$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa File: c50cd811-3be7-377f-aad6-f7366be2a40b.roa (raw, json) Hash identifier: T2Sdhsnd/XcQWK/+c0y+Sgl+M3BJjldQK1Vkr8P9RbA= Subject key identifier: 0D:FD:DD:39:78:B6:2A:5A:F5:D7:DB:77:97:3B:E8:97:3E:57:49:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AAB578284F945C78EBEA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b5:78:28:4f:94:5c:78:eb:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=c9a5aa81-87f6-4cc0-806d-95aba45f6a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:49:9a:62:d6:b6:8f:70:98:b0:32:15:27:f8: a2:67:0a:9f:3a:61:1a:33:fd:2e:ec:01:68:33:61: e3:59:d9:9d:17:86:70:a9:11:40:13:2f:60:0a:0f: 47:59:4d:89:ae:81:2b:c3:57:98:ae:b8:70:99:61: d0:4f:dd:6b:54:52:b1:66:e6:d9:11:9a:6c:04:13: af:25:f9:f4:68:7c:f1:48:07:e7:3a:24:5c:55:c2: 6d:92:75:91:26:20:8f:ce:c9:43:c5:c6:52:84:32: 1d:16:9f:05:48:cc:d6:ff:a0:ab:55:31:bd:94:8c: 8e:8e:f2:ef:85:1c:cb:10:2e:90:95:a5:07:a0:6e: 91:14:bb:83:15:17:33:b5:50:d5:c7:47:f8:94:69: 46:9a:ae:89:05:64:90:9c:5b:31:b8:20:6f:e2:c1: c7:e2:29:70:98:b2:ed:e9:9b:c9:40:dd:88:da:b6: 9c:16:a6:0d:93:7c:f0:88:dd:a9:27:e8:89:95:16: fc:84:c9:16:d0:4f:53:49:40:db:c7:a0:5a:26:79: 4a:24:29:a9:15:d6:42:05:12:59:b7:1d:0f:bd:1b: fb:86:73:89:bf:fd:f8:19:ec:88:b4:7e:73:60:2f: 9e:c2:7e:3d:bf:5d:44:ce:66:e4:e4:27:d5:1e:c4: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FD:DD:39:78:B6:2A:5A:F5:D7:DB:77:97:3B:E8:97:3E:57:49:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c50cd811-3be7-377f-aad6-f7366be2a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:81:16:77:dd:74:61:6b:96:36:84:0c:21:cf:9a:7a:28:37: 8c:74:e2:d2:1f:08:ee:87:a6:5a:04:13:6c:7e:23:d5:61:fd: 01:a6:4c:ea:32:8e:63:3c:23:49:e0:4c:09:09:49:14:62:b6: 9d:7c:c1:f7:bd:76:2d:f7:e8:d5:d8:40:66:e4:bc:b0:54:cc: 60:5a:68:d0:fa:57:af:18:56:0b:77:5b:c4:55:c6:fc:60:25: 82:e9:06:e4:bf:33:ee:cf:89:93:a4:ec:63:11:2e:c9:32:c5: 1d:fa:b7:4a:fd:3c:ea:bc:f7:b8:f4:70:40:a3:92:f9:ca:08: ff:94:d5:fc:d0:5e:1e:6f:5c:da:bc:ec:bb:83:7e:90:3f:58: 15:15:7c:8b:39:52:59:59:6c:af:c4:c2:09:57:bc:fc:f6:9d: 24:32:b4:40:f2:20:3f:4f:1a:ad:cb:6f:19:e1:0e:b9:84:89: 37:60:1e:09:87:03:b1:3f:52:92:a3:c1:9a:3e:5e:5b:4a:87: ea:67:a5:20:c4:72:bd:0a:55:2b:2a:98:93:e4:33:20:bc:9a: a9:af:65:c5:44:72:a8:e0:ea:44:c1:c2:7f:d1:2b:7e:e8:1c: da:13:5a:5e:d4:b9:38:98:d7:6d:4e:76:2f:79:f5:7f:90:5f: 95:a3:ac:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrV4KE+UXHjr6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YzlhNWFhODEtODdmNi00Y2MwLTgwNmQtOTVhYmE0NWY2YTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEmaYta2j3CYsDIVJ/iiZwqfOmEaM/0u7AFo M2HjWdmdF4ZwqRFAEy9gCg9HWU2JroErw1eYrrhwmWHQT91rVFKxZubZEZpsBBOv Jfn0aHzxSAfnOiRcVcJtknWRJiCPzslDxcZShDIdFp8FSMzW/6CrVTG9lIyOjvLv hRzLEC6QlaUHoG6RFLuDFRcztVDVx0f4lGlGmq6JBWSQnFsxuCBv4sHH4ilwmLLt 6ZvJQN2I2racFqYNk3zwiN2pJ+iJlRb8hMkW0E9TSUDbx6BaJnlKJCmpFdZCBRJZ tx0PvRv7hnOJv/34GeyItH5zYC+ewn49v11Ezmbk5CfVHsS3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA393Tl4tipa9dfbd5c76Jc+V0lJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzUwY2Q4MTEtM2JlNy0z NzdmLWFhZDYtZjczNjZiZTJhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOBFnfddGFrljaEDCHPmnooN4x04tIfCO6HploEE2x+I9Vh/QGmTOoy jmM8I0ngTAkJSRRitp18wfe9di336NXYQGbkvLBUzGBaaND6V68YVgt3W8RVxvxg JYLpBuS/M+7PiZOk7GMRLskyxR36t0r9POq897j0cECjkvnKCP+U1fzQXh5vXNq8 7LuDfpA/WBUVfIs5UllZbK/EwglXvPz2nSQytEDyID9PGq3LbxnhDrmEiTdgHgmH A7E/UpKjwZo+XltKh+pnpSDEcr0KVSsqmJPkMyC8mqmvZcVEcqjg6kTBwn/RK37o HNoTWl7UuTiY121Odi959X+QX5WjrMU= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:19 2026 by rpki-client