$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad688023-ab2d-3197-9661-52fe4bace65e.roa File: ad688023-ab2d-3197-9661-52fe4bace65e.roa (raw, json) Hash identifier: ObnebpQ8Bb9TMgnumHWPdPGt3iqVVtWk9j9s0S0afyk= Subject key identifier: 25:BC:6C:44:1F:8D:7F:CF:EF:9E:72:41:9B:DA:8C:E2:D0:47:3F:C4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC6A23B93922DF98F76D700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad688023-ab2d-3197-9661-52fe4bace65e.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.64/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:a2:3b:93:92:2d:f9:8f:76:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=1172a6ff-43cb-4011-91fe-54b78d35cc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:41:fe:51:64:f5:48:fa:76:c7:81:a6:45:6c: 0a:23:1b:77:aa:c1:4a:63:2a:28:53:9a:e8:3e:a6: 58:5c:44:a7:83:38:f7:80:ef:d1:7c:17:4a:24:b0: dc:1a:83:f4:fe:84:c7:d6:d7:41:10:0a:0c:6f:e3: 4c:43:18:f8:ad:01:4e:0c:d8:c7:7e:fe:f5:2a:b6: 83:87:08:67:11:e9:f8:24:5b:41:bf:b3:2b:a1:e2: 89:34:61:8b:b2:43:aa:91:d1:e7:8a:94:90:c4:b6: f4:7f:1c:d9:a4:5d:6d:d2:9f:fd:4d:29:2b:8f:9e: 97:c9:2a:c5:76:c6:9b:ef:bc:d1:b4:20:2f:89:3c: 3f:d9:c9:7c:5d:42:f9:80:65:75:bd:aa:b2:89:c1: 4e:ee:54:9e:2a:d5:56:3a:62:e1:3b:41:0f:c8:17: 05:5f:2e:0e:e7:dd:39:4b:25:f3:78:db:46:07:e8: 3e:0c:49:f3:e9:73:7e:04:45:17:9b:b9:0a:26:ee: 30:bb:b7:ef:c9:9b:ed:e1:7d:64:96:46:c2:ea:b0: 5c:78:b8:cd:bf:7b:3a:ff:2d:c8:ae:00:2b:ac:9c: 0e:0e:99:15:11:c4:63:55:b2:b0:a7:35:97:30:ac: 24:db:13:21:1a:63:c1:e3:c7:46:9f:a3:c2:99:00: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BC:6C:44:1F:8D:7F:CF:EF:9E:72:41:9B:DA:8C:E2:D0:47:3F:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad688023-ab2d-3197-9661-52fe4bace65e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.64/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0b:8d:df:02:5f:ce:85:40:71:e8:78:69:29:4b:a2:ea:dd: 0c:20:35:27:45:5f:16:b6:ea:c0:50:f1:60:b1:5c:a9:4d:c5: d7:46:d6:8f:e7:f8:11:00:6e:5c:37:d8:93:12:e9:aa:fd:6a: 28:78:db:8b:c7:e3:1b:45:e6:c6:2a:c2:b2:47:44:30:e5:ba: 22:47:2f:32:8d:d8:3f:57:fe:ba:cd:07:30:05:e7:30:f5:6d: 28:ba:d0:78:be:5a:f7:5e:03:2c:ce:02:3e:12:ae:35:95:83: 15:09:42:85:aa:9d:1c:9e:22:20:23:28:ca:06:8f:2f:3d:21: 82:31:e6:c0:3a:f8:cf:1a:6d:df:ae:ac:4e:6d:ac:19:25:9f: e4:51:4d:7f:be:25:41:62:48:4f:b5:2b:22:12:bf:20:46:4b: 37:e6:6c:ff:18:a0:8f:4b:56:9a:ab:73:74:79:66:39:42:cb: ca:70:77:2f:e4:ef:5f:2d:4a:a9:25:57:1e:45:53:d4:de:9e: 04:61:3a:63:b9:a2:95:99:58:dd:77:55:db:d7:b7:7f:05:8c: cd:e4:ec:5e:e2:75:f5:98:fa:f6:9d:3c:00:0f:93:a4:92:05: 33:65:00:a3:61:9d:4a:48:17:ae:4d:c2:7f:55:65:40:ee:4e: 46:c7:b3:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/MxqI7k5It+Y921wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk MTE3MmE2ZmYtNDNjYi00MDExLTkxZmUtNTRiNzhkMzVjYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUH+UWT1SPp2x4GmRWwKIxt3qsFKYyooU5ro PqZYXESngzj3gO/RfBdKJLDcGoP0/oTH1tdBEAoMb+NMQxj4rQFODNjHfv71KraD hwhnEen4JFtBv7MroeKJNGGLskOqkdHnipSQxLb0fxzZpF1t0p/9TSkrj56XySrF dsab77zRtCAviTw/2cl8XUL5gGV1vaqyicFO7lSeKtVWOmLhO0EPyBcFXy4O5905 SyXzeNtGB+g+DEnz6XN+BEUXm7kKJu4wu7fvyZvt4X1klkbC6rBceLjNv3s6/y3I rgArrJwODpkVEcRjVbKwpzWXMKwk2xMhGmPB48dGn6PCmQD5EwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCW8bEQfjX/P755yQZvajOLQRz/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWQ2ODgwMjMtYWIyZC0z MTk3LTk2NjEtNTJmZTRiYWNlNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkC43fAl/OhUBx6HhpKUui6t0MIDUnRV8WturAUPFgsVypTcXXRtaP 5/gRAG5cN9iTEumq/WooeNuLx+MbRebGKsKyR0Qw5boiRy8yjdg/V/66zQcwBecw 9W0outB4vlr3XgMszgI+Eq41lYMVCUKFqp0cniIgIyjKBo8vPSGCMebAOvjPGm3f rqxObawZJZ/kUU1/viVBYkhPtSsiEr8gRks35mz/GKCPS1aaq3N0eWY5QsvKcHcv 5O9fLUqpJVceRVPU3p4EYTpjuaKVmVjdd1Xb17d/BYzN5Oxe4nX1mPr2nTwAD5Ok kgUzZQCjYZ1KSBeuTcJ/VWVA7k5Gx7PX -----END CERTIFICATE-----Generated at Sun Nov 15 20:45:50 2026 by rpki-client