$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3174bb31-f8a4-372c-9f5d-69fdf63440d2.roa File: 3174bb31-f8a4-372c-9f5d-69fdf63440d2.roa (raw, json) Hash identifier: xtz2JytoAb2MB3726z8uVO7a+wnE+A7Yd7u34JkT6CY= Subject key identifier: 2C:EF:5B:12:4F:16:21:F8:78:26:8D:99:78:6A:21:1A:4C:86:00:C2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DA815954D0EFBFC82C6B4A560 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3174bb31-f8a4-372c-9f5d-69fdf63440d2.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 208.76.71.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:95:4d:0e:fb:fc:82:c6:b4:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=6dd79113-8de2-4cbd-b27d-3bc52ffbd391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:02:c5:ef:98:9d:f5:c9:4d:39:f5:5e:08:85: 20:7f:0d:d5:49:13:fc:66:df:21:c1:d9:8f:d5:41: 2e:1a:9c:f6:04:49:a1:68:94:c6:e9:d5:f8:9d:6b: c8:aa:21:98:a0:cc:c7:c2:1a:06:6b:ad:20:2e:e0: db:e9:41:d1:ba:67:bd:52:b3:36:d3:1b:5d:04:bd: ee:79:27:83:95:d4:aa:ea:3f:12:8f:31:a4:4a:0d: 32:b9:61:71:82:0e:9e:a7:7e:56:5f:b1:d1:ca:7b: 27:8e:1a:ed:0e:c0:75:97:52:80:5d:b2:4e:7f:e3: 48:94:0d:03:8a:f4:e9:50:fa:40:e3:be:10:50:7a: 28:aa:bd:83:90:e1:16:54:d4:15:93:7e:8e:4a:24: 14:f8:01:01:18:23:06:82:af:83:eb:89:c7:6a:3a: 1c:bd:08:fc:a2:02:93:9a:f6:70:e7:6f:b2:02:c6: 92:09:86:c9:95:78:2a:81:4c:23:5c:f5:7f:5f:bf: e7:cc:c5:d9:47:f4:71:28:09:44:98:cd:43:9f:ed: 09:d4:ba:0b:8d:d6:c0:f3:5e:c7:ce:3a:da:3e:92: 87:ab:a2:f2:00:af:b9:2b:f9:bc:4a:8b:2d:c2:b2: be:64:d0:5e:1e:2f:70:3d:9d:cc:d0:33:2f:1d:24: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EF:5B:12:4F:16:21:F8:78:26:8D:99:78:6A:21:1A:4C:86:00:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3174bb31-f8a4-372c-9f5d-69fdf63440d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3f:d9:5f:6c:ab:bb:1f:68:d0:14:5d:2f:fc:59:71:2f:82: 62:3f:e8:72:01:0e:35:34:12:42:48:a3:15:6c:73:5a:4e:be: be:97:c5:92:72:c0:c0:25:b0:2e:35:f7:a1:57:3b:3e:f5:23: df:ec:80:dd:41:dd:01:81:d5:4c:fd:05:8d:a2:95:bf:71:2e: fd:45:e5:21:36:1f:10:3b:5b:7c:bf:26:99:cd:d4:f4:35:e9: b2:1b:cb:d7:51:4e:3c:7b:80:12:41:9e:84:20:da:4f:6f:ed: 60:cf:f9:a3:75:70:41:09:c3:a5:14:ef:21:86:90:f1:62:c3: 3e:ad:d8:71:e9:18:26:3e:de:9b:f8:25:0e:fa:1c:9b:3b:53: 91:28:9e:94:98:12:f7:63:ce:60:c5:b9:ee:bf:c0:fd:c3:79: 63:f1:f9:79:75:23:5d:fb:01:3f:3b:af:d0:7b:7a:96:d2:68: 96:bc:3a:b6:6b:5f:23:ef:4b:14:cb:63:8b:9c:7f:d1:34:7e: 86:ba:a0:50:fb:1a:7e:57:45:42:15:94:70:d5:a3:9b:e2:91: b6:07:31:28:3c:9e:be:30:cc:ee:92:84:e3:75:60:0b:91:8e: c1:e6:14:6b:58:d2:af:f9:1f:b6:d9:bc:cb:43:bc:93:77:bd: c6:74:60:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFZVNDvv8gsa0pWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NmRkNzkxMTMtOGRlMi00Y2JkLWIyN2QtM2JjNTJmZmJkMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQLF75id9clNOfVeCIUgfw3VSRP8Zt8hwdmP 1UEuGpz2BEmhaJTG6dX4nWvIqiGYoMzHwhoGa60gLuDb6UHRume9UrM20xtdBL3u eSeDldSq6j8SjzGkSg0yuWFxgg6ep35WX7HRynsnjhrtDsB1l1KAXbJOf+NIlA0D ivTpUPpA474QUHooqr2DkOEWVNQVk36OSiQU+AEBGCMGgq+D64nHajocvQj8ogKT mvZw52+yAsaSCYbJlXgqgUwjXPV/X7/nzMXZR/RxKAlEmM1Dn+0J1LoLjdbA817H zjraPpKHq6LyAK+5K/m8SostwrK+ZNBeHi9wPZ3M0DMvHSR4FQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCzvWxJPFiH4eCaNmXhqIRpMhgDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzE3NGJiMzEtZjhhNC0z NzJjLTlmNWQtNjlmZGY2MzQ0MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExHgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBeP9lfbKu7H2jQFF0v/FlxL4JiP+hyAQ41NBJCSKMVbHNaTr6+l8WS csDAJbAuNfehVzs+9SPf7IDdQd0BgdVM/QWNopW/cS79ReUhNh8QO1t8vyaZzdT0 NemyG8vXUU48e4ASQZ6EINpPb+1gz/mjdXBBCcOlFO8hhpDxYsM+rdhx6RgmPt6b +CUO+hybO1ORKJ6UmBL3Y85gxbnuv8D9w3lj8fl5dSNd+wE/O6/Qe3qW0miWvDq2 a18j70sUy2OLnH/RNH6GuqBQ+xp+V0VCFZRw1aOb4pG2BzEoPJ6+MMzukoTjdWAL kY7B5hRrWNKv+R+22bzLQ7yTd73GdGAN -----END CERTIFICATE-----Generated at Wed May 13 03:00:28 2026 by rpki-client