$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28f6dc1d-215c-3541-856c-99ad77946c90.roa File: 28f6dc1d-215c-3541-856c-99ad77946c90.roa (raw, json) Hash identifier: qHqeRaLp8ru3931Geaxe/7i7pYVIicsYDYtEJcwGhm8= Subject key identifier: 5F:BC:A7:91:30:B6:FE:4C:B8:07:11:27:13:00:B6:3E:44:26:12:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC69EE2852B3FECCDB5CB00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28f6dc1d-215c-3541-856c-99ad77946c90.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.16/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:9e:e2:85:2b:3f:ec:cd:b5:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=18e051a2-75bf-4d20-a758-0f0054412f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:04:fe:e1:07:b3:f8:55:b3:bc:44:5f:ca: a7:fd:be:bd:9c:c6:db:57:25:42:88:54:d6:48:3b: ca:e1:b7:46:3d:1c:60:d5:6c:5a:64:15:49:3a:d3: 87:97:ec:bf:90:41:32:93:7a:8c:ac:ec:77:5f:c7: 7a:be:15:02:5f:80:26:ee:f9:c8:36:db:0d:80:47: 58:27:2f:f2:73:d2:88:98:c8:40:bd:3e:49:d8:79: 5d:16:f1:14:c2:fb:75:58:6b:e5:54:ac:25:98:dd: 2e:ca:fd:e6:97:cd:60:42:16:76:fa:ef:57:0a:71: f3:bc:46:40:fa:9f:a0:b4:5a:f5:eb:a8:13:95:7a: 81:80:d0:5b:cf:1e:94:bc:0e:a6:ca:1d:26:30:27: 0d:87:4b:a3:3c:f5:f6:6a:3a:17:62:8e:d5:fe:99: 94:3a:9a:49:0f:e0:7e:b0:f8:53:ca:90:b2:8a:e5: c1:77:c6:ad:c6:16:be:3f:36:c5:b9:01:ec:83:ec: dd:2c:54:b7:10:e6:df:03:d6:8b:1c:cb:bf:62:8b: b8:c6:0c:16:93:be:62:4b:82:cf:61:86:ef:dd:f6: 43:cd:e3:f3:c3:aa:9c:d7:79:c3:28:2f:40:bc:5a: 9d:e0:8a:0e:86:5f:00:a3:74:2d:8b:9e:cd:5e:3e: 8a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BC:A7:91:30:B6:FE:4C:B8:07:11:27:13:00:B6:3E:44:26:12:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28f6dc1d-215c-3541-856c-99ad77946c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.16/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e5:c7:ea:4e:7a:7f:b4:62:c6:eb:7c:9e:d2:04:86:df:76: 22:15:73:ca:ed:f4:90:45:cc:50:4e:e2:96:5e:69:f1:84:8f: 5e:b6:f8:56:6f:22:62:2f:ee:08:6e:e6:9f:90:59:b0:02:09: 8c:6b:41:be:c6:0a:7c:c6:ed:6b:17:80:91:2d:ed:d7:31:da: 45:7b:df:a1:9e:b6:d2:40:80:d7:19:40:84:d3:0c:cf:c7:6f: e1:ab:b8:e2:88:ee:b6:02:01:22:5c:6b:9f:74:38:d6:2d:8e: 70:6f:b6:60:76:fb:37:3e:be:0e:93:2a:a8:85:74:e2:6a:fb: 4e:67:09:f7:c5:0b:08:ac:7c:05:24:ba:b0:9f:d3:72:c5:4d: 1b:50:bf:c5:16:89:97:89:a4:b7:74:91:3d:f7:4f:fd:35:71: 53:3d:af:51:69:b7:6f:87:1b:b8:d8:51:2e:b9:80:64:94:21: d2:9d:4f:55:78:82:7a:49:b4:e0:d5:41:be:ef:73:0a:cb:1e: 31:34:ef:40:3d:03:0f:04:92:b3:89:33:58:7a:55:98:e9:e6: 48:50:c0:7b:3a:e7:91:c0:09:d1:b4:68:10:7e:16:da:99:b0: ba:60:c7:9c:6a:ce:8d:86:13:7c:c8:97:13:d5:8a:b8:56:ad: 08:28:29:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/Mxp7ihSs/7M21ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk MThlMDUxYTItNzViZi00ZDIwLWE3NTgtMGYwMDU0NDEyZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAgE/uEHs/hVs7xEX8qn/b69nMbbVyVCiFTW SDvK4bdGPRxg1WxaZBVJOtOHl+y/kEEyk3qMrOx3X8d6vhUCX4Am7vnINtsNgEdY Jy/yc9KImMhAvT5J2HldFvEUwvt1WGvlVKwlmN0uyv3ml81gQhZ2+u9XCnHzvEZA +p+gtFr166gTlXqBgNBbzx6UvA6myh0mMCcNh0ujPPX2ajoXYo7V/pmUOppJD+B+ sPhTypCyiuXBd8atxha+PzbFuQHsg+zdLFS3EObfA9aLHMu/You4xgwWk75iS4LP YYbv3fZDzePzw6qc13nDKC9AvFqd4IoOhl8Ao3Qti57NXj6KywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF+8p5Ewtv5MuAcRJxMAtj5EJhIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjhmNmRjMWQtMjE1Yy0z NTQxLTg1NmMtOTlhZDc3OTQ2YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAY5cfqTnp/tGLG63ye0gSG33YiFXPK7fSQRcxQTuKWXmnxhI9etvhW byJiL+4IbuafkFmwAgmMa0G+xgp8xu1rF4CRLe3XMdpFe9+hnrbSQIDXGUCE0wzP x2/hq7jiiO62AgEiXGufdDjWLY5wb7Zgdvs3Pr4OkyqohXTiavtOZwn3xQsIrHwF JLqwn9NyxU0bUL/FFomXiaS3dJE990/9NXFTPa9Rabdvhxu42FEuuYBklCHSnU9V eIJ6SbTg1UG+73MKyx4xNO9APQMPBJKziTNYelWY6eZIUMB7OueRwAnRtGgQfhba mbC6YMecas6NhhN8yJcT1Yq4Vq0IKClL -----END CERTIFICATE-----Generated at Sun Nov 15 18:11:37 2026 by rpki-client