$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa File: fa6d7785-b363-37e6-834e-f8ca6302050e.roa (raw, json) Hash identifier: kyPkEL0J8OSzO2eOraSodDHRXSRVeUZLKRinS3RhK88= Subject key identifier: 11:CE:5A:FA:19:84:5C:62:12:D7:E2:AB:CF:1D:B7:25:EF:E0:F4:AB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E08664BB5343E4B14C1605680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 70.32.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:4b:b5:34:3e:4b:14:c1:60:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=e492e5df-3602-4953-a8ec-84ef83ac651c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:78:7a:8f:4b:79:a4:fa:f4:98:f5:85:b4:0a: f3:1a:5b:8c:b6:f0:81:01:c7:33:e1:5c:0f:e4:54: 16:7d:6e:eb:41:b6:c1:76:5d:dd:da:a8:35:a4:14: f6:b1:30:14:cb:a4:c3:89:8d:e2:c3:d1:04:4f:3e: d0:44:59:95:c5:9f:38:ba:ce:0a:3e:6d:ed:25:1d: 5c:02:a4:3b:1b:24:a0:49:27:4d:c0:7a:3d:d3:08: 2a:7e:85:d0:e0:df:a6:08:7a:d7:8d:7f:fb:cc:94: 50:e8:7d:1d:d9:02:fd:b7:a1:7c:33:13:4b:b4:ca: b9:a6:89:5b:a1:c5:93:51:e5:8b:bb:35:00:17:13: fb:c5:05:dd:1e:f7:3a:e5:7d:13:da:55:d2:ef:74: 42:00:4c:39:e9:a6:f4:3f:27:87:16:9e:0c:c2:c3: 36:1b:b8:ec:33:9c:79:3b:c8:da:51:0c:9e:21:ba: 22:ee:4b:44:b3:11:17:42:71:78:d6:d7:9d:44:8f: b0:56:4e:3a:1e:65:1f:8f:bb:c2:99:74:df:d1:5b: 68:27:37:67:38:d3:a2:dc:6d:a3:5e:3b:60:56:9b: 5f:55:1d:23:e3:f2:3e:40:71:84:85:99:e9:d6:9c: c6:29:c2:7c:0c:5d:63:88:3c:c7:5c:aa:10:cf:1f: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CE:5A:FA:19:84:5C:62:12:D7:E2:AB:CF:1D:B7:25:EF:E0:F4:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa6d7785-b363-37e6-834e-f8ca6302050e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2d:e2:5d:db:e6:ac:bd:f4:17:b1:4e:68:72:6c:32:b8:7f: 9e:cd:06:fe:b9:35:b5:36:93:a0:fe:93:00:ab:d2:b9:e9:5c: af:1e:4d:08:92:c1:1e:f5:3a:61:9f:04:65:ac:53:ee:38:66: 25:d4:d6:1b:34:17:93:cc:65:65:24:85:96:ae:68:87:6b:c6: a2:d8:22:91:ff:69:8b:44:cc:37:54:df:d1:83:7c:8e:87:00: 1d:84:25:6e:2d:ee:a3:a7:30:d3:48:67:c2:df:3c:bb:24:5d: ce:e7:2f:57:51:f5:43:5b:db:50:ef:7f:e7:5a:26:96:ef:5a: a4:f9:0c:39:c2:99:54:ae:a1:3e:e0:27:4c:d0:38:32:7f:2e: be:79:b8:77:6e:84:ef:d5:53:18:c4:38:3b:be:28:e2:cf:d2: b3:81:b7:93:3d:68:be:43:3b:b6:2a:e0:18:1e:46:a5:c9:10: 16:9f:6b:83:68:a4:93:c0:f4:e0:de:42:7e:de:4e:e8:2c:30: a1:2d:5f:d5:1e:a5:8e:fe:5c:9e:79:8c:17:fa:96:c8:5d:22: bf:01:ad:da:24:c5:da:62:4f:f2:48:b1:be:f8:2e:ee:1e:73: 3f:31:e5:21:f3:45:9a:36:48:11:de:5d:24:b4:6c:ce:49:6f: 54:3a:48:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZku1ND5LFMFgVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk ZTQ5MmU1ZGYtMzYwMi00OTUzLWE4ZWMtODRlZjgzYWM2NTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinh6j0t5pPr0mPWFtArzGluMtvCBAccz4VwP 5FQWfW7rQbbBdl3d2qg1pBT2sTAUy6TDiY3iw9EETz7QRFmVxZ84us4KPm3tJR1c AqQ7GySgSSdNwHo90wgqfoXQ4N+mCHrXjX/7zJRQ6H0d2QL9t6F8MxNLtMq5polb ocWTUeWLuzUAFxP7xQXdHvc65X0T2lXS73RCAEw56ab0PyeHFp4MwsM2G7jsM5x5 O8jaUQyeIboi7ktEsxEXQnF41tedRI+wVk46HmUfj7vCmXTf0VtoJzdnONOi3G2j XjtgVptfVR0j4/I+QHGEhZnp1pzGKcJ8DF1jiDzHXKoQzx8TdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHOWvoZhFxiEtfiq88dtyXv4PSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmE2ZDc3ODUtYjM2My0z N2U2LTgzNGUtZjhjYTYzMDIwNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4t4l3b5qy99BexTmhybDK4f57NBv65NbU2k6D+kwCr0rnpXK8eTQiS wR71OmGfBGWsU+44ZiXU1hs0F5PMZWUkhZauaIdrxqLYIpH/aYtEzDdU39GDfI6H AB2EJW4t7qOnMNNIZ8LfPLskXc7nL1dR9UNb21Dvf+daJpbvWqT5DDnCmVSuoT7g J0zQODJ/Lr55uHduhO/VUxjEODu+KOLP0rOBt5M9aL5DO7Yq4BgeRqXJEBafa4No pJPA9ODeQn7eTugsMKEtX9UepY7+XJ55jBf6lshdIr8BrdokxdpiT/JIsb74Lu4e cz8x5SHzRZo2SBHeXSS0bM5Jb1Q6SPw= -----END CERTIFICATE-----Generated at Sat Jun 13 09:21:49 2026 by rpki-client