$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58668dbc-8f0e-3a34-8407-f15828f7af2e.roa File: 58668dbc-8f0e-3a34-8407-f15828f7af2e.roa (raw, json) Hash identifier: s8AeD5VB6IvbF46XQerXb0wI/rKeEElI2vZEZkVa8l0= Subject key identifier: EA:65:C1:51:AF:58:18:1B:8B:BD:28:2A:DB:5B:DE:A9:76:26:45:9F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DA81594999F50493771DA4316 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58668dbc-8f0e-3a34-8407-f15828f7af2e.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 208.76.71.208/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:94:99:9f:50:49:37:71:da:43:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=c6f0f6d0-85f8-48e4-8d8e-b7dff8dcd66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1e:8d:44:27:70:2d:f6:27:39:37:fe:70:df: cb:ed:c4:e3:f9:c9:35:db:16:ac:a8:1f:c5:45:7a: 75:08:77:2a:25:ca:b5:16:1f:7d:04:8e:13:93:8f: d0:62:10:5b:0d:e3:86:91:58:f9:70:47:b2:8d:60: 1e:e9:78:8f:2e:6b:f0:ab:74:b4:19:0b:93:a1:cc: 75:d1:0c:a0:c3:28:07:bb:28:f3:0a:fd:68:8a:5d: 82:16:5a:ed:60:65:71:5e:ec:58:5e:37:99:ec:38: 0b:d3:42:1f:fc:dc:7e:9f:83:ff:90:09:f0:e6:01: 88:01:b4:de:62:8e:54:68:87:35:6c:dd:21:dc:23: 3f:91:01:37:80:1e:90:bf:2d:12:a1:b2:cc:b8:8b: 61:53:06:7e:ec:a3:59:1b:4a:ee:2a:0d:1a:3a:a1: d5:f6:55:0f:7e:5f:e3:72:d9:5f:1d:af:58:a3:fc: 90:33:03:be:63:c0:2f:f0:5f:fd:54:5d:3e:74:c0: 5d:84:73:32:19:f8:1d:71:18:26:d3:b3:b8:0e:c2: 45:ca:ea:8f:bb:04:02:d3:ea:f9:2f:bf:28:31:3d: 70:79:02:8a:9b:7d:73:de:2d:f3:ce:cb:01:0d:dc: 1a:c1:a7:71:77:36:9d:b9:10:c1:9d:97:fe:70:2c: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:C1:51:AF:58:18:1B:8B:BD:28:2A:DB:5B:DE:A9:76:26:45:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58668dbc-8f0e-3a34-8407-f15828f7af2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.208/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:68:01:1a:b5:5f:22:99:86:3c:11:85:a4:b7:7f:74:e8:5f: 0b:ab:cf:b0:46:35:c2:b3:32:da:43:78:0c:35:3d:19:d8:62: ad:2a:e1:f3:d2:9f:02:f9:ce:83:11:2d:14:d0:ca:a4:64:a9: 5c:bf:4f:c4:45:18:17:66:d9:21:78:19:03:65:c6:67:be:a3: ef:a4:6d:72:3e:e3:20:e9:df:17:b2:ba:85:39:7e:23:87:ac: bd:e3:94:28:9d:b8:04:07:a9:66:8e:ed:6f:f3:e0:93:f3:96: c4:9b:0e:50:07:a0:91:f4:58:f4:ad:7e:09:90:41:c7:2e:2a: 01:44:5e:31:65:ce:c5:24:95:57:41:a9:ab:6e:c8:de:f4:63: 23:cf:0a:63:df:f0:24:d1:13:c8:57:e5:91:72:8e:6c:d0:c6: 91:3d:57:de:5e:9f:b0:c3:cc:a7:e0:8f:57:01:9e:5c:33:32: 1b:ba:dd:aa:2e:44:47:b5:36:27:9c:6f:5b:62:07:4b:4f:c6: 95:bd:3d:01:6f:ed:b9:32:f7:68:21:92:6f:c3:52:4d:12:47: ca:d4:9c:9f:49:1d:13:c8:a1:9a:fc:00:c3:e8:3b:33:fc:0f: 60:6e:b3:e2:d7:f9:db:15:59:09:24:b3:c1:a0:eb:3b:90:15: 94:c9:9b:6b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFZSZn1BJN3HaQxYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk YzZmMGY2ZDAtODVmOC00OGU0LThkOGUtYjdkZmY4ZGNkNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx6NRCdwLfYnOTf+cN/L7cTj+ck12xasqB/F RXp1CHcqJcq1Fh99BI4Tk4/QYhBbDeOGkVj5cEeyjWAe6XiPLmvwq3S0GQuTocx1 0QygwygHuyjzCv1oil2CFlrtYGVxXuxYXjeZ7DgL00If/Nx+n4P/kAnw5gGIAbTe Yo5UaIc1bN0h3CM/kQE3gB6Qvy0SobLMuIthUwZ+7KNZG0ruKg0aOqHV9lUPfl/j ctlfHa9Yo/yQMwO+Y8Av8F/9VF0+dMBdhHMyGfgdcRgm07O4DsJFyuqPuwQC0+r5 L78oMT1weQKKm31z3i3zzssBDdwawadxdzaduRDBnZf+cCxhSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOplwVGvWBgbi70oKttb3ql2JkWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTg2NjhkYmMtOGYwZS0z YTM0LTg0MDctZjE1ODI4ZjdhZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExH0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBfaAEatV8imYY8EYWkt3906F8Lq8+wRjXCszLaQ3gMNT0Z2GKtKuHz 0p8C+c6DES0U0MqkZKlcv0/ERRgXZtkheBkDZcZnvqPvpG1yPuMg6d8XsrqFOX4j h6y945QonbgEB6lmju1v8+CT85bEmw5QB6CR9Fj0rX4JkEHHLioBRF4xZc7FJJVX Qamrbsje9GMjzwpj3/Ak0RPIV+WRco5s0MaRPVfeXp+ww8yn4I9XAZ5cMzIbut2q LkRHtTYnnG9bYgdLT8aVvT0Bb+25MvdoIZJvw1JNEkfK1JyfSR0TyKGa/ADD6Dsz /A9gbrPi1/nbFVkJJLPBoOs7kBWUyZtr -----END CERTIFICATE-----Generated at Wed May 13 07:24:59 2026 by rpki-client