$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa File: ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa (raw, json) Hash identifier: w7TTlmYCoMO2M8LVTfkdOl5pWZ6oVWIISe4mo9aXpE8= Subject key identifier: EF:F3:17:A7:00:AE:D1:9E:58:07:82:43:54:1B:89:EF:1F:B7:08:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA42BEB3E21EE1A06553A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:42:be:b3:e2:1e:e1:a0:65:53:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d76fbb02-2e59-4885-8cc0-667f0864b424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:26:c0:d7:71:d6:03:73:30:28:b1:54:48:a1: 1e:1e:9b:73:45:12:96:6c:08:c1:4e:0c:aa:03:a3: bf:d2:88:d0:7c:bb:f9:e0:0d:09:32:9e:c6:c0:fe: 58:a5:c4:b2:34:cf:9c:30:26:28:6a:f4:5f:52:f5: 40:7f:d9:38:6f:2e:87:ed:c2:d7:8e:3b:c7:bd:98: 4c:2e:56:a8:ba:2d:79:81:65:d9:49:21:0d:4d:f7: 83:42:82:e5:b4:13:d4:b1:04:c3:fc:72:15:c1:bb: 3b:8c:84:3c:d5:30:c9:20:56:ce:2d:5c:96:8c:b7: 74:a6:d2:5a:30:d8:04:6e:3e:90:a6:a0:5f:e9:d9: b2:28:e3:8e:e7:63:e2:1b:27:38:be:0c:73:34:24: ab:9d:74:2a:c7:bd:af:c2:03:a5:13:ef:a1:8c:34: 04:95:3d:cf:bb:53:05:23:57:07:2d:4c:97:77:3d: 29:47:cf:3e:3e:5d:99:b3:c3:12:42:ed:2c:5b:23: 6c:d2:47:1e:f4:12:70:7a:b5:b1:fa:ff:db:5f:bc: 5d:ed:70:18:ef:71:2c:b7:80:d6:57:56:3b:90:2e: 7f:7f:2e:39:a8:a6:f3:b3:9b:61:e0:6f:33:c1:13: 22:dc:07:0e:02:de:df:43:9c:75:17:38:e3:32:8e: 2b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F3:17:A7:00:AE:D1:9E:58:07:82:43:54:1B:89:EF:1F:B7:08:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e2:36:79:d6:3a:44:8d:fa:78:63:d7:75:37:0a:68:47:c3: 1e:35:fa:07:86:9c:f7:ab:60:b7:ce:eb:d6:7e:18:05:27:f4: 4b:5a:17:3e:cd:10:a8:85:31:10:cb:9d:76:e1:68:e6:18:d6: 9b:5c:57:08:36:bb:63:3c:8b:1e:10:09:f7:69:36:73:e7:99: ef:cc:9d:b0:f2:fa:27:be:9d:d3:66:d7:1d:cc:03:25:21:ea: b3:28:72:f9:ed:e7:a8:ff:99:07:fb:36:82:57:13:26:92:f5: 1a:7a:0e:22:ee:18:96:98:cb:3c:4f:bd:59:41:ff:de:da:c1: 56:e2:93:56:db:9c:2d:15:c5:49:78:a1:bf:4d:30:d3:ff:89: 4c:15:eb:7b:08:b7:1a:95:fc:ba:b5:b1:c4:b0:e3:20:a4:71: 2e:16:06:5c:ec:e5:db:5f:8b:58:30:e9:36:b5:85:80:bf:72: 71:e7:22:8d:75:76:00:5d:d4:99:c2:57:af:b6:09:98:85:6f: 03:ed:77:ea:6e:c3:b4:0d:61:25:1c:65:d1:9f:2c:30:23:57: 73:e3:f3:c2:34:66:41:e5:e1:dc:33:60:e9:f0:08:63:9b:ab: 45:82:d6:1a:7c:4d:06:e3:3b:54:4c:55:33:62:9f:ed:f3:71: be:88:e4:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkK+s+Ie4aBlU6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDc2ZmJiMDItMmU1OS00ODg1LThjYzAtNjY3ZjA4NjRiNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSbA13HWA3MwKLFUSKEeHptzRRKWbAjBTgyq A6O/0ojQfLv54A0JMp7GwP5YpcSyNM+cMCYoavRfUvVAf9k4by6H7cLXjjvHvZhM Llaoui15gWXZSSENTfeDQoLltBPUsQTD/HIVwbs7jIQ81TDJIFbOLVyWjLd0ptJa MNgEbj6QpqBf6dmyKOOO52PiGyc4vgxzNCSrnXQqx72vwgOlE++hjDQElT3Pu1MF I1cHLUyXdz0pR88+Pl2Zs8MSQu0sWyNs0kce9BJwerWx+v/bX7xd7XAY73Est4DW V1Y7kC5/fy45qKbzs5th4G8zwRMi3AcOAt7fQ5x1FzjjMo4rIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/zF6cArtGeWAeCQ1Qbie8ftwg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2NhYzFjYjktZTRlOS0z ZmU4LWEwZWEtMzcwOWU5YjA3ZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDiNnnWOkSN+nhj13U3CmhHwx41+geGnPerYLfO69Z+GAUn9EtaFz7N EKiFMRDLnXbhaOYY1ptcVwg2u2M8ix4QCfdpNnPnme/MnbDy+ie+ndNm1x3MAyUh 6rMocvnt56j/mQf7NoJXEyaS9Rp6DiLuGJaYyzxPvVlB/97awVbik1bbnC0VxUl4 ob9NMNP/iUwV63sItxqV/Lq1scSw4yCkcS4WBlzs5dtfi1gw6Ta1hYC/cnHnIo11 dgBd1JnCV6+2CZiFbwPtd+puw7QNYSUcZdGfLDAjV3Pj88I0ZkHl4dwzYOnwCGOb q0WC1hp8TQbjO1RMVTNin+3zcb6I5Gc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:37 2026 by rpki-client