$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa File: cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa (raw, json) Hash identifier: WsY4YyrSJMQkDo6009DjTzWwwtVfVy4UXZY2dtyXEhM= Subject key identifier: EA:8D:42:23:66:26:C7:9F:27:8F:25:21:A9:A8:7A:DB:46:A2:3B:30 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E08662754771F195A78290080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 70.32.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:27:54:77:1f:19:5a:78:29:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=b8aa8db2-23a3-4594-af22-787238e1c78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:97:84:be:96:ab:a6:83:20:6e:2e:04:58:e1: ac:d9:da:70:85:86:fb:d7:0c:80:68:8d:1c:8c:3f: 9f:40:56:d8:57:97:d3:63:f7:7d:40:43:59:b8:93: f2:9c:0d:e9:89:f7:e0:d7:fd:cd:11:b1:8d:8f:b3: 67:97:ad:f7:2a:b0:69:66:30:4e:66:4d:a2:14:88: 4f:2b:6c:20:d3:16:c6:98:a4:7d:e8:3d:37:c9:10: 17:25:0b:c5:71:80:9d:e4:21:ae:b8:45:93:f7:02: 4c:d4:ed:1c:46:3b:bf:8a:a5:a0:34:32:dc:c9:99: 57:00:5e:2d:65:36:c9:02:10:92:6c:bb:b7:1b:5a: 81:d4:b6:12:d8:17:44:24:79:d3:0b:b8:a0:c7:cf: 23:37:29:c6:48:e5:ee:62:fd:98:7b:66:e9:5a:5f: 6b:12:ce:e6:8b:d2:af:53:7d:de:07:fe:c9:25:9f: c6:8d:35:d4:96:67:47:74:54:0d:57:07:2a:51:80: a5:5a:38:86:cd:56:77:09:2d:ac:a3:59:bc:82:09: 70:fb:b0:db:1e:e5:34:2c:84:33:35:f6:ae:99:cb: 1b:21:ed:e8:83:83:8d:03:91:5f:55:79:6b:32:b0: c1:15:7f:28:98:01:b9:8d:81:4c:c1:e9:27:bb:df: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8D:42:23:66:26:C7:9F:27:8F:25:21:A9:A8:7A:DB:46:A2:3B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf6b0d60-19ff-3742-9d67-d4d73aabf98f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fb:02:5e:d2:30:7e:23:7d:eb:8a:66:b8:31:0b:7e:d3:91: 2a:87:cc:3a:30:72:5c:93:4e:05:47:f8:d7:35:eb:39:10:e9: 22:1b:e8:f5:d8:3d:3c:b8:92:9f:93:c8:f7:50:7d:43:45:89: 0a:e8:20:91:59:95:97:29:c9:7a:e2:5d:6c:59:40:e3:02:a4: d5:da:f4:98:93:4e:c4:eb:9f:49:f0:c6:91:1f:a7:c5:42:de: 11:71:66:1e:3a:27:de:ec:58:6c:0a:73:46:20:30:4d:84:18: 4f:b9:9f:53:b0:63:0a:ec:f5:1a:f9:b0:aa:99:e6:5a:34:57: cc:d8:6c:44:81:86:5d:9f:ed:e7:80:20:b5:8f:bc:5d:36:27: e3:19:0a:c2:3d:15:a7:ef:3d:8f:e8:16:ad:36:35:3f:d3:5e: e4:fa:26:73:d6:24:8a:cd:ba:c6:b9:90:b6:fe:57:2b:9b:9f: 07:79:fe:55:13:f3:cd:da:e8:b4:e7:ce:5a:31:5d:d1:b4:6c: 08:72:96:3c:54:7a:9e:0d:72:21:04:52:da:30:97:b8:b9:06: 32:d9:b1:f7:4a:51:3f:ca:a7:50:c2:9b:e9:f8:2e:a8:29:28: 7e:6a:13:3f:7f:0a:17:f6:f8:3d:96:ce:fc:e3:33:07:87:1d: 4a:4b:6a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZidUdx8ZWngpAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk YjhhYThkYjItMjNhMy00NTk0LWFmMjItNzg3MjM4ZTFjNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpeEvparpoMgbi4EWOGs2dpwhYb71wyAaI0c jD+fQFbYV5fTY/d9QENZuJPynA3piffg1/3NEbGNj7Nnl633KrBpZjBOZk2iFIhP K2wg0xbGmKR96D03yRAXJQvFcYCd5CGuuEWT9wJM1O0cRju/iqWgNDLcyZlXAF4t ZTbJAhCSbLu3G1qB1LYS2BdEJHnTC7igx88jNynGSOXuYv2Ye2bpWl9rEs7mi9Kv U33eB/7JJZ/GjTXUlmdHdFQNVwcqUYClWjiGzVZ3CS2so1m8gglw+7DbHuU0LIQz NfaumcsbIe3og4ONA5FfVXlrMrDBFX8omAG5jYFMweknu9/FOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqNQiNmJsefJ48lIamoettGojswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Y2YjBkNjAtMTlmZi0z NzQyLTlkNjctZDRkNzNhYWJmOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX7Al7SMH4jfeuKZrgxC37TkSqHzDowclyTTgVH+Nc16zkQ6SIb6PXY PTy4kp+TyPdQfUNFiQroIJFZlZcpyXriXWxZQOMCpNXa9JiTTsTrn0nwxpEfp8VC 3hFxZh46J97sWGwKc0YgME2EGE+5n1OwYwrs9Rr5sKqZ5lo0V8zYbESBhl2f7eeA ILWPvF02J+MZCsI9FafvPY/oFq02NT/TXuT6JnPWJIrNusa5kLb+Vyubnwd5/lUT 883a6LTnzloxXdG0bAhyljxUep4NciEEUtowl7i5BjLZsfdKUT/Kp1DCm+n4Lqgp KH5qEz9/Chf2+D2WzvzjMweHHUpLags= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:02 2026 by rpki-client