$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58668dbc-8f0e-3a34-8407-f15828f7af2e.roa File: 58668dbc-8f0e-3a34-8407-f15828f7af2e.roa (raw, json) Hash identifier: rt5eoXo07djbTeXXiCFyQI2KHEsfSjy0FEgKzgHQw5Q= Subject key identifier: 22:16:CF:4D:C8:53:8A:30:B2:51:AA:4F:38:C0:46:1B:15:26:84:69 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E885A55DE5A869FEE0792AF40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58668dbc-8f0e-3a34-8407-f15828f7af2e.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.208/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:55:de:5a:86:9f:ee:07:92:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=bf6f9638-1caa-4702-a80b-bc8f40243732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:45:2c:b0:c8:81:ed:dd:59:36:0e:36:30: 8e:f4:db:34:ef:1c:82:c7:17:b4:1b:95:d0:81:17: 43:39:6c:16:e6:80:d5:ca:d0:91:28:f9:aa:25:47: 81:65:27:20:19:bf:71:b3:65:e2:32:45:72:57:bd: 46:3e:d0:b7:46:9f:e2:da:78:51:8d:85:f8:d6:26: 42:53:ee:66:7a:b8:38:9e:66:3c:0c:d4:3d:55:d3: 63:c8:ff:69:a2:16:14:6c:df:ca:b5:36:ea:06:d9: 4b:80:17:5c:6e:13:ee:1c:06:c9:23:a6:5b:1b:28: ba:3a:9d:ae:90:00:4b:79:61:da:5a:d7:0e:30:4f: 1c:07:b1:78:6d:e7:af:ba:1b:0f:10:1a:2f:c3:04: d7:d7:7f:19:45:88:fc:b5:14:c8:9b:c7:6a:5d:d8: ed:a3:7b:03:9a:76:ed:a6:24:59:e1:06:d6:7d:6b: 55:6a:65:55:c4:b1:24:39:6f:9c:18:dd:82:09:6d: 2a:f7:19:4b:29:5f:f1:19:40:4a:a6:b4:d4:71:02: 1e:45:4e:7c:2d:41:67:48:e8:ee:69:db:49:7c:56: 96:47:5e:62:87:89:24:98:f5:14:40:30:59:f9:13: 79:83:98:da:af:2b:d0:93:be:da:41:a9:98:86:79: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:16:CF:4D:C8:53:8A:30:B2:51:AA:4F:38:C0:46:1B:15:26:84:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58668dbc-8f0e-3a34-8407-f15828f7af2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.208/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:55:b4:59:48:27:5a:a6:eb:61:14:dd:be:dd:3b:96:51:5e: 93:67:3e:8b:36:fa:2c:c4:73:10:f3:58:a1:f5:03:7c:e6:2a: 83:73:ec:33:d6:7f:53:8e:e9:ea:43:c0:83:80:61:fd:41:33: 5d:9c:f9:53:0f:91:c3:d8:eb:ef:e7:a8:83:13:2d:9d:5d:58: 97:77:45:f7:dc:76:24:f3:44:c6:29:ee:c1:b2:e4:d9:d1:f5: c3:e8:d8:9b:ee:63:10:c9:05:fb:dd:24:88:5c:35:e3:e8:8d: b6:6e:13:d1:55:a0:ec:ed:a6:20:30:66:db:13:6d:bb:86:7c: 4a:45:22:11:b4:a5:e2:ae:79:88:80:0c:5d:c3:db:b7:28:b2: 98:f8:76:b4:6c:cb:d1:f4:31:75:8a:ca:bc:1e:21:47:1d:18: 33:2d:e3:d6:dd:26:50:c6:e9:99:8f:5f:ce:86:1a:84:30:b8: ee:82:39:e7:ff:aa:dc:77:45:c7:70:85:52:36:6a:3b:7b:65: e1:b0:bd:63:2c:24:e7:9e:78:cd:48:88:46:95:a7:ba:75:13: f3:e0:54:7c:9b:9b:18:f2:5b:e2:b7:c5:1b:56:89:a9:7f:c7: cc:58:3b:5d:ec:35:11:84:f1:d2:c2:02:f6:d8:a7:20:dc:f0: 47:2c:c5:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6IWlXeWoaf7geSr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk YmY2Zjk2MzgtMWNhYS00NzAyLWE4MGItYmM4ZjQwMjQzNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimVFLLDIge3dWTYONjCO9Ns07xyCxxe0G5XQ gRdDOWwW5oDVytCRKPmqJUeBZScgGb9xs2XiMkVyV71GPtC3Rp/i2nhRjYX41iZC U+5merg4nmY8DNQ9VdNjyP9pohYUbN/KtTbqBtlLgBdcbhPuHAbJI6ZbGyi6Op2u kABLeWHaWtcOME8cB7F4beevuhsPEBovwwTX138ZRYj8tRTIm8dqXdjto3sDmnbt piRZ4QbWfWtVamVVxLEkOW+cGN2CCW0q9xlLKV/xGUBKprTUcQIeRU58LUFnSOju adtJfFaWR15ih4kkmPUUQDBZ+RN5g5jaryvQk77aQamYhnnpGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCIWz03IU4owslGqTzjARhsVJoRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTg2NjhkYmMtOGYwZS0z YTM0LTg0MDctZjE1ODI4ZjdhZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExH0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdVbRZSCdaputhFN2+3TuWUV6TZz6LNvosxHMQ81ih9QN85iqDc+wz 1n9TjunqQ8CDgGH9QTNdnPlTD5HD2Ovv56iDEy2dXViXd0X33HYk80TGKe7BsuTZ 0fXD6Nib7mMQyQX73SSIXDXj6I22bhPRVaDs7aYgMGbbE227hnxKRSIRtKXirnmI gAxdw9u3KLKY+Ha0bMvR9DF1isq8HiFHHRgzLePW3SZQxumZj1/OhhqEMLjugjnn /6rcd0XHcIVSNmo7e2XhsL1jLCTnnnjNSIhGlae6dRPz4FR8m5sY8lvit8UbVomp f8fMWDtd7DURhPHSwgL22Kcg3PBHLMXR -----END CERTIFICATE-----Generated at Thu Jul 23 23:03:22 2026 by rpki-client