$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa File: fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa (raw, json) Hash identifier: 1wXu+wzrPQmjkPgvm2VOBtItfwQ6qjH4uCyyhUAooKw= Subject key identifier: 0A:8B:A3:85:0F:CC:B4:DA:15:04:61:A6:0B:54:F4:F7:C4:EE:98:F5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA436C327FBA22DF4A6940 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 70.32.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:43:6c:32:7f:ba:22:df:4a:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=937e77cb-9537-4594-b77f-9bdde7c80130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:a1:53:78:cc:b0:56:af:39:71:23:0d:bf: aa:42:61:e7:d3:f5:6f:c0:90:94:fc:b6:0a:55:42: 29:a1:a8:f1:a0:f0:d7:4b:3f:a1:ee:29:57:33:a3: 44:02:41:af:68:bf:6f:98:6f:5f:8f:3b:6e:02:a7: 49:46:76:ca:b3:a9:93:6d:45:fe:f3:08:f3:b7:59: 41:fc:55:a8:d4:d7:01:11:1f:4d:7c:27:1f:8a:2c: 32:ae:84:fd:a2:33:48:2a:7d:9c:ad:c5:c2:60:5f: 5f:6d:f4:3c:3c:33:0f:49:fd:71:59:b9:c3:b7:68: 97:93:95:e4:94:2a:cd:11:62:33:4b:9c:35:7e:f6: 63:5c:a8:52:6e:c1:2f:03:c7:54:5b:c3:5b:42:22: 63:5e:8b:24:91:51:1b:a1:f8:4a:9a:b8:6a:63:3f: f5:95:58:99:68:f4:a2:a9:32:88:76:ea:6e:82:14: 45:bc:83:2b:1a:8a:89:4b:11:e8:9f:c7:30:9e:b5: 96:72:2d:f0:73:4e:4c:2c:c6:c9:11:3f:8e:e1:58: 76:ec:f2:bb:41:70:c9:3e:28:da:f6:f5:7e:e9:e8: c7:c5:01:61:c0:6e:c4:d1:bf:0c:99:e6:ff:0f:ff: a6:5c:43:57:b6:bb:2e:76:aa:1b:8d:2c:be:36:92: 32:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8B:A3:85:0F:CC:B4:DA:15:04:61:A6:0B:54:F4:F7:C4:EE:98:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fe43196d-0d5d-3d8b-8bb7-64356fba876d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a6:d8:99:bf:db:8c:13:f3:3a:1e:01:78:d2:79:71:26:fa: ca:0d:74:30:ce:2b:fe:96:dc:07:82:9b:83:b5:fc:2d:7e:77: 41:2a:f8:02:7a:52:7a:cd:1e:9d:dc:85:29:a0:fb:36:a8:98: df:a3:e1:0d:13:8b:78:e0:d9:c8:6c:a0:f5:c3:63:dc:01:5e: 78:cb:fb:4e:cd:40:b4:81:50:88:53:2e:d8:71:41:fe:7a:5f: bd:19:9e:11:96:81:ee:7d:41:17:e7:f0:21:2f:3a:2c:f4:fc: 5a:67:46:b7:ef:58:19:8c:7e:51:5a:eb:98:7e:56:25:4f:0f: 58:8e:f3:0c:a6:48:ab:34:f9:10:96:f4:4f:b5:c7:c2:6f:b5: bd:e9:c1:86:45:d4:1a:e1:26:d8:ff:03:ad:f0:fb:88:44:aa: bc:25:01:88:f0:ea:6c:a1:83:27:0d:01:b6:b7:93:e3:9c:10: ab:f5:db:e9:c3:21:c2:7a:fb:c6:29:f9:9f:2b:05:9f:a1:8b: f1:23:1b:2a:e5:6a:fc:12:66:f2:48:ec:0b:b5:5d:97:1e:2d: 6c:3e:50:c8:42:48:19:a0:01:3f:a7:d2:50:01:10:74:76:d0: cf:3c:d5:93:d8:d5:7b:60:4d:43:f7:c0:54:33:a6:96:2b:ad: 2f:40:9e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkNsMn+6It9KaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OTM3ZTc3Y2ItOTUzNy00NTk0LWI3N2YtOWJkZGU3YzgwMTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqryhU3jMsFavOXEjDb+qQmHn0/VvwJCU/LYK VUIpoajxoPDXSz+h7ilXM6NEAkGvaL9vmG9fjztuAqdJRnbKs6mTbUX+8wjzt1lB /FWo1NcBER9NfCcfiiwyroT9ojNIKn2crcXCYF9fbfQ8PDMPSf1xWbnDt2iXk5Xk lCrNEWIzS5w1fvZjXKhSbsEvA8dUW8NbQiJjXoskkVEbofhKmrhqYz/1lViZaPSi qTKIdupughRFvIMrGoqJSxHon8cwnrWWci3wc05MLMbJET+O4Vh27PK7QXDJPija 9vV+6ejHxQFhwG7E0b8Mmeb/D/+mXENXtrsudqobjSy+NpIyewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqLo4UPzLTaFQRhpgtU9PfE7pj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmU0MzE5NmQtMGQ1ZC0z ZDhiLThiYjctNjQzNTZmYmE4NzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOm2Jm/24wT8zoeAXjSeXEm+soNdDDOK/6W3AeCm4O1/C1+d0Eq+AJ6 UnrNHp3chSmg+zaomN+j4Q0Ti3jg2chsoPXDY9wBXnjL+07NQLSBUIhTLthxQf56 X70ZnhGWge59QRfn8CEvOiz0/FpnRrfvWBmMflFa65h+ViVPD1iO8wymSKs0+RCW 9E+1x8Jvtb3pwYZF1BrhJtj/A63w+4hEqrwlAYjw6myhgycNAba3k+OcEKv12+nD IcJ6+8Yp+Z8rBZ+hi/EjGyrlavwSZvJI7Au1XZceLWw+UMhCSBmgAT+n0lABEHR2 0M881ZPY1XtgTUP3wFQzppYrrS9Ant0= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:07 2026 by rpki-client