$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa File: 2917b113-9e5f-3763-84e3-6da8775eeb3e.roa (raw, json) Hash identifier: 4TO4M2b1n2Zvvo6hGhA1TJXbWI88Ivqk3kiGbszasPg= Subject key identifier: 4C:47:A8:41:A9:1D:D4:DC:B1:94:4A:D9:53:F4:41:36:CC:8F:44:60 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E0866101A2BEE43C773BBDC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 70.32.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:10:1a:2b:ee:43:c7:73:bb:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=25e8651d-2c87-4e77-9d49-151c3c7aa4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:e5:58:73:63:8c:eb:69:f0:4c:9a:3b:c7: ec:54:2e:03:53:c0:47:78:ec:56:66:97:8d:ff:a5: 5e:bf:db:95:bc:ce:4f:35:1e:a4:30:28:ae:23:95: 47:39:18:e8:15:70:0d:24:03:2e:39:3f:fe:f0:8d: a9:6b:4b:1e:4e:76:30:dd:d9:a5:9c:0a:4d:c9:31: 20:78:f0:ad:75:55:46:e1:ab:d8:21:8c:84:df:76: 46:ec:ce:d1:1d:84:3d:65:b2:16:c1:38:50:cb:af: 58:df:6c:09:39:c8:28:c8:5c:43:12:b8:54:a1:c1: 58:09:33:03:ea:d6:68:bb:76:c3:7d:3d:69:0c:69: 6e:af:1d:23:8e:d6:e1:b7:5e:76:25:9d:bb:50:3a: 33:05:24:5d:af:92:2a:a4:a4:b2:b2:dd:b2:61:f8: 86:56:d0:1d:de:19:ec:65:5f:80:32:da:7d:1c:6a: b2:23:b9:fc:0a:ed:42:2b:bb:17:24:ac:01:91:ec: 32:33:2e:a7:09:5a:5f:36:0a:18:be:db:45:45:1f: 1b:7d:c0:b6:a5:7e:09:1e:d7:d3:e6:7d:74:43:19: a7:d2:e4:8d:fc:f9:e9:bf:c9:0b:57:8a:02:2a:a3: 99:69:08:6d:1f:97:79:4b:0f:3b:6e:7d:37:ca:53: 6c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:47:A8:41:A9:1D:D4:DC:B1:94:4A:D9:53:F4:41:36:CC:8F:44:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2917b113-9e5f-3763-84e3-6da8775eeb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e5:a0:43:da:cd:0d:ae:84:fb:ff:f1:1a:c6:e8:2c:5e:ef: ec:e9:2b:e7:81:53:52:3c:1e:ce:03:bf:84:bf:ba:85:7f:b2: 38:31:18:3a:88:a5:e5:54:d6:0b:ef:04:46:c3:20:1c:22:3f: a7:8c:c9:c9:3f:9e:5e:92:6f:ae:e6:1c:ec:da:de:21:2f:64: c8:ed:dc:25:57:0f:9c:42:e6:6c:c3:a3:6c:7a:21:fd:96:35: 61:fe:68:a7:04:5c:0b:d9:29:64:05:e8:30:32:2d:3e:8e:6d: 00:41:50:5b:71:26:c7:30:b4:88:30:e2:03:2c:4b:50:66:87: 5f:87:b3:56:73:2b:36:37:97:e5:79:88:f2:61:29:d3:58:3c: 1f:ca:22:7e:2f:44:7d:06:83:d9:ec:0b:e9:7f:95:b3:53:55: 77:bd:b2:37:af:15:ae:47:d3:33:75:b6:4a:df:39:b2:59:bb: f1:36:ff:c4:79:2b:50:72:72:9a:92:4d:9d:01:fa:31:2b:09: c1:ed:1c:3b:6b:5b:9f:87:4a:bd:67:54:b8:8d:4a:4f:65:4e: e7:c2:f0:bb:f5:0c:6f:be:66:7d:d1:a6:c3:34:4e:69:c3:86: ff:1e:c6:e4:e7:91:16:0b:a2:1f:ff:f6:c0:c0:72:62:80:94: 63:91:d4:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZhAaK+5Dx3O73AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MjVlODY1MWQtMmM4Ny00ZTc3LTlkNDktMTUxYzNjN2FhNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnPlWHNjjOtp8EyaO8fsVC4DU8BHeOxWZpeN /6Vev9uVvM5PNR6kMCiuI5VHORjoFXANJAMuOT/+8I2pa0seTnYw3dmlnApNyTEg ePCtdVVG4avYIYyE33ZG7M7RHYQ9ZbIWwThQy69Y32wJOcgoyFxDErhUocFYCTMD 6tZou3bDfT1pDGlurx0jjtbht152JZ27UDozBSRdr5IqpKSyst2yYfiGVtAd3hns ZV+AMtp9HGqyI7n8Cu1CK7sXJKwBkewyMy6nCVpfNgoYvttFRR8bfcC2pX4JHtfT 5n10Qxmn0uSN/Pnpv8kLV4oCKqOZaQhtH5d5Sw87bn03ylNsTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExHqEGpHdTcsZRK2VP0QTbMj0RgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjkxN2IxMTMtOWU1Zi0z NzYzLTg0ZTMtNmRhODc3NWVlYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTloEPazQ2uhPv/8RrG6Cxe7+zpK+eBU1I8Hs4Dv4S/uoV/sjgxGDqI peVU1gvvBEbDIBwiP6eMyck/nl6Sb67mHOza3iEvZMjt3CVXD5xC5mzDo2x6If2W NWH+aKcEXAvZKWQF6DAyLT6ObQBBUFtxJscwtIgw4gMsS1Bmh1+Hs1ZzKzY3l+V5 iPJhKdNYPB/KIn4vRH0Gg9nsC+l/lbNTVXe9sjevFa5H0zN1tkrfObJZu/E2/8R5 K1BycpqSTZ0B+jErCcHtHDtrW5+HSr1nVLiNSk9lTufC8Lv1DG++Zn3RpsM0TmnD hv8exuTnkRYLoh//9sDAcmKAlGOR1KY= -----END CERTIFICATE-----Generated at Sat Jun 13 14:24:15 2026 by rpki-client