$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa File: eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa (raw, json) Hash identifier: Rbf97lwOPaqGiUoWo5criD26nW0Er+zEi9E3i00xJzg= Subject key identifier: 63:8B:48:BA:37:B1:2F:49:AB:3F:22:1E:80:BF:24:91:23:56:60:F0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E08663A0DB36E3923F3856660 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 70.32.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:3a:0d:b3:6e:39:23:f3:85:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=7a2e6e09-ab3c-4e46-9662-406e334225d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:7d:a0:01:89:c1:db:1a:4c:ea:43:9d:03: 38:f3:7a:67:fb:2b:36:70:28:9e:86:83:4e:20:f8: 20:04:73:62:7e:24:48:89:7d:c2:e1:69:ad:94:3e: cf:8d:0e:e3:fe:1a:75:db:d6:3a:88:31:93:6e:fa: da:fe:a7:e9:7a:d0:d1:b7:51:63:32:59:9f:70:95: e8:a8:63:45:13:b9:8e:7e:82:76:17:cc:7d:49:f2: ae:30:53:ba:90:ee:cb:cb:b3:5d:ba:bd:6d:4e:26: f8:6d:bc:d0:63:0d:08:66:89:bb:8b:34:31:09:83: f8:49:dd:47:92:4a:c6:5e:a3:be:ef:14:64:cc:70: 59:a6:79:f5:7e:d4:94:4a:cc:5f:22:b0:c3:00:c6: 1f:34:c1:7b:ad:94:d0:8e:48:fd:e5:6b:0f:56:57: 21:78:28:37:8c:a5:ff:37:94:98:55:5d:29:18:96: e6:63:91:ff:04:7d:ed:6b:7f:c7:0f:c9:94:eb:33: 48:8c:22:a5:4b:d8:b6:a0:b4:6d:02:c1:67:8e:ef: 0f:03:86:d1:fa:3f:a3:e9:ee:e3:9f:f9:71:21:bd: 0a:29:64:2c:72:53:94:b4:af:7a:55:22:0b:07:c8: 65:34:6d:b7:44:49:13:9d:e8:90:08:75:d6:52:ec: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8B:48:BA:37:B1:2F:49:AB:3F:22:1E:80:BF:24:91:23:56:60:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf28e0f-05bd-31a2-b4b0-cb34e6195843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3e:47:0e:19:29:a5:e9:dd:0d:51:62:c5:e0:45:fe:02:61: 80:f7:f1:da:e3:54:f8:c3:b5:9a:13:ef:f9:24:86:45:fa:db: e1:64:1e:0a:33:46:a1:8a:c1:ab:88:f1:79:13:17:f8:14:ad: fe:88:06:c0:de:f8:cf:82:ca:cb:c7:d8:d3:92:a7:e7:f3:96: a9:ac:9e:f7:ef:8b:0e:d7:62:bd:2c:52:ad:2a:a0:e0:11:c8: 9b:4c:23:1f:64:47:b6:44:e4:e6:1a:19:2e:c9:31:61:03:42: 25:a0:4b:de:72:ec:b2:c7:67:8c:27:64:1a:f2:c2:33:d4:39: 0c:30:2e:0e:81:34:5a:36:2c:14:9a:57:a4:c5:29:a3:96:61: ac:b4:cd:b2:7d:8e:cf:08:93:db:85:30:0f:11:d5:d6:aa:79: d2:4d:18:aa:96:30:4d:9a:fe:04:94:57:a0:35:da:b2:5c:dc: dc:bc:74:a3:bf:6f:0f:bd:fd:d8:16:49:e5:37:34:33:d9:46: 0d:80:cf:fd:7d:6b:fd:c7:90:9b:10:ae:53:46:c1:28:ec:05: 22:4d:f2:03:c8:da:7d:c4:98:f3:78:02:2d:ef:8b:ee:ec:7e: ff:93:a0:75:cb:72:08:1c:1d:74:98:d2:47:7d:a4:e7:ca:28: 5c:78:2a:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZjoNs245I/OFZmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk N2EyZTZlMDktYWIzYy00ZTQ2LTk2NjItNDA2ZTMzNDIyNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvol9oAGJwdsaTOpDnQM483pn+ys2cCiehoNO IPggBHNifiRIiX3C4WmtlD7PjQ7j/hp129Y6iDGTbvra/qfpetDRt1FjMlmfcJXo qGNFE7mOfoJ2F8x9SfKuMFO6kO7Ly7Ndur1tTib4bbzQYw0IZom7izQxCYP4Sd1H kkrGXqO+7xRkzHBZpnn1ftSUSsxfIrDDAMYfNMF7rZTQjkj95WsPVlcheCg3jKX/ N5SYVV0pGJbmY5H/BH3ta3/HD8mU6zNIjCKlS9i2oLRtAsFnju8PA4bR+j+j6e7j n/lxIb0KKWQsclOUtK96VSILB8hlNG23REkTneiQCHXWUuziFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOLSLo3sS9Jqz8iHoC/JJEjVmDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWFmMjhlMGYtMDViZC0z MWEyLWI0YjAtY2IzNGU2MTk1ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY+Rw4ZKaXp3Q1RYsXgRf4CYYD38drjVPjDtZoT7/kkhkX62+FkHgoz RqGKwauI8XkTF/gUrf6IBsDe+M+CysvH2NOSp+fzlqmsnvfviw7XYr0sUq0qoOAR yJtMIx9kR7ZE5OYaGS7JMWEDQiWgS95y7LLHZ4wnZBrywjPUOQwwLg6BNFo2LBSa V6TFKaOWYay0zbJ9js8Ik9uFMA8R1daqedJNGKqWME2a/gSUV6A12rJc3Ny8dKO/ bw+9/dgWSeU3NDPZRg2Az/19a/3HkJsQrlNGwSjsBSJN8gPI2n3EmPN4Ai3vi+7s fv+ToHXLcggcHXSY0kd9pOfKKFx4Kho= -----END CERTIFICATE-----Generated at Sat Jun 13 13:12:20 2026 by rpki-client