcTmCABwDOtG7YP+WkybpyQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9blqKk0s0IwpO3ekZqquwPVX4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjgwODg4NTMtZmZhMC0z ZmU0LTgzYjYtYWFkNzVjYWVmNGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGWtcuuVuzld4LzzKQCPGMJjSFcHYXrESvHgJgg6Ih0Z1O1IN4im81c vA+hNlsjjL3ALfSK51Atl5ouIz1zkshNuf3NuGAhyo9WZSbDgwZiiyM3gThixqjV 3r6yFnjzE0sJDZvkQBM/JVVdre9JSx2Hh8xt4gcArCeiBuGLAnXEmSrnUIOARvmh un8FcUvBLqPtgUBvck1N9O5ou3coG85QFAFDobFtHQcXKOAaT4PpvSy094c04OgS rLjPzNsP3i3sNbLRCcXex2mb6NUbjOJ4pFu6U7sj6gIYZKYodrE8cr0xbpAot1Qq kShOH8aBxryUURLAaJ1imycwDJwA8cs= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:49 2026 by rpki-client