$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aed4a863-c00d-3e4c-9890-937bf129bb9e.roa File: aed4a863-c00d-3e4c-9890-937bf129bb9e.roa (raw, json) Hash identifier: x6ps47UqT6lgtvn1MCP0JXHSC25gpsbvAB0YgbKwE9I= Subject key identifier: 1A:EF:46:24:A5:94:1C:00:AA:AF:BA:46:EA:99:80:B6:C1:78:AD:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DA815948DB2398FA6338FCA9C Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aed4a863-c00d-3e4c-9890-937bf129bb9e.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 208.76.71.192/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:94:8d:b2:39:8f:a6:33:8f:ca:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=b8ed963a-480f-425f-9011-315bc65fc005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:d9:25:5e:b3:96:81:7e:34:b1:ef:5f:9c: dc:af:90:1e:8f:ed:6e:98:25:84:e1:f3:e3:ea:18: 95:aa:75:e8:de:6f:41:37:92:76:59:06:1d:c9:7a: 24:a8:4c:e4:8a:01:8e:81:be:b0:cb:38:24:3d:c4: dc:07:f6:2e:bb:a3:84:97:32:cb:d7:72:2e:7d:ca: 89:ee:05:1e:5c:1f:ae:ef:76:1a:e0:4d:c6:10:8d: 99:ea:07:ef:f9:bd:3e:a2:4d:15:1c:29:8b:ae:b3: 08:9c:7e:31:82:b3:3f:d0:35:66:bd:62:d2:d9:0c: f1:90:6b:47:75:fc:42:37:92:c6:37:0f:e6:8f:5a: 05:35:8f:44:80:88:c2:f6:10:1c:55:2c:fd:0c:0a: fc:13:ec:92:13:71:bb:96:47:4a:75:b2:65:fc:6b: 78:40:b8:72:73:40:72:16:b6:d0:1b:44:d6:ad:c5: 2c:48:3e:f3:37:b0:d4:3c:f1:1b:03:05:e0:80:59: 7b:36:02:b9:98:82:cf:de:71:c6:13:84:ce:57:48: 65:e6:91:ca:78:9d:cb:cd:9c:38:e4:96:75:91:0c: 54:4c:41:c8:35:42:6d:e2:d8:4a:6c:e7:6f:76:a0: 54:51:94:28:f9:31:70:c2:71:83:0c:db:b4:cf:9b: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:46:24:A5:94:1C:00:AA:AF:BA:46:EA:99:80:B6:C1:78:AD:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aed4a863-c00d-3e4c-9890-937bf129bb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.192/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:92:20:a1:93:93:40:86:58:ab:45:e8:ad:65:69:48:8b:b7: 66:85:63:d7:6f:36:4d:cb:43:8d:8d:80:81:be:57:da:77:ef: 3d:32:5b:53:cc:52:2b:e8:a9:7f:78:2f:de:8a:a2:68:bb:57: e7:36:70:26:b4:ce:bc:74:14:92:77:38:9a:1c:65:77:50:82: a9:2a:fc:7a:22:39:ad:1b:ea:9c:cb:4f:66:e7:6e:e5:d9:10: c3:6e:59:49:bb:05:79:55:b4:1c:04:89:fd:15:c4:a5:64:29: 06:b5:42:ee:fe:18:ff:ff:28:91:fa:d7:e7:2e:16:8e:8b:ee: 7c:d8:1f:6f:e6:71:4b:c0:2a:74:53:1e:0b:cc:0a:28:dd:df: d7:32:e6:fe:39:28:08:53:9c:e1:61:0d:5a:77:64:85:ec:87: c4:29:46:57:26:3f:15:e5:91:96:32:cb:44:b7:fd:19:37:29: 25:00:a3:99:89:fd:e8:05:e6:8c:16:6c:f2:01:4f:69:50:6c: b8:02:0d:e2:3e:22:c0:da:a9:a4:93:58:5e:2d:10:43:89:8f: 44:c5:81:4a:be:dd:53:af:30:8d:fc:33:76:a7:c4:d9:1c:10: 9b:a1:ea:49:c8:11:af:93:fe:b3:26:41:36:9c:cc:2e:31:04: 46:a0:03:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFZSNsjmPpjOPypwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk YjhlZDk2M2EtNDgwZi00MjVmLTkwMTEtMzE1YmM2NWZjMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1PZJV6zloF+NLHvX5zcr5Aej+1umCWE4fPj 6hiVqnXo3m9BN5J2WQYdyXokqEzkigGOgb6wyzgkPcTcB/Yuu6OElzLL13IufcqJ 7gUeXB+u73Ya4E3GEI2Z6gfv+b0+ok0VHCmLrrMInH4xgrM/0DVmvWLS2QzxkGtH dfxCN5LGNw/mj1oFNY9EgIjC9hAcVSz9DAr8E+ySE3G7lkdKdbJl/Gt4QLhyc0By FrbQG0TWrcUsSD7zN7DUPPEbAwXggFl7NgK5mILP3nHGE4TOV0hl5pHKeJ3LzZw4 5JZ1kQxUTEHINUJt4thKbOdvdqBUUZQo+TFwwnGDDNu0z5t1rQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBrvRiSllBwAqq+6RuqZgLbBeK14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWVkNGE4NjMtYzAwZC0z ZTRjLTk4OTAtOTM3YmYxMjliYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASkiChk5NAhlirReitZWlIi7dmhWPXbzZNy0ONjYCBvlfad+89MltT zFIr6Kl/eC/eiqJou1fnNnAmtM68dBSSdziaHGV3UIKpKvx6IjmtG+qcy09m527l 2RDDbllJuwV5VbQcBIn9FcSlZCkGtULu/hj//yiR+tfnLhaOi+582B9v5nFLwCp0 Ux4LzAoo3d/XMub+OSgIU5zhYQ1ad2SF7IfEKUZXJj8V5ZGWMstEt/0ZNyklAKOZ if3oBeaMFmzyAU9pUGy4Ag3iPiLA2qmkk1heLRBDiY9ExYFKvt1TrzCN/DN2p8TZ HBCboepJyBGvk/6zJkE2nMwuMQRGoAOF -----END CERTIFICATE-----Generated at Wed May 13 01:43:01 2026 by rpki-client