$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa File: cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa (raw, json) Hash identifier: SVlg9GlI5gOs6RJaCPQaCnhULqpMZlNPW5kSJZQfi48= Subject key identifier: 0B:54:BC:4B:F7:A4:5E:AF:95:61:60:09:23:32:14:ED:42:C4:ED:8B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA39B2DCB1F05F5A0425C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:39:b2:dc:b1:f0:5f:5a:04:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=f17a4a9a-5bf8-4326-af8d-2e4ba2526be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:6c:86:5f:06:60:c9:a3:01:9b:83:d9:5c: eb:2a:d0:de:1b:e6:45:95:21:0f:4a:83:ad:1d:2f: d4:1e:5b:3c:de:72:3f:57:5c:1c:86:e1:5f:3f:c2: d3:2a:71:55:e4:0c:3f:ae:4f:72:ac:3a:e0:3e:50: 24:19:92:9d:a9:41:7e:1b:8d:c2:20:76:eb:19:91: 3a:b4:ce:77:b7:79:a5:8f:83:c5:a3:d2:b4:ea:e9: 37:42:ea:1f:2b:ae:7f:8b:48:3f:e2:15:6d:56:ee: 13:2d:c7:24:ee:56:13:4a:52:2e:33:ea:8d:44:0c: 6c:38:a3:e7:1e:b0:3e:9a:16:ad:11:f7:28:48:54: 84:11:6f:19:28:7b:1b:61:48:26:a2:1b:b6:01:1f: 6b:be:69:84:3a:83:f5:31:8b:d3:ce:7f:26:20:09: 57:41:39:f6:70:50:49:0e:e8:76:63:3e:2d:58:32: e9:79:83:aa:96:32:d9:92:e9:8b:72:04:b2:71:4f: 57:cf:bf:c9:99:16:bf:ad:55:3d:eb:6e:73:d3:13: ce:58:fb:20:cf:69:05:f7:b1:12:97:79:8e:db:05: 97:86:a1:53:90:f0:49:c9:58:de:b4:b5:01:a0:38: ca:6b:95:10:22:1b:0f:bc:d0:f2:76:35:12:32:91: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:54:BC:4B:F7:A4:5E:AF:95:61:60:09:23:32:14:ED:42:C4:ED:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:12:6d:72:ba:d5:3c:76:3e:66:70:0b:33:13:5d:d4:bc:38: ea:56:45:5b:2b:ae:05:dc:e1:ce:bd:b5:4f:e7:4e:5c:6d:a9: e0:f3:23:dc:29:ce:1c:ca:fe:50:10:0f:4a:b7:74:74:37:b3: 57:fa:f1:69:74:2a:06:37:34:41:d7:d9:bd:5c:af:ff:b2:9c: 3f:87:05:40:67:be:41:08:09:ae:ad:2f:56:c3:bc:40:37:43: df:fe:66:9f:8c:b8:3a:d3:2c:25:0e:1e:26:20:b8:85:39:7a: aa:b6:26:b0:d1:63:23:eb:be:a7:4c:2f:c2:ca:41:c9:d1:7f: 89:bd:e8:78:75:3d:98:ff:76:75:91:8f:31:d2:0f:53:c8:58: 4d:ea:2c:c2:f5:e0:d1:e7:0d:73:91:99:86:08:12:f0:7a:9f: 9c:49:5e:79:5f:65:7a:5e:8e:d9:c5:b5:0a:dd:c5:8e:00:6b: da:32:8b:60:94:0b:9d:bd:1f:ee:23:bd:d3:89:5e:99:8e:9e: 75:59:f6:ef:51:71:33:9d:0f:cc:47:d0:f9:36:5f:b9:ef:3b: 2f:e3:ff:1f:d9:f3:63:14:2c:89:ff:65:fb:0e:a1:b9:55:56: df:5d:77:86:58:b8:be:2e:22:1d:a5:4f:d1:86:24:a2:f0:dc: 23:ba:74:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjmy3LHwX1oEJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZjE3YTRhOWEtNWJmOC00MzI2LWFmOGQtMmU0YmEyNTI2YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yBshl8GYMmjAZuD2VzrKtDeG+ZFlSEPSoOt HS/UHls83nI/V1wchuFfP8LTKnFV5Aw/rk9yrDrgPlAkGZKdqUF+G43CIHbrGZE6 tM53t3mlj4PFo9K06uk3QuofK65/i0g/4hVtVu4TLcck7lYTSlIuM+qNRAxsOKPn HrA+mhatEfcoSFSEEW8ZKHsbYUgmohu2AR9rvmmEOoP1MYvTzn8mIAlXQTn2cFBJ Duh2Yz4tWDLpeYOqljLZkumLcgSycU9Xz7/JmRa/rVU9625z0xPOWPsgz2kF97ES l3mO2wWXhqFTkPBJyVjetLUBoDjKa5UQIhsPvNDydjUSMpESbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtUvEv3pF6vlWFgCSMyFO1CxO2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Q4NmJkNjUtNjlkYS0z NjhjLTlkYzItODQzNWYxZmY5Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcSbXK61Tx2PmZwCzMTXdS8OOpWRVsrrgXc4c69tU/nTlxtqeDzI9wp zhzK/lAQD0q3dHQ3s1f68Wl0KgY3NEHX2b1cr/+ynD+HBUBnvkEICa6tL1bDvEA3 Q9/+Zp+MuDrTLCUOHiYguIU5eqq2JrDRYyPrvqdML8LKQcnRf4m96Hh1PZj/dnWR jzHSD1PIWE3qLML14NHnDXORmYYIEvB6n5xJXnlfZXpejtnFtQrdxY4Aa9oyi2CU C529H+4jvdOJXpmOnnVZ9u9RcTOdD8xH0Pk2X7nvOy/j/x/Z82MULIn/ZfsOoblV Vt9dd4ZYuL4uIh2lT9GGJKLw3CO6dJY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:05 2026 by rpki-client