$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3174bb31-f8a4-372c-9f5d-69fdf63440d2.roa File: 3174bb31-f8a4-372c-9f5d-69fdf63440d2.roa (raw, json) Hash identifier: 02HEewd/2klqXuf0TqMA2wTvdXumJM72U02ntkGHcTE= Subject key identifier: 02:BB:E5:3E:FB:77:09:C9:92:0E:9F:E7:70:97:08:9B:E4:6F:DF:F2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC67E7ABD73E072AE05D180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3174bb31-f8a4-372c-9f5d-69fdf63440d2.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:7e:7a:bd:73:e0:72:ae:05:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=7dd29a88-e412-47f5-b785-9b8dd20dcf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:bf:8c:14:d5:bb:7b:ac:17:c3:79:48:f7: 7a:81:84:f3:2f:c7:51:6f:15:d9:dd:a9:7e:90:9a: 6f:e4:11:27:7c:5b:ff:72:92:0b:7f:c3:61:6d:40: 68:85:d4:39:ea:42:25:6a:05:55:ac:f7:d4:e3:1e: 82:c8:c0:c3:1f:2b:b6:b7:5c:fb:7e:88:e2:8a:a7: 49:7a:76:53:1a:85:bb:b4:0d:69:1d:f9:dd:8a:01: f3:46:32:0f:ac:c6:f4:8d:00:3b:05:d0:2d:83:94: 28:98:45:6c:eb:11:ec:05:e9:59:76:9d:6f:cb:2c: 34:5f:5a:38:e1:c0:e8:03:09:84:4d:fe:97:4b:3b: 02:59:d8:49:ae:50:65:4b:d9:15:18:57:ed:96:dc: dd:18:b4:a5:b5:2a:96:3b:98:23:76:cf:9c:27:93: 88:a4:2c:52:e7:f2:16:32:81:f5:2d:17:58:04:b7: 73:3f:f7:8d:75:31:b0:df:1c:34:f5:85:48:fa:25: bf:e0:61:32:a4:ca:08:c3:da:2a:e4:c1:b1:64:62: 0a:76:09:a1:80:d7:4e:d8:7e:18:7d:9b:dd:20:15: 30:68:14:be:a7:27:59:79:f3:97:72:80:f1:c2:4a: c5:da:61:8e:72:ac:95:d1:0c:ba:e4:d8:a6:15:bc: 61:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BB:E5:3E:FB:77:09:C9:92:0E:9F:E7:70:97:08:9B:E4:6F:DF:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3174bb31-f8a4-372c-9f5d-69fdf63440d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b1:db:94:81:46:44:6d:70:5a:28:0c:10:a7:4e:51:98:56: 5b:4a:84:9d:1b:c9:7a:7f:53:6d:7d:45:c4:54:72:cc:d6:97: 97:ee:bc:1f:a3:50:bb:03:eb:0b:79:04:e3:25:14:09:9a:10: 59:32:9d:9c:15:f9:e3:82:f1:f1:3b:4e:f7:26:7f:57:67:46: 96:2b:cb:6a:26:9d:ba:e4:bb:2c:15:a0:84:d4:df:be:41:b1: eb:42:87:7a:87:e5:65:fd:4b:6d:a0:de:ba:94:73:bf:d1:6b: ac:97:04:eb:b8:1b:c9:0e:92:51:f4:3a:fe:7c:d0:d1:7d:51: 88:d9:17:1c:7c:d1:dc:e0:81:e7:68:2c:08:eb:56:cc:18:dd: 04:ed:2c:a3:e5:18:96:f4:ad:f9:06:ca:ab:80:38:aa:de:83: 27:c4:96:93:e2:95:4c:11:37:73:0b:22:25:62:2d:57:04:c8: 81:6b:41:95:ae:a3:94:85:5d:ad:b1:7d:6d:e6:19:85:42:f0: e9:20:ec:60:f7:b7:4d:b8:29:2b:93:14:3d:6a:80:4b:68:01: 9c:27:fc:8c:45:ec:38:0b:86:58:48:51:21:40:2c:34:5e:06: 0a:e0:fe:59:e3:3a:91:d9:c8:27:61:a6:a7:ab:fd:9a:1c:ac: 68:8d:d0:8c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/Mxn56vXPgcq4F0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk N2RkMjlhODgtZTQxMi00N2Y1LWI3ODUtOWI4ZGQyMGRjZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7K/jBTVu3usF8N5SPd6gYTzL8dRbxXZ3al+ kJpv5BEnfFv/cpILf8NhbUBohdQ56kIlagVVrPfU4x6CyMDDHyu2t1z7fojiiqdJ enZTGoW7tA1pHfndigHzRjIPrMb0jQA7BdAtg5QomEVs6xHsBelZdp1vyyw0X1o4 4cDoAwmETf6XSzsCWdhJrlBlS9kVGFftltzdGLSltSqWO5gjds+cJ5OIpCxS5/IW MoH1LRdYBLdzP/eNdTGw3xw09YVI+iW/4GEypMoIw9oq5MGxZGIKdgmhgNdO2H4Y fZvdIBUwaBS+pydZefOXcoDxwkrF2mGOcqyV0Qy65NimFbxhnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAK75T77dwnJkg6f53CXCJvkb9/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzE3NGJiMzEtZjhhNC0z NzJjLTlmNWQtNjlmZGY2MzQ0MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExHgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgsduUgUZEbXBaKAwQp05RmFZbSoSdG8l6f1NtfUXEVHLM1peX7rwf o1C7A+sLeQTjJRQJmhBZMp2cFfnjgvHxO073Jn9XZ0aWK8tqJp265LssFaCE1N++ QbHrQod6h+Vl/UttoN66lHO/0WuslwTruBvJDpJR9Dr+fNDRfVGI2RccfNHc4IHn aCwI61bMGN0E7Syj5RiW9K35BsqrgDiq3oMnxJaT4pVMETdzCyIlYi1XBMiBa0GV rqOUhV2tsX1t5hmFQvDpIOxg97dNuCkrkxQ9aoBLaAGcJ/yMRew4C4ZYSFEhQCw0 XgYK4P5Z4zqR2cgnYaanq/2aHKxojdCM -----END CERTIFICATE-----Generated at Sun Nov 15 14:36:48 2026 by rpki-client