$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9385bb79-f2b3-3752-b396-669950fd672c.roa File: 9385bb79-f2b3-3752-b396-669950fd672c.roa (raw, json) Hash identifier: F49beMWBFuwGEh08nJsr9sIfEp7kLxjhok6ySrnNsiM= Subject key identifier: 39:22:5A:BE:2A:3F:C4:23:26:8E:64:EE:62:FB:DC:C1:66:B5:FA:CB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F2ABD160036ABFDF268F6E880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9385bb79-f2b3-3752-b396-669950fd672c.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.208/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:16:00:36:ab:fd:f2:68:f6:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=9987b42f-a119-4ccd-8f36-1e4345fa12cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:a2:50:39:00:d3:2a:df:c9:78:ed:f6:cd: f4:42:7c:ad:6c:43:78:f6:05:e7:cb:4b:cc:8a:3a: 58:2a:d0:fc:cd:c1:b3:1e:7a:37:09:71:26:b7:dc: 78:2c:5a:c4:79:e4:fd:aa:75:28:59:a8:d7:fd:f9: 99:b0:c7:b9:f4:ef:bd:ff:8b:54:96:71:8b:02:49: 29:49:64:11:7e:4c:5d:84:0c:d9:80:e0:2c:c5:d9: fe:08:bc:01:44:27:de:7a:82:d6:3f:2c:8c:fc:97: c8:99:c7:7d:78:da:ce:db:31:f8:1f:a0:db:c5:94: e7:e1:f9:d2:69:80:40:14:25:45:10:23:59:5a:0d: 35:d6:6e:f4:e5:8e:ed:92:c7:47:d2:9e:ba:0f:14: b5:6d:be:18:ef:e3:f2:f5:0c:26:86:5b:60:d2:b1: 4e:30:5d:a7:16:af:a8:3f:e8:7e:b3:6a:7f:5b:96: 24:c8:39:de:f5:e3:11:ea:53:3a:60:1a:29:92:4b: 36:6f:0e:e5:8f:71:3e:d3:1f:e0:e6:07:a8:6b:d6: 05:ec:bc:fd:e9:54:ca:00:24:29:40:91:ba:30:32: 2e:24:96:e8:ee:1f:bc:3d:20:c6:24:93:1e:62:f6: 5c:bd:ca:90:51:b0:55:9c:8a:e4:07:c1:c3:9f:90: 25:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:22:5A:BE:2A:3F:C4:23:26:8E:64:EE:62:FB:DC:C1:66:B5:FA:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9385bb79-f2b3-3752-b396-669950fd672c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.208/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:8a:e2:76:08:37:e0:f2:a8:a6:9d:e8:9a:a3:35:2f:93:5b: da:d1:f7:3f:58:67:e9:9d:a1:4c:c3:cd:0b:59:a2:fe:ca:30: 21:2d:a7:28:f2:cc:40:a3:06:58:20:2c:a6:18:69:b4:9c:06: 12:42:4e:00:49:f0:f4:b7:c0:bb:d8:c9:16:d0:1d:f9:3a:80: 74:b2:1b:45:7a:72:c9:20:6d:ed:05:2f:ff:db:f8:eb:3a:6b: b0:85:54:bb:23:66:83:21:1b:e9:90:a0:71:53:f2:b4:a4:3d: ca:91:20:6c:fd:53:52:cf:01:f5:11:e7:d4:5d:a2:0e:3c:8b: 3b:df:f0:9a:05:67:4f:de:fa:41:5a:8b:da:63:aa:b0:cc:bc: 91:52:3e:77:80:b6:7e:b9:96:8f:f1:d7:17:d3:a3:ae:65:47: 84:62:0b:2e:d4:94:7a:a0:95:ae:02:65:18:16:86:ba:fe:20: fa:f1:63:ab:6e:20:e0:7a:37:39:d0:3c:66:53:74:b1:3f:95: 89:6c:e1:66:64:f4:24:69:6d:56:a4:85:99:28:50:e0:e0:f9: a4:43:5f:54:10:f4:98:f0:ac:fe:c7:b6:2f:57:87:f4:a2:86: 56:96:e8:40:d7:28:0c:f4:f3:75:40:b6:4c:a7:ca:9f:d5:78: 3b:f4:5b:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvRYANqv98mj26IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk OTk4N2I0MmYtYTExOS00Y2NkLThmMzYtMWU0MzQ1ZmExMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRiiUDkA0yrfyXjt9s30QnytbEN49gXny0vM ijpYKtD8zcGzHno3CXEmt9x4LFrEeeT9qnUoWajX/fmZsMe59O+9/4tUlnGLAkkp SWQRfkxdhAzZgOAsxdn+CLwBRCfeeoLWPyyM/JfImcd9eNrO2zH4H6DbxZTn4fnS aYBAFCVFECNZWg011m705Y7tksdH0p66DxS1bb4Y7+Py9Qwmhltg0rFOMF2nFq+o P+h+s2p/W5YkyDne9eMR6lM6YBopkks2bw7lj3E+0x/g5geoa9YF7Lz96VTKACQp QJG6MDIuJJbo7h+8PSDGJJMeYvZcvcqQUbBVnIrkB8HDn5AlwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDkiWr4qP8QjJo5k7mL73MFmtfrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTM4NWJiNzktZjJiMy0z NzUyLWIzOTYtNjY5OTUwZmQ2NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExH0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCsiuJ2CDfg8qimneiaozUvk1va0fc/WGfpnaFMw80LWaL+yjAhLaco 8sxAowZYICymGGm0nAYSQk4ASfD0t8C72MkW0B35OoB0shtFenLJIG3tBS//2/jr OmuwhVS7I2aDIRvpkKBxU/K0pD3KkSBs/VNSzwH1EefUXaIOPIs73/CaBWdP3vpB WovaY6qwzLyRUj53gLZ+uZaP8dcX06OuZUeEYgsu1JR6oJWuAmUYFoa6/iD68WOr biDgejc50DxmU3SxP5WJbOFmZPQkaW1WpIWZKFDg4PmkQ19UEPSY8Kz+x7YvV4f0 ooZWluhA1ygM9PN1QLZMp8qf1Xg79FsL -----END CERTIFICATE-----Generated at Wed Sep 23 10:59:38 2026 by rpki-client