$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae550361-4e24-3096-bd85-05a6b5fe88d4.roa File: ae550361-4e24-3096-bd85-05a6b5fe88d4.roa (raw, json) Hash identifier: tWiyjMje12MaUFu7bhuH+WTrfbOgfnNhUKlA43MOgKA= Subject key identifier: 6A:8B:F7:F7:08:7A:C1:F6:B5:C7:71:20:63:11:11:93:0B:A7:5C:79 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DA8159594A8A507D810AC8C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae550361-4e24-3096-bd85-05a6b5fe88d4.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 208.76.71.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:95:94:a8:a5:07:d8:10:ac:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=1d884e3c-d8cd-4942-bce0-cb99e8026a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:17:9f:ac:af:22:12:ff:43:1d:28:7c:6a: b1:85:c2:f1:81:a8:2c:40:ad:e0:35:4e:c2:f1:10: 26:40:42:e4:99:46:72:a4:22:ec:9f:da:fd:46:1e: 1c:77:c5:b6:57:7e:72:d0:30:7b:c5:e2:26:eb:59: ee:ae:c7:70:1c:b1:d9:40:bb:61:e1:e9:fc:97:6a: 49:97:a8:55:ba:c1:38:fa:f9:bf:46:f9:dd:8e:63: 4a:fe:95:71:61:b1:bb:83:4d:b8:4d:67:f8:8c:80: a9:22:e0:81:1d:93:f4:b4:32:d7:87:c8:b2:8e:4c: e9:e2:ab:98:78:ef:7f:e4:ad:f8:f1:4b:37:2c:b8: b3:7b:4e:2c:b6:12:5e:b7:f5:e6:dd:b5:19:20:a7: 8c:c3:94:9a:1a:cc:43:cd:71:46:ca:d4:eb:03:af: d7:33:97:1a:a7:0f:56:73:0b:97:26:e8:a2:e9:bf: 86:95:25:c8:21:3f:5a:d8:29:f0:42:91:4a:e2:c1: c7:de:83:01:2a:53:1b:6d:ed:2c:20:0b:e3:36:89: 6c:aa:4d:88:83:d8:49:94:be:d2:87:35:d2:96:4b: cc:5c:5b:89:42:40:2b:b6:b2:1e:2b:08:62:b9:cf: 45:33:d8:35:e3:c0:44:59:4a:13:3c:da:74:58:a4: 23:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8B:F7:F7:08:7A:C1:F6:B5:C7:71:20:63:11:11:93:0B:A7:5C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae550361-4e24-3096-bd85-05a6b5fe88d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.64/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:29:8d:58:a7:d0:f0:33:75:f9:e7:ad:7b:e6:6f:3b:83:d8: 8e:3f:3b:1b:c5:c5:05:6b:e0:03:87:89:1d:ef:f0:40:80:aa: a5:3e:7f:3a:08:61:e3:7e:b7:86:bb:37:0f:d7:b5:0b:5d:88: 72:3c:0f:9c:1a:e8:5a:26:0c:39:d1:2d:fa:00:33:29:5f:e5: 85:1d:f7:15:63:8d:b9:d7:e8:16:aa:f7:6d:26:aa:0a:ab:ff: ce:c3:cd:13:99:8e:04:05:30:63:28:a5:5d:ae:d1:04:25:06: 53:3c:42:a8:18:e4:06:31:a0:15:41:61:4e:86:3a:c8:c3:82: d2:40:b5:14:ed:d2:46:e8:ae:d2:8f:e3:ce:06:ed:f5:54:f1: 6e:d3:7b:69:ce:e0:37:79:df:2b:63:43:2b:ac:0e:96:20:c3: e6:3c:68:6a:2d:64:17:f0:4f:73:b8:a8:36:4c:6f:30:9f:7b: 91:94:e9:41:15:13:7f:94:25:34:e3:41:26:a0:1e:7b:d8:83: e3:3b:91:20:1d:6e:e9:8e:38:8c:f9:0e:fd:fa:5c:a9:24:16: 5b:58:38:a4:44:18:b7:16:ca:35:28:35:49:16:20:dc:c9:bc: a2:ec:0f:fa:3b:5a:15:3d:65:e4:17:ec:6a:61:cf:d6:e1:ed: 96:0b:d1:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFZWUqKUH2BCsjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MWQ4ODRlM2MtZDhjZC00OTQyLWJjZTAtY2I5OWU4MDI2YTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9sXn6yvIhL/Qx0ofGqxhcLxgagsQK3gNU7C 8RAmQELkmUZypCLsn9r9Rh4cd8W2V35y0DB7xeIm61nursdwHLHZQLth4en8l2pJ l6hVusE4+vm/RvndjmNK/pVxYbG7g024TWf4jICpIuCBHZP0tDLXh8iyjkzp4quY eO9/5K348Us3LLize04sthJet/Xm3bUZIKeMw5SaGsxDzXFGytTrA6/XM5capw9W cwuXJuii6b+GlSXIIT9a2CnwQpFK4sHH3oMBKlMbbe0sIAvjNolsqk2Ig9hJlL7S hzXSlkvMXFuJQkArtrIeKwhiuc9FM9g148BEWUoTPNp0WKQj1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGqL9/cIesH2tcdxIGMREZMLp1x5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWU1NTAzNjEtNGUyNC0z MDk2LWJkODUtMDVhNmI1ZmU4OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExHQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQClKY1Yp9DwM3X556175m87g9iOPzsbxcUFa+ADh4kd7/BAgKqlPn86 CGHjfreGuzcP17ULXYhyPA+cGuhaJgw50S36ADMpX+WFHfcVY4251+gWqvdtJqoK q//Ow80TmY4EBTBjKKVdrtEEJQZTPEKoGOQGMaAVQWFOhjrIw4LSQLUU7dJG6K7S j+POBu31VPFu03tpzuA3ed8rY0MrrA6WIMPmPGhqLWQX8E9zuKg2TG8wn3uRlOlB FRN/lCU040EmoB572IPjO5EgHW7pjjiM+Q79+lypJBZbWDikRBi3Fso1KDVJFiDc ybyi7A/6O1oVPWXkF+xqYc/W4e2WC9FF -----END CERTIFICATE-----Generated at Wed May 13 03:08:17 2026 by rpki-client