$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/09ed4c48-3657-3af7-9906-5c76f5968208.roa File: 09ed4c48-3657-3af7-9906-5c76f5968208.roa (raw, json) Hash identifier: 6d/OgkD7C6sN68NBIrsr+UoUf8YOwrk0+4c83nBh1/g= Subject key identifier: 3A:1A:8C:32:AA:E8:3E:17:52:06:6E:CE:DC:5A:31:FD:F1:CA:56:75 Certificate issuer: /CN=13f2987b-65e9-4b0f-9061-f324b366fd94 Certificate serial: 010D0C9F4328584CD1AEE17BCB58935FB020A480 Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/09ed4c48-3657-3af7-9906-5c76f5968208.roa Signing time: Tue 10 Feb 2026 17:50:57 +0000 ROA not before: Tue 10 Feb 2026 17:50:57 +0000 ROA not after: Mon 11 May 2026 16:50:57 +0000 asID: 32425 IP address blocks: 70.40.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:ae:e1:7b:cb:58:93:5f:b0:20:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94 Validity Not Before: Feb 10 17:50:57 2026 GMT Not After : May 11 16:50:57 2026 GMT Subject: CN=894a60ba-ac20-4686-b8d2-fa647e647150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:f6:52:80:1f:9f:f2:8d:fb:7f:cf:4b:09: 70:37:e8:d1:b8:15:63:a9:40:31:7c:14:69:4a:f9: 73:8a:ef:21:10:1a:73:06:9b:90:6d:34:cf:7f:17: ac:cb:56:2a:3b:08:85:47:e9:2a:2e:90:85:cf:de: 72:60:75:10:df:b3:ca:fe:ed:3d:7b:0a:02:b9:e6: 47:3e:a9:91:d0:f6:05:04:78:54:65:1c:50:8d:cd: 69:60:95:25:df:e3:14:34:7d:ac:4c:f4:01:14:3e: 52:6e:06:c5:05:7b:cb:fc:63:10:11:0d:4f:05:3f: dc:c0:a0:4a:12:27:52:c0:46:a4:8e:99:fa:5e:42: 14:0f:ab:df:fe:31:2d:a1:26:42:3e:10:20:58:51: 28:ec:71:5b:d8:21:87:c1:cc:15:a6:25:52:0a:c7: 21:d6:c1:0a:16:2f:b3:d1:b1:8d:43:1f:93:f3:8f: 77:7b:b4:8f:ea:cc:a1:73:5b:6f:bc:d4:e6:cf:63: c9:85:14:a6:8d:b7:e1:cc:f5:aa:e9:8f:f1:0a:31: 46:19:69:64:06:95:be:e8:0d:52:dc:c3:0a:5a:34: 27:57:e8:b6:7b:44:c6:00:f3:af:7b:4b:10:c5:c6: e5:7f:d6:ab:4f:ce:2d:0f:38:e6:1e:dc:70:5d:85: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1A:8C:32:AA:E8:3E:17:52:06:6E:CE:DC:5A:31:FD:F1:CA:56:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/09ed4c48-3657-3af7-9906-5c76f5968208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl X509v3 Authority Key Identifier: keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer sbgp-ipAddrBlock: critical IPv4: 70.40.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:1a:92:d8:fd:ec:9f:ec:06:08:8f:0d:18:48:e3:21:46:5f: 51:bc:66:5a:0e:bb:44:c0:e9:8b:1f:2f:89:e6:f8:5f:bf:c9: c7:33:16:5a:5b:45:e4:99:cb:6e:14:5c:ac:07:6f:04:73:1b: 55:8e:80:33:07:2f:a8:2a:ec:c3:e4:8b:09:ef:54:cb:c1:87: 49:7a:57:2b:f4:53:cb:13:50:68:25:56:10:90:52:2f:a8:b5: 1a:d8:60:af:72:ef:65:ef:10:81:81:8c:65:a9:18:80:45:5b: 32:c6:e4:ad:d6:7e:5e:7e:28:6e:b1:24:ae:40:5d:da:71:1a: 87:10:c2:87:88:f8:7d:8d:5b:a4:1c:d8:6a:67:b9:5f:6f:df: 57:e9:96:3d:66:01:0a:21:e9:1a:33:fe:1b:57:c1:d8:1f:b2: 0f:ce:af:08:16:79:1c:db:f6:e3:a3:8e:fa:41:ef:cb:34:46: e2:d7:b1:7d:31:9f:62:a5:89:42:62:38:c3:f0:a5:ed:e4:4e: 19:ad:38:60:3f:f7:5c:7f:7f:9d:bc:48:7d:3c:68:48:6f:45: 08:46:72:fe:4d:5e:f6:97:bc:da:02:37:d8:db:f1:bd:50:1e: a9:9f:68:95:eb:43:bb:91:8a:4b:57:e7:b1:b0:2a:45:10:db: 7c:c9:68:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRruF7y1iTX7AgpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmMjk4N2ItNjVlOS00YjBmLTkwNjEtZjMyNGIzNjZm ZDk0MB4XDTI2MDIxMDE3NTA1N1oXDTI2MDUxMTE2NTA1N1owLzEtMCsGA1UEAxMk ODk0YTYwYmEtYWMyMC00Njg2LWI4ZDItZmE2NDdlNjQ3MTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRX2UoAfn/KN+3/PSwlwN+jRuBVjqUAxfBRp Svlziu8hEBpzBpuQbTTPfxesy1YqOwiFR+kqLpCFz95yYHUQ37PK/u09ewoCueZH PqmR0PYFBHhUZRxQjc1pYJUl3+MUNH2sTPQBFD5SbgbFBXvL/GMQEQ1PBT/cwKBK EidSwEakjpn6XkIUD6vf/jEtoSZCPhAgWFEo7HFb2CGHwcwVpiVSCsch1sEKFi+z 0bGNQx+T8493e7SP6syhc1tvvNTmz2PJhRSmjbfhzPWq6Y/xCjFGGWlkBpW+6A1S 3MMKWjQnV+i2e0TGAPOve0sQxcblf9arT84tDzjmHtxwXYW5ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoajDKq6D4XUgZuztxaMf3xylZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xM2Yy OTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0YjM2NmZkOTQvMDllZDRjNDgtMzY1Ny0z YWY3LTk5MDYtNWM3NmY1OTY4MjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTNmMjk4N2ItNjVlOS00YjBmLTkw NjEtZjMyNGIzNjZmZDk0LzEzZjI5ODdiLTY1ZTktNGIwZi05MDYxLWYzMjRiMzY2 ZmQ5NC5jcmwwHwYDVR0jBBgwFoAUxt3F8684P/Bqh/r6+Mr1rsrEwzcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xM2YyOTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0 YjM2NmZkOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiiZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIaktj97J/sBgiPDRhI4yFGX1G8ZloOu0TA6YsfL4nm+F+/ycczFlpb ReSZy24UXKwHbwRzG1WOgDMHL6gq7MPkiwnvVMvBh0l6Vyv0U8sTUGglVhCQUi+o tRrYYK9y72XvEIGBjGWpGIBFWzLG5K3Wfl5+KG6xJK5AXdpxGocQwoeI+H2NW6Qc 2GpnuV9v31fplj1mAQoh6Roz/htXwdgfsg/OrwgWeRzb9uOjjvpB78s0RuLXsX0x n2KliUJiOMPwpe3kThmtOGA/91x/f528SH08aEhvRQhGcv5NXvaXvNoCN9jb8b1Q HqmfaJXrQ7uRiktX57GwKkUQ23zJaDI= -----END CERTIFICATE-----Generated at Mon Mar 2 19:23:32 2026 by rpki-client