$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4eebad9c-9061-36ea-b9eb-1ef551614a54.roa File: 4eebad9c-9061-36ea-b9eb-1ef551614a54.roa (raw, json) Hash identifier: zI/OyF0BS/cssWHEjm4ulnAiy5UeoD9lx/dHBK83thM= Subject key identifier: D6:1D:84:CD:45:6C:DE:3E:69:F0:C2:AA:68:1A:22:2B:2D:78:4E:3C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC6A17CC4A77383BC781680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4eebad9c-9061-36ea-b9eb-1ef551614a54.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.136/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:a1:7c:c4:a7:73:83:bc:78:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=aa0d6696-9764-4a44-bceb-8746156883a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:08:f7:cd:a2:50:34:83:1d:23:a6:8a:a4:76: 2f:25:2c:84:2b:33:67:ea:56:c2:03:7b:67:ea:20: 30:3f:19:c2:20:2e:1b:2b:01:cb:8b:a4:a8:fe:42: 5c:ee:08:a0:ce:5c:4b:eb:bc:27:2e:82:7f:1c:dd: a0:96:79:84:27:72:f3:79:13:7b:c6:3b:4e:94:b7: b6:ee:b3:2c:83:5b:8b:74:56:9b:28:47:ef:a3:19: 58:bd:b2:63:48:fd:cc:a5:08:e3:82:f3:dc:55:03: fd:9d:09:af:26:8a:5d:5b:15:a3:9d:55:8b:19:00: 4a:01:67:a0:dc:2c:20:02:f3:9f:7e:b0:09:cf:81: e2:6d:9c:02:bd:cb:3d:7f:c8:42:79:87:72:fb:c1: 70:41:11:33:ae:e6:b7:cb:c1:bf:fa:ec:d2:14:91: 59:52:a5:d5:07:24:80:54:8e:d2:ad:78:00:98:62: ab:90:4e:af:18:8d:9f:eb:f1:19:4a:64:f9:ab:2a: 47:7c:a8:fd:83:a8:a7:e6:ad:6a:1c:39:63:03:a2: b0:50:f9:0e:b7:41:e9:77:4d:5f:6e:bd:0d:37:e5: a8:ee:03:99:91:68:1b:f0:b4:d1:40:cf:a0:b5:a8: 27:bd:ab:27:21:2c:9d:60:50:02:83:cb:09:29:7c: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1D:84:CD:45:6C:DE:3E:69:F0:C2:AA:68:1A:22:2B:2D:78:4E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4eebad9c-9061-36ea-b9eb-1ef551614a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.136/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:5f:28:fe:93:64:51:46:39:9a:5b:30:74:78:b5:40:e1:12: 00:58:a8:4a:b5:50:30:f8:4d:ec:dc:2f:de:43:7d:20:a4:7e: ee:c2:3e:92:d3:df:ff:b4:d5:b6:15:22:73:92:57:12:94:aa: 0c:4c:d9:86:d1:6f:0f:f5:8b:7c:6f:53:87:cd:83:64:aa:b8: 26:22:99:f7:15:a8:5e:a1:14:a4:3e:9b:a8:9c:1a:c7:15:44: 89:40:f6:b2:2e:66:19:7a:ce:d5:af:1a:60:20:0c:e8:34:9f: 8a:99:9e:e7:2b:59:54:31:d7:7b:a6:21:9f:fd:6e:06:96:f4: d2:ff:ee:ba:1d:8d:10:6b:1f:d2:bf:6e:9b:4f:f1:09:6d:1a: ea:49:f1:15:28:5c:b0:a0:f5:7a:65:58:e8:dc:6e:0f:b6:3f: 8a:5f:6b:0c:24:83:f4:96:91:50:69:2a:c4:c9:55:ca:5f:d2: 4a:94:ec:d0:31:72:a8:94:fc:e3:22:f4:70:74:3b:c4:68:b4: 03:8e:6d:4e:dc:94:87:5e:b7:0a:4d:79:db:11:37:c5:f0:a5: 80:9f:1f:63:f7:d2:8b:c2:5e:a0:1f:58:8b:63:28:59:cf:b9: 07:34:bc:35:2f:76:cb:b2:af:7c:93:df:fe:e8:01:e0:98:a8: 59:df:84:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/MxqF8xKdzg7x4FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk YWEwZDY2OTYtOTc2NC00YTQ0LWJjZWItODc0NjE1Njg4M2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQj3zaJQNIMdI6aKpHYvJSyEKzNn6lbCA3tn 6iAwPxnCIC4bKwHLi6So/kJc7gigzlxL67wnLoJ/HN2glnmEJ3LzeRN7xjtOlLe2 7rMsg1uLdFabKEfvoxlYvbJjSP3MpQjjgvPcVQP9nQmvJopdWxWjnVWLGQBKAWeg 3CwgAvOffrAJz4HibZwCvcs9f8hCeYdy+8FwQREzrua3y8G/+uzSFJFZUqXVBySA VI7SrXgAmGKrkE6vGI2f6/EZSmT5qypHfKj9g6in5q1qHDljA6KwUPkOt0Hpd01f br0NN+Wo7gOZkWgb8LTRQM+gtagnvasnISydYFACg8sJKXyZCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNYdhM1FbN4+afDCqmgaIisteE48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGVlYmFkOWMtOTA2MS0z NmVhLWI5ZWItMWVmNTUxNjE0YTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7Xyj+k2RRRjmaWzB0eLVA4RIAWKhKtVAw+E3s3C/eQ30gpH7uwj6S 09//tNW2FSJzklcSlKoMTNmG0W8P9Yt8b1OHzYNkqrgmIpn3FaheoRSkPpuonBrH FUSJQPayLmYZes7VrxpgIAzoNJ+KmZ7nK1lUMdd7piGf/W4GlvTS/+66HY0Qax/S v26bT/EJbRrqSfEVKFywoPV6ZVjo3G4Ptj+KX2sMJIP0lpFQaSrEyVXKX9JKlOzQ MXKolPzjIvRwdDvEaLQDjm1O3JSHXrcKTXnbETfF8KWAnx9j99KLwl6gH1iLYyhZ z7kHNLw1L3bLsq98k9/+6AHgmKhZ34Rw -----END CERTIFICATE-----Generated at Sun Nov 15 15:35:25 2026 by rpki-client