$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa File: fa6d7785-b363-37e6-834e-f8ca6302050e.roa (raw, json) Hash identifier: J42hNknxm3LNVg5NiC/Y+5RrmKAx2zxR9wCP3tAosQ0= Subject key identifier: F5:9A:15:9A:E6:0E:70:56:37:B7:45:2F:E7:3E:6E:E0:FA:E3:F3:4C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AAB53BEEAB695CE4CD503E Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:b5:3b:ee:ab:69:5c:e4:cd:50:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=ce70bb37-29d2-4f9f-bbe2-6474f8930802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d6:79:c7:4f:96:18:f4:41:e8:a2:77:6b:89: d7:f8:aa:bc:b5:dd:98:d9:5f:90:62:b4:d5:a2:13: 10:62:8b:47:17:71:a1:c5:26:6b:51:7c:87:35:40: 8b:8b:d5:cd:d9:d1:1b:ed:ed:aa:73:54:1b:3e:a8: 4a:2d:d8:41:6d:65:17:31:ca:74:a5:f1:43:d3:17: 13:6c:79:a5:e6:01:fd:f5:5c:2a:19:e2:be:d9:c6: ce:98:b1:6a:ab:e5:31:6f:ff:da:a7:d7:77:88:15: 41:f3:cc:49:e0:a5:9b:4a:60:35:ee:04:f6:f7:b6: f6:f1:a4:a5:74:81:2f:78:20:dc:e2:6f:b8:ec:fa: e1:b4:7f:bb:48:0f:3f:56:f0:e9:0c:f0:3e:d9:35: 01:0d:5f:f3:be:f2:e4:74:f8:12:ad:93:83:ac:8a: 5b:73:68:eb:03:69:94:33:f9:c0:31:55:51:6a:93: 87:cc:e9:29:42:06:c5:1b:fa:73:f3:59:e2:cc:a2: 3b:c9:71:e5:59:c0:6c:ff:84:9a:4a:2c:c4:d4:35: 32:83:d0:fe:7e:eb:3b:69:dc:55:45:bc:ef:91:ac: db:33:db:0c:16:00:62:79:25:bf:3e:66:51:d6:29: bc:ab:dc:74:49:0e:90:8a:11:37:ad:90:0d:ec:c8: 3b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9A:15:9A:E6:0E:70:56:37:B7:45:2F:E7:3E:6E:E0:FA:E3:F3:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:7b:b1:9d:9f:9c:77:e4:a7:27:ab:b1:74:52:57:a9:9f:3c: 57:ba:ea:0f:f6:36:cd:28:b5:de:b2:fd:cb:5b:4a:af:f5:98: 34:e3:7d:87:2e:3a:19:e2:6b:2d:3b:79:b8:67:21:83:d1:d1: b1:e7:bf:95:ab:fc:30:21:52:b5:44:f5:bc:ca:cf:ef:a0:ed: c1:c6:8b:50:ca:67:6e:5a:51:5d:8e:4a:1e:4f:fb:ae:db:f5: 4a:9d:21:e0:41:a1:44:3d:29:de:59:57:7e:69:ab:dc:8b:f8: 08:0e:79:3c:4e:7c:b2:9d:33:fc:28:d3:96:2a:9b:6d:e6:fc: 44:d1:f9:5d:38:96:98:61:a1:63:f8:0b:4d:69:31:a4:c4:23: 37:b6:45:bc:04:50:1f:6b:be:07:95:67:40:8d:58:50:29:b9: f9:dd:20:69:f2:3e:f5:43:f6:49:b9:c6:72:7b:5c:82:18:65: dc:39:ef:c5:54:ed:c8:12:8f:00:7f:ec:30:bf:c8:7e:d5:3a: 2c:e6:12:34:37:da:bf:3d:15:5b:60:5c:90:29:38:08:04:ef: ed:42:55:b9:d4:bd:40:2b:ab:42:d1:c9:df:97:16:d3:b3:81: ed:47:c2:e5:c6:ee:36:76:d4:2a:08:d5:28:b4:1d:43:84:4b: 58:d6:ca:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqrU77qtpXOTNUD4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Y2U3MGJiMzctMjlkMi00ZjlmLWJiZTItNjQ3NGY4OTMwODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtZ5x0+WGPRB6KJ3a4nX+Kq8td2Y2V+QYrTV ohMQYotHF3GhxSZrUXyHNUCLi9XN2dEb7e2qc1QbPqhKLdhBbWUXMcp0pfFD0xcT bHml5gH99VwqGeK+2cbOmLFqq+Uxb//ap9d3iBVB88xJ4KWbSmA17gT297b28aSl dIEveCDc4m+47PrhtH+7SA8/VvDpDPA+2TUBDV/zvvLkdPgSrZODrIpbc2jrA2mU M/nAMVVRapOHzOkpQgbFG/pz81nizKI7yXHlWcBs/4SaSizE1DUyg9D+fus7adxV RbzvkazbM9sMFgBieSW/PmZR1im8q9x0SQ6QihE3rZAN7Mg7yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWaFZrmDnBWN7dFL+c+buD64/NMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmE2ZDc3ODUtYjM2My0z N2U2LTgzNGUtZjhjYTYzMDIwNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ7sZ2fnHfkpyersXRSV6mfPFe66g/2Ns0otd6y/ctbSq/1mDTjfYcu Ohniay07ebhnIYPR0bHnv5Wr/DAhUrVE9bzKz++g7cHGi1DKZ25aUV2OSh5P+67b 9UqdIeBBoUQ9Kd5ZV35pq9yL+AgOeTxOfLKdM/wo05Yqm23m/ETR+V04lphhoWP4 C01pMaTEIze2RbwEUB9rvgeVZ0CNWFApufndIGnyPvVD9km5xnJ7XIIYZdw578VU 7cgSjwB/7DC/yH7VOizmEjQ32r89FVtgXJApOAgE7+1CVbnUvUArq0LRyd+XFtOz ge1HwuXG7jZ21CoI1Si0HUOES1jWyjQ= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:59 2026 by rpki-client