$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/439399de-a12b-315c-bf2d-df1aabb64f54.roa File: 439399de-a12b-315c-bf2d-df1aabb64f54.roa (raw, json) Hash identifier: 3gD7E4OhYrjIyFWm5QDoR3/xhPQnDZXM3eZLFyyk2Z0= Subject key identifier: CA:DE:F0:F9:48:EB:91:0E:45:CE:3E:51:88:8E:33:EE:69:56:5F:07 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DA815944F68552B57A1744980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/439399de-a12b-315c-bf2d-df1aabb64f54.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 208.76.71.104/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:94:4f:68:55:2b:57:a1:74:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=b355daa0-e0ee-48da-8e27-5bfd016a1e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b2:25:e8:79:4d:e3:98:c8:a2:22:bd:50:27: 51:0b:7b:65:19:cd:0e:6e:2c:0d:41:1d:1a:46:f8: 95:d0:23:65:c0:30:9e:65:aa:08:15:f9:58:1f:b3: a1:e1:88:6f:90:52:d3:ed:69:fe:69:56:bc:a8:bc: 08:03:71:7f:55:cf:ba:e0:ef:5a:93:24:03:8f:3e: 79:3a:cd:69:02:b5:ac:e1:1f:1b:d4:61:aa:5b:88: 6c:2b:7c:2b:fd:6a:84:9d:6b:8f:49:22:e8:24:4a: 21:2c:b7:41:9d:2a:c0:49:cb:d3:68:cc:9e:69:76: 69:46:3d:ab:04:c5:48:fd:78:13:75:e0:0a:73:37: 9c:af:73:07:f2:94:df:a4:5e:c0:ac:22:85:ae:7f: 62:07:f4:f0:fc:47:ff:13:88:b6:e5:8c:2d:9f:93: 1d:a8:be:2f:15:d8:b9:ec:a0:0c:f7:73:6d:15:78: 4d:c9:67:23:67:2a:fe:15:07:64:87:b4:0a:6f:19: ee:15:db:f7:9e:41:99:6b:8e:71:a7:14:d9:3d:f1: 69:4a:a7:cc:ce:63:13:0f:b5:f3:e4:cb:cd:53:fe: 29:98:e8:c7:05:30:8f:a4:dc:44:81:0b:1e:ed:7f: 6c:80:53:8e:a6:51:07:79:c7:aa:01:9c:1d:2e:db: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DE:F0:F9:48:EB:91:0E:45:CE:3E:51:88:8E:33:EE:69:56:5F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/439399de-a12b-315c-bf2d-df1aabb64f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.104/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a6:54:a0:5c:0e:e3:27:43:27:a6:50:53:c1:a4:f0:c1:c5: 31:79:8f:15:32:07:b1:11:dc:fa:ea:4c:2d:f9:28:43:52:57: 05:09:d9:2b:63:da:30:93:eb:73:2a:8d:6e:4b:b6:b7:5b:8b: 8f:8b:f8:43:24:b8:40:fd:4c:d1:f1:d8:bb:48:4b:d2:b0:5b: 76:f2:77:fd:80:d4:99:83:74:36:16:b0:21:d5:bd:4c:62:46: 69:d4:6f:1f:a7:6d:1a:2e:15:6b:8d:d7:41:23:13:f9:fb:09: 85:67:2f:79:4e:23:c0:c3:c8:ab:a8:03:d2:34:3e:11:44:3e: e1:fe:ae:e2:d0:95:de:5a:ce:93:97:2a:54:39:69:b5:8c:fa: 29:03:d1:24:0e:e0:a9:01:3c:cd:90:4a:bf:e4:ab:4f:48:32: e1:58:14:52:56:3e:31:e6:6f:2c:57:a6:a5:89:d8:f3:69:cd: 90:10:a9:df:a9:69:63:ec:b5:44:81:81:60:8a:aa:22:ca:e7: 20:d8:b0:3a:5a:ab:f6:9e:fe:e7:d3:7d:2d:10:88:57:b9:0b: 1b:4e:9c:63:06:d4:f5:30:46:a6:91:00:fb:65:4e:64:d1:94: 09:0d:ed:92:b9:b4:31:03:12:17:05:77:7e:98:82:08:fa:8a: e0:cf:bc:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFZRPaFUrV6F0SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk YjM1NWRhYTAtZTBlZS00OGRhLThlMjctNWJmZDAxNmExZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7Il6HlN45jIoiK9UCdRC3tlGc0ObiwNQR0a RviV0CNlwDCeZaoIFflYH7Oh4YhvkFLT7Wn+aVa8qLwIA3F/Vc+64O9akyQDjz55 Os1pArWs4R8b1GGqW4hsK3wr/WqEnWuPSSLoJEohLLdBnSrAScvTaMyeaXZpRj2r BMVI/XgTdeAKczecr3MH8pTfpF7ArCKFrn9iB/Tw/Ef/E4i25Ywtn5MdqL4vFdi5 7KAM93NtFXhNyWcjZyr+FQdkh7QKbxnuFdv3nkGZa45xpxTZPfFpSqfMzmMTD7Xz 5MvNU/4pmOjHBTCPpNxEgQse7X9sgFOOplEHeceqAZwdLtu9zwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMre8PlI65EORc4+UYiOM+5pVl8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDM5Mzk5ZGUtYTEyYi0z MTVjLWJmMmQtZGYxYWFiYjY0ZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHaDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvplSgXA7jJ0MnplBTwaTwwcUxeY8VMgexEdz66kwt+ShDUlcFCdkr Y9owk+tzKo1uS7a3W4uPi/hDJLhA/UzR8di7SEvSsFt28nf9gNSZg3Q2FrAh1b1M YkZp1G8fp20aLhVrjddBIxP5+wmFZy95TiPAw8irqAPSND4RRD7h/q7i0JXeWs6T lypUOWm1jPopA9EkDuCpATzNkEq/5KtPSDLhWBRSVj4x5m8sV6alidjzac2QEKnf qWlj7LVEgYFgiqoiyucg2LA6Wqv2nv7n030tEIhXuQsbTpxjBtT1MEamkQD7ZU5k 0ZQJDe2SubQxAxIXBXd+mIII+orgz7y8 -----END CERTIFICATE-----Generated at Wed May 13 04:08:24 2026 by rpki-client