$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8730f13-1e27-3fdc-a237-7044864113b2.roa File: c8730f13-1e27-3fdc-a237-7044864113b2.roa (raw, json) Hash identifier: CxEPAZzFaV5HWOAjyiIwDTK5yKC1VC9xO+VAY+uf9V0= Subject key identifier: 5E:A7:CC:A5:F9:BF:A3:C9:0F:C6:FE:65:F9:27:D6:67:03:BC:42:A0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA5DE3EA2F1DFF38FF0D40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8730f13-1e27-3fdc-a237-7044864113b2.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:5d:e3:ea:2f:1d:ff:38:ff:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=506ae3dd-e060-4b6b-b57b-6f6725d00861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:58:5f:30:02:04:34:0d:24:6f:8f:22:81: 08:72:87:ae:04:e1:4a:68:7d:d6:07:14:c9:11:6b: f9:dd:0e:af:68:47:42:fc:42:81:38:c3:9d:b8:a7: 6c:33:34:d0:6b:8f:62:ed:f0:c0:f1:4b:b9:98:12: 11:2b:c8:a1:71:f5:8d:9c:34:a1:9c:e9:4d:ca:e3: 57:e4:39:13:56:db:64:50:01:74:4a:2a:84:e2:11: 83:4a:fe:5e:11:10:6c:2d:71:a6:8e:d1:ad:ee:e3: 23:15:c4:4b:63:5a:1e:77:4d:f7:7a:48:a2:ea:51: e8:f2:e9:c3:7d:50:8c:1b:a6:cb:7f:47:0f:f0:ac: 0b:2e:9e:fd:b0:95:a9:85:9c:74:1d:00:cf:ef:89: e6:b6:74:a8:06:a5:4c:05:2a:16:fb:1c:e4:40:9c: 3e:cd:f2:18:f9:54:d2:22:bb:88:18:79:4c:db:ef: 9d:cc:db:16:8e:4c:1d:ce:b7:0d:ef:bd:eb:75:8c: cf:a9:cf:e0:7b:3c:b4:a4:42:c2:04:f3:fd:57:ec: 62:0a:bc:37:97:04:0c:e3:4c:04:c4:68:e6:27:ec: 09:72:d0:30:ab:0b:94:02:e8:b2:2b:9c:a5:a2:53: 8a:97:e7:9d:28:c2:be:65:f1:2b:7c:ea:c3:06:c8: f9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A7:CC:A5:F9:BF:A3:C9:0F:C6:FE:65:F9:27:D6:67:03:BC:42:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8730f13-1e27-3fdc-a237-7044864113b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:dd:98:d5:22:d9:5a:80:24:a6:31:93:90:36:f4:25:61:a4: 3d:51:71:6b:73:4b:18:2c:0e:ea:e3:a5:25:47:c1:44:84:e3: 67:be:48:13:6a:d3:3f:43:4d:40:18:d9:2d:70:82:9c:f5:a4: ed:07:a5:16:1b:3f:54:d4:f3:a2:79:f6:5a:62:7a:c2:60:32: 40:fb:5e:68:c8:63:c9:25:68:49:6b:49:ff:25:62:b1:13:22: ff:78:82:7f:a2:a9:10:c0:c5:c5:c6:6b:39:eb:c7:ee:a4:32: 92:f1:a8:64:ca:e3:56:2b:95:6b:ef:d4:89:87:7c:44:e2:15: dc:8b:1d:a8:d0:db:46:66:79:94:86:2e:8c:e8:2f:a0:4e:07: d7:be:89:87:2c:38:a3:c4:e7:2b:2b:f9:b4:30:09:f9:d1:7a: c4:5b:c1:05:8a:4a:4b:2f:a4:9e:65:2d:e9:91:b4:e6:16:b0: 55:60:d3:11:c9:6a:1b:43:a6:97:69:94:ee:61:6d:a8:35:aa: 0e:e5:3f:dc:bd:2e:f9:d3:aa:10:35:1f:bf:e6:ea:02:b1:e6: 87:78:e7:db:dd:5b:fe:39:ad:03:f4:eb:cf:95:05:e2:fa:cc: 40:57:23:f7:46:bf:48:67:2b:67:5b:68:32:83:c7:73:89:18: 2f:2d:bc:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nql3j6i8d/zj/DUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NTA2YWUzZGQtZTA2MC00YjZiLWI1N2ItNmY2NzI1ZDAwODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZFYXzACBDQNJG+PIoEIcoeuBOFKaH3WBxTJ EWv53Q6vaEdC/EKBOMOduKdsMzTQa49i7fDA8Uu5mBIRK8ihcfWNnDShnOlNyuNX 5DkTVttkUAF0SiqE4hGDSv5eERBsLXGmjtGt7uMjFcRLY1oed033ekii6lHo8unD fVCMG6bLf0cP8KwLLp79sJWphZx0HQDP74nmtnSoBqVMBSoW+xzkQJw+zfIY+VTS IruIGHlM2++dzNsWjkwdzrcN773rdYzPqc/gezy0pELCBPP9V+xiCrw3lwQM40wE xGjmJ+wJctAwqwuUAuiyK5ylolOKl+edKMK+ZfErfOrDBsj5xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6nzKX5v6PJD8b+Zfkn1mcDvEKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzg3MzBmMTMtMWUyNy0z ZmRjLWEyMzctNzA0NDg2NDExM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzdmNUi2VqAJKYxk5A29CVhpD1RcWtzSxgsDurjpSVHwUSE42e+SBNq 0z9DTUAY2S1wgpz1pO0HpRYbP1TU86J59lpiesJgMkD7XmjIY8klaElrSf8lYrET Iv94gn+iqRDAxcXGaznrx+6kMpLxqGTK41YrlWvv1ImHfETiFdyLHajQ20ZmeZSG LozoL6BOB9e+iYcsOKPE5ysr+bQwCfnResRbwQWKSksvpJ5lLemRtOYWsFVg0xHJ ahtDppdplO5hbag1qg7lP9y9LvnTqhA1H7/m6gKx5od459vdW/45rQP068+VBeL6 zEBXI/dGv0hnK2dbaDKDx3OJGC8tvNg= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:12 2026 by rpki-client