$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa File: e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa (raw, json) Hash identifier: MAU66HYoUkJljXLYL3r8PEqG1vtZuftgYfbVJfFmz6Q= Subject key identifier: F9:94:AD:5B:72:FD:DF:3A:9E:BB:8D:8F:A1:B9:01:AA:FF:32:A0:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA30DB07B9CF3D02B67460 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:30:db:07:b9:cf:3d:02:b6:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3932696f-68e1-4c18-bc53-a41c05a106dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:15:f4:9b:aa:89:87:2d:a8:a1:53:2d:d8: f4:e0:62:3a:cc:60:d8:7f:7f:66:fc:d1:ff:ad:e4: 38:b7:a3:be:95:d8:65:cc:8f:c2:56:58:13:9b:79: 7f:25:e8:af:9c:45:a1:4a:25:50:38:a5:6b:30:fa: 91:41:b8:d1:7c:13:50:6d:c8:88:e3:77:ba:ad:25: 88:da:86:e3:38:f6:43:fe:95:05:bb:1d:db:0d:99: 27:a1:b0:a6:2a:a1:66:ab:28:6a:fc:ea:6a:84:20: 20:bb:97:a8:de:58:f2:80:43:77:e9:bf:c8:83:9b: 47:3d:92:10:01:22:1f:86:e8:17:ea:83:c9:59:31: 27:d3:cb:3c:52:92:98:ed:b9:35:49:62:f3:2b:13: 49:2d:62:8d:d8:e4:8f:39:8a:02:65:0a:5f:60:46: 6d:29:cd:59:67:5b:44:53:05:05:3a:88:6d:d7:50: 42:18:cc:fa:06:6d:60:fe:a2:22:98:2b:4b:af:72: 70:32:26:06:3b:73:57:b7:a6:e7:2a:ab:1b:54:cf: a9:2b:97:78:c4:5e:37:1a:c7:c1:1b:80:b2:01:12: bf:d5:4e:1a:70:26:ab:a3:2d:45:66:7f:c8:b1:d0: 8b:72:93:8a:09:72:de:89:93:5f:60:96:a0:8f:24: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:94:AD:5B:72:FD:DF:3A:9E:BB:8D:8F:A1:B9:01:AA:FF:32:A0:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:d8:72:e9:b4:7e:a8:b9:21:be:60:00:ee:ea:5f:c9:94:2d: b3:7a:73:ee:63:27:d9:14:1a:cf:68:cf:21:ab:c1:7a:02:97: 34:9c:39:e4:95:17:53:7a:73:d4:a3:c2:ea:5a:62:be:67:b0: 25:70:38:be:36:b6:2d:f4:c9:39:e2:04:b1:a4:53:da:86:45: 5b:2f:15:79:8f:17:10:90:4a:d0:c5:83:ec:1c:d1:3d:af:a7: 08:c4:0b:04:40:64:d2:22:d3:0b:da:38:44:95:79:d8:4c:01: 5b:93:3b:ea:d1:f0:bb:f4:6c:15:13:9b:12:f8:1a:88:97:e5: 73:de:91:da:84:60:29:cb:13:96:d5:96:8f:46:24:88:f0:ab: 26:71:67:bc:7b:12:a1:05:bd:7e:cd:86:6d:db:20:fa:3c:b3: a2:0d:21:37:7f:42:ca:94:a6:61:b8:94:7d:19:04:2c:35:89: f8:a8:ff:49:bb:48:2a:9a:1d:37:05:3b:74:7c:1b:af:a4:f1: a9:e3:f4:5a:b7:71:27:bb:fb:e9:6a:b2:cc:61:f7:b1:2d:cf: 1e:e7:ef:dc:05:ad:73:1d:20:f1:c5:59:0b:1c:c0:0a:67:53: 97:d9:4b:64:6c:af:2d:98:3d:d3:88:1d:9c:7d:d3:78:43:76: 5d:10:50:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjDbB7nPPQK2dGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MzkzMjY5NmYtNjhlMS00YzE4LWJjNTMtYTQxYzA1YTEwNmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnroV9JuqiYctqKFTLdj04GI6zGDYf39m/NH/ reQ4t6O+ldhlzI/CVlgTm3l/JeivnEWhSiVQOKVrMPqRQbjRfBNQbciI43e6rSWI 2objOPZD/pUFux3bDZknobCmKqFmqyhq/OpqhCAgu5eo3ljygEN36b/Ig5tHPZIQ ASIfhugX6oPJWTEn08s8UpKY7bk1SWLzKxNJLWKN2OSPOYoCZQpfYEZtKc1ZZ1tE UwUFOoht11BCGMz6Bm1g/qIimCtLr3JwMiYGO3NXt6bnKqsbVM+pK5d4xF43GsfB G4CyARK/1U4acCaroy1FZn/IsdCLcpOKCXLeiZNfYJagjySQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmUrVty/d86nruNj6G5Aar/MqCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTc2YWMzYTQtOGNlZC0z MzRjLWIyOWUtNmI3OTNiNWYyNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzYcum0fqi5Ib5gAO7qX8mULbN6c+5jJ9kUGs9ozyGrwXoClzScOeSV F1N6c9SjwupaYr5nsCVwOL42ti30yTniBLGkU9qGRVsvFXmPFxCQStDFg+wc0T2v pwjECwRAZNIi0wvaOESVedhMAVuTO+rR8Lv0bBUTmxL4GoiX5XPekdqEYCnLE5bV lo9GJIjwqyZxZ7x7EqEFvX7Nhm3bIPo8s6INITd/QsqUpmG4lH0ZBCw1ifio/0m7 SCqaHTcFO3R8G6+k8anj9Fq3cSe7++lqssxh97Etzx7n79wFrXMdIPHFWQscwApn U5fZS2Rsry2YPdOIHZx903hDdl0QUPc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:27 2026 by rpki-client