$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa File: bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa (raw, json) Hash identifier: VDp6cSiGDxxbaIljRs1FnEQ7JlQtl9jJRVFfRsEzVQU= Subject key identifier: 6E:84:FF:E9:98:2F:75:0E:EA:DF:99:99:FD:A9:59:59:44:CC:EF:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA6C85D0A9CC3973453CA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:6c:85:d0:a9:cc:39:73:45:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=ccadea26-08bc-4eb2-bde4-97589eec6a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:c8:7e:7f:fb:b2:0e:cf:ab:65:a4:4f:07: 3d:90:0e:8d:70:0c:7a:20:6c:13:9c:53:89:4b:14: c7:70:d7:27:d8:24:b9:db:4e:de:89:84:00:93:6d: 72:c7:af:2d:d6:c0:40:81:e9:c3:02:7b:e4:58:18: cb:51:64:19:36:c2:d3:d9:91:40:48:03:0f:97:35: a1:ee:8c:56:b6:73:ed:a1:c7:d6:cf:fb:fe:55:1a: 53:2e:77:e4:94:73:5e:2f:04:c3:ce:b7:69:f3:1b: 17:35:02:65:63:81:0f:aa:75:86:1c:85:46:f8:99: 6b:08:e1:bd:3c:d5:19:79:d8:7e:2a:f3:a0:67:4f: 69:fc:9a:f6:d0:69:f4:56:3d:dc:04:b7:d0:48:71: 76:82:29:18:c9:86:4f:f7:21:9d:6e:58:a4:1e:b0: 87:92:1e:75:c6:d4:52:ff:d8:4c:ee:d7:06:c2:b6: 15:b4:8e:9e:70:65:31:c5:20:a2:53:30:50:78:81: ec:b2:ad:5a:21:bd:32:60:ce:31:c6:34:80:c8:9c: 97:d3:66:f1:24:ef:a3:a5:3e:4f:36:75:b2:05:f3: be:f3:ee:43:8f:36:a5:db:55:e1:82:95:60:5e:79: 3e:b1:fc:fb:1b:5f:5b:bf:85:f1:73:22:50:e5:1f: cc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:84:FF:E9:98:2F:75:0E:EA:DF:99:99:FD:A9:59:59:44:CC:EF:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1e:b3:c5:27:9a:33:cb:53:3c:90:1e:b1:f1:4f:87:12:bf: 20:b2:ab:35:1e:19:44:2f:25:fd:9c:0b:5d:a2:da:8d:e6:00: 8f:1d:3e:26:fc:04:85:48:e2:1f:48:ba:23:56:25:98:f9:4a: 49:f8:82:39:16:76:96:f0:d3:5c:f9:9a:81:18:f2:33:70:82: 41:d7:46:c1:1d:4c:32:a1:97:0d:c9:c9:aa:80:83:f7:30:76: 08:32:ea:27:9c:4f:0b:ef:e0:ea:98:8c:7a:f9:eb:01:15:46: 54:e6:ae:c4:2e:78:30:6c:2e:01:b1:55:44:aa:e9:14:a2:49: ee:4b:75:ae:2c:d8:1b:aa:a8:ca:ee:f1:f3:71:c1:2a:e0:06: ed:31:db:fb:86:e6:c2:6c:6e:21:89:d3:82:52:9f:10:a0:bd: 5b:c0:2f:38:78:2f:97:ef:41:82:45:40:1f:8f:c6:dd:66:b1: 60:8e:7a:d5:38:90:1c:d9:b2:41:64:cf:2f:1e:d9:e2:ad:f6: 95:a7:03:ec:56:47:d6:af:2c:5c:63:4d:b2:63:4e:ac:e5:83: ff:33:d7:82:d2:02:f0:92:53:76:b6:4c:72:ba:cb:ca:aa:d5: f8:ea:6d:31:9c:ed:dc:52:95:04:f9:a2:2c:47:e5:aa:6f:56: 32:47:e8:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqmyF0KnMOXNFPKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Y2NhZGVhMjYtMDhiYy00ZWIyLWJkZTQtOTc1ODllZWM2YTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTrIfn/7sg7Pq2WkTwc9kA6NcAx6IGwTnFOJ SxTHcNcn2CS5207eiYQAk21yx68t1sBAgenDAnvkWBjLUWQZNsLT2ZFASAMPlzWh 7oxWtnPtocfWz/v+VRpTLnfklHNeLwTDzrdp8xsXNQJlY4EPqnWGHIVG+JlrCOG9 PNUZedh+KvOgZ09p/Jr20Gn0Vj3cBLfQSHF2gikYyYZP9yGdblikHrCHkh51xtRS /9hM7tcGwrYVtI6ecGUxxSCiUzBQeIHssq1aIb0yYM4xxjSAyJyX02bxJO+jpT5P NnWyBfO+8+5Djzal21XhgpVgXnk+sfz7G19bv4XxcyJQ5R/MlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6E/+mYL3UO6t+Zmf2pWVlEzO+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmFiMzdiNWQtNTVkYi0z ZjU3LWEwYTYtNWQzM2MzZGRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEes8UnmjPLUzyQHrHxT4cSvyCyqzUeGUQvJf2cC12i2o3mAI8dPib8 BIVI4h9IuiNWJZj5Skn4gjkWdpbw01z5moEY8jNwgkHXRsEdTDKhlw3JyaqAg/cw dggy6iecTwvv4OqYjHr56wEVRlTmrsQueDBsLgGxVUSq6RSiSe5Lda4s2BuqqMru 8fNxwSrgBu0x2/uG5sJsbiGJ04JSnxCgvVvALzh4L5fvQYJFQB+Pxt1msWCOetU4 kBzZskFkzy8e2eKt9pWnA+xWR9avLFxjTbJjTqzlg/8z14LSAvCSU3a2THK6y8qq 1fjqbTGc7dxSlQT5oixH5apvVjJH6CQ= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:28 2026 by rpki-client