$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/788bcc22-7bed-301d-84d3-68155c04f72d.roa File: 788bcc22-7bed-301d-84d3-68155c04f72d.roa (raw, json) Hash identifier: P+WBi9oBG3SPPLvSFDvc5JMZVosXap1cT9fTCexH3mQ= Subject key identifier: 4A:66:AE:7E:4D:F5:05:26:92:F8:1B:C2:32:49:5D:49:3D:84:AC:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DA81594ED1D1DCC5291BB8CA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/788bcc22-7bed-301d-84d3-68155c04f72d.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 208.76.71.72/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:94:ed:1d:1d:cc:52:91:bb:8c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=4ed94489-5fc2-4b33-8d70-49d22d1194d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ca:d1:95:82:2e:dc:d0:e9:54:f8:1d:a5:3c: 6f:8c:46:99:6f:09:b4:c6:29:de:63:2c:23:d9:a7: 06:d5:40:2e:6d:e8:cf:8a:91:1b:b4:0e:ed:12:a3: 20:e1:70:c8:5c:45:a3:ff:02:83:68:f9:fd:62:a5: 7d:78:da:f6:87:61:9f:93:b6:74:8e:36:97:07:6d: 36:96:09:d4:71:9f:04:77:38:50:11:be:2f:e3:60: 4f:22:23:ec:0d:8b:89:83:49:dd:d9:59:a7:4f:48: 6c:98:28:49:e8:b1:af:a5:1b:bd:e9:65:a6:f9:fe: e7:50:74:5b:2f:aa:12:8d:01:0d:be:0a:90:fd:47: b4:99:f4:b1:c1:c7:50:91:e5:2a:06:07:c5:d9:42: 19:6b:df:5e:4f:ff:3b:6b:6e:9d:85:5d:51:39:63: c7:0d:4b:32:07:f4:17:36:3e:93:53:46:76:06:3a: 49:00:29:cd:ec:00:09:5f:44:94:19:06:ae:33:8f: fc:77:4a:05:a4:69:94:62:12:35:4d:e6:fb:61:ca: be:84:d5:4c:e5:f1:54:60:a2:a0:cc:50:3b:5a:4d: b9:9c:f8:ab:2e:39:bb:e2:50:7b:39:ce:1f:a4:23: 23:24:a8:15:0a:1c:d4:6f:9a:fb:6f:d7:7c:7c:38: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:66:AE:7E:4D:F5:05:26:92:F8:1B:C2:32:49:5D:49:3D:84:AC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/788bcc22-7bed-301d-84d3-68155c04f72d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.72/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:32:75:92:99:ef:51:f0:37:40:d0:15:27:3c:db:4a:75:90: 61:ce:9a:b4:96:fa:dd:30:db:6f:73:fd:35:ae:0a:53:c4:ff: 0b:11:d8:51:0c:f8:3c:98:f5:94:55:b7:c8:29:2e:31:25:2d: 1f:26:3e:1c:39:4e:3e:36:ec:cc:5d:f4:c1:ed:e7:1a:a9:93: 24:a1:e2:68:13:57:22:35:d3:e6:38:bb:28:9f:a5:70:21:5e: dc:21:f1:8c:05:e6:2c:f5:72:88:bb:ff:4d:21:4f:1f:15:22: 53:5c:e9:da:e6:39:fd:f9:6c:d4:69:29:c6:7e:fe:13:ec:00: 74:9b:26:2a:5d:5b:74:c1:01:74:93:8f:5d:4a:fc:bd:e3:29: 1d:48:72:66:2e:04:a1:db:dd:05:da:3c:bb:93:bb:c6:71:54: 8a:18:40:5b:fb:47:fb:5d:26:23:1c:eb:18:a0:fb:af:69:7a: 51:75:4a:4a:49:37:f7:e2:97:ca:11:74:56:2c:f0:8e:d5:c3: 37:1e:f7:19:f0:b5:26:87:7a:f9:3f:99:e5:18:95:d6:3a:ab: fb:f6:79:d3:9f:06:a9:e7:3f:b6:e5:6e:20:92:58:c0:37:f4: ed:fc:bf:87:c9:77:6c:c4:82:e2:d6:d5:92:49:80:a9:95:b6: 04:3a:7f:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFZTtHR3MUpG7jKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NGVkOTQ0ODktNWZjMi00YjMzLThkNzAtNDlkMjJkMTE5NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8rRlYIu3NDpVPgdpTxvjEaZbwm0xineYywj 2acG1UAubejPipEbtA7tEqMg4XDIXEWj/wKDaPn9YqV9eNr2h2Gfk7Z0jjaXB202 lgnUcZ8EdzhQEb4v42BPIiPsDYuJg0nd2VmnT0hsmChJ6LGvpRu96WWm+f7nUHRb L6oSjQENvgqQ/Ue0mfSxwcdQkeUqBgfF2UIZa99eT/87a26dhV1ROWPHDUsyB/QX Nj6TU0Z2BjpJACnN7AAJX0SUGQauM4/8d0oFpGmUYhI1Teb7Ycq+hNVM5fFUYKKg zFA7Wk25nPirLjm74lB7Oc4fpCMjJKgVChzUb5r7b9d8fDhO+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEpmrn5N9QUmkvgbwjJJXUk9hKyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzg4YmNjMjItN2JlZC0z MDFkLTg0ZDMtNjgxNTVjMDRmNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHSDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBiMnWSme9R8DdA0BUnPNtKdZBhzpq0lvrdMNtvc/01rgpTxP8LEdhR DPg8mPWUVbfIKS4xJS0fJj4cOU4+NuzMXfTB7ecaqZMkoeJoE1ciNdPmOLson6Vw IV7cIfGMBeYs9XKIu/9NIU8fFSJTXOna5jn9+WzUaSnGfv4T7AB0myYqXVt0wQF0 k49dSvy94ykdSHJmLgSh290F2jy7k7vGcVSKGEBb+0f7XSYjHOsYoPuvaXpRdUpK STf34pfKEXRWLPCO1cM3HvcZ8LUmh3r5P5nlGJXWOqv79nnTnwap5z+25W4gkljA N/Tt/L+HyXdsxILi1tWSSYCplbYEOn/s -----END CERTIFICATE-----Generated at Wed May 13 02:53:45 2026 by rpki-client