$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6a77e677-4929-312b-bae7-3f88a56a54fa.roa File: 6a77e677-4929-312b-bae7-3f88a56a54fa.roa (raw, json) Hash identifier: /9c+/fBprOWToYB7mYi/MXM4lKNZIc43xmctGSc0DyM= Subject key identifier: C7:43:1E:71:F2:B8:C9:39:03:E2:69:A1:12:29:49:01:78:E7:F2:56 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC6A32CCADC6CBB55F4C2A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6a77e677-4929-312b-bae7-3f88a56a54fa.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.0/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:a3:2c:ca:dc:6c:bb:55:f4:c2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=c805d28a-d15e-4b32-903b-c7fa04df1de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:05:12:2c:0a:3a:59:e5:e3:61:b7:ed:8d:5f: 3c:ef:d6:07:81:f8:f6:96:d3:43:c1:d6:d5:69:25: 22:bb:7c:4d:01:93:63:84:9c:a5:0b:37:6e:a3:0c: 63:42:10:a0:d7:c7:a4:32:18:18:68:cb:81:f8:59: 39:2e:fe:55:76:08:60:6a:74:5c:72:e9:ca:74:c5: dd:c4:da:f8:73:31:b4:f5:fd:0a:9a:1e:7d:e3:00: 68:cc:fa:4e:44:15:d7:ce:99:2d:30:7f:c9:c9:dd: 73:9d:08:79:a6:a1:b5:28:57:b8:9b:c4:af:fa:14: e5:53:18:cb:5c:9b:df:c4:91:c5:2a:39:4c:32:91: 8f:47:51:c0:21:4d:66:a6:bf:32:0c:3b:fa:e6:16: 83:20:38:37:6c:37:72:f5:dd:11:a4:1e:f4:7d:5a: a8:f0:be:44:85:a7:3d:ae:66:36:89:04:72:04:fd: a0:8d:0d:c8:a7:bb:0f:d8:d0:07:f8:da:cb:e2:6b: f9:b1:e8:9e:b8:7d:11:77:c8:74:24:98:a5:84:82: f9:ad:f5:e9:8a:b0:9f:1d:b7:7e:3b:0e:d9:63:4c: 8a:57:da:1f:c2:62:ca:76:1f:93:29:e1:07:43:32: f2:43:04:65:86:3b:ea:a6:82:88:4f:7f:12:6c:1b: 70:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:43:1E:71:F2:B8:C9:39:03:E2:69:A1:12:29:49:01:78:E7:F2:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6a77e677-4929-312b-bae7-3f88a56a54fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.0/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:34:c8:07:32:4c:57:1f:e1:0f:a6:03:1e:7f:62:bc:ca:71: 87:ba:03:df:74:82:5c:04:5e:04:a4:79:bd:07:24:d0:44:46: d8:6e:73:b2:f6:8e:53:95:22:e5:35:e0:d6:b6:10:ef:4e:a3: e4:d1:44:54:aa:07:c8:3e:09:50:32:81:1f:e7:06:20:77:ce: 5d:d2:9b:0f:4a:96:4d:da:57:78:41:7f:0f:95:23:c4:48:22: d9:98:5c:af:9d:a5:20:34:c9:34:4a:71:35:a3:f2:bc:57:3b: 10:f4:ba:a0:72:86:4e:c5:90:4c:60:75:da:f5:eb:b9:f3:c2: 9d:d1:18:6e:bc:ce:ca:a1:fe:d5:5c:7f:db:19:ea:5f:91:a8: a0:c7:58:28:2a:c3:99:6d:17:0c:44:78:52:81:06:31:0e:32: 17:11:3a:45:8c:81:a2:47:45:f9:73:f2:86:c5:94:02:e4:98: 05:e2:f5:24:a2:42:93:32:34:84:cb:31:5a:e7:29:f7:0d:73: 7d:d2:8b:f0:ad:85:5a:13:5b:16:ec:8e:b2:eb:dc:9b:f2:e4: c4:56:7b:2c:60:f6:73:37:2d:60:7b:5f:6f:49:a9:31:78:e6: d7:82:4a:c8:9d:a3:2d:a3:a2:9f:89:2a:ae:f2:0f:94:f9:77: 2a:e8:70:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/MxqMsytxsu1X0wqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk YzgwNWQyOGEtZDE1ZS00YjMyLTkwM2ItYzdmYTA0ZGYxZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAUSLAo6WeXjYbftjV8879YHgfj2ltNDwdbV aSUiu3xNAZNjhJylCzduowxjQhCg18ekMhgYaMuB+Fk5Lv5VdghganRccunKdMXd xNr4czG09f0Kmh594wBozPpORBXXzpktMH/Jyd1znQh5pqG1KFe4m8Sv+hTlUxjL XJvfxJHFKjlMMpGPR1HAIU1mpr8yDDv65haDIDg3bDdy9d0RpB70fVqo8L5Ehac9 rmY2iQRyBP2gjQ3Ip7sP2NAH+NrL4mv5seieuH0Rd8h0JJilhIL5rfXpirCfHbd+ Ow7ZY0yKV9ofwmLKdh+TKeEHQzLyQwRlhjvqpoKIT38SbBtwLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMdDHnHyuMk5A+JpoRIpSQF45/JWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmE3N2U2NzctNDkyOS0z MTJiLWJhZTctM2Y4OGE1NmE1NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvNMgHMkxXH+EPpgMef2K8ynGHugPfdIJcBF4EpHm9ByTQREbYbnOy 9o5TlSLlNeDWthDvTqPk0URUqgfIPglQMoEf5wYgd85d0psPSpZN2ld4QX8PlSPE SCLZmFyvnaUgNMk0SnE1o/K8VzsQ9LqgcoZOxZBMYHXa9eu588Kd0RhuvM7Kof7V XH/bGepfkaigx1goKsOZbRcMRHhSgQYxDjIXETpFjIGiR0X5c/KGxZQC5JgF4vUk okKTMjSEyzFa5yn3DXN90ovwrYVaE1sW7I6y69yb8uTEVnssYPZzNy1ge19vSakx eObXgkrInaMto6KfiSqu8g+U+Xcq6HAq -----END CERTIFICATE-----Generated at Sat Nov 14 20:48:01 2026 by rpki-client