$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf65d1fe-e77b-3b53-a7bc-de08ebc7af7d.roa File: bf65d1fe-e77b-3b53-a7bc-de08ebc7af7d.roa (raw, json) Hash identifier: 2/v7LNFv5HvxL7Hs5+Lg+p8SIpuTnleLvR/NnmaewDA= Subject key identifier: C2:16:79:EA:78:BF:BE:58:9F:9D:B7:28:93:CF:FB:30:39:0B:69:D8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E885A38A079969B635DA73F20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf65d1fe-e77b-3b53-a7bc-de08ebc7af7d.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.88/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:38:a0:79:96:9b:63:5d:a7:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=db0d1ecd-9aac-4a29-836a-91af3e36e8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:26:4b:32:99:b8:71:12:10:6e:2f:09:50:d1: c1:7b:78:90:df:a1:76:c4:58:7b:3e:dc:78:89:77: 6d:94:03:fa:ee:c0:99:9c:90:4f:62:e3:01:44:8b: 41:db:ec:28:15:c3:4a:73:ab:75:78:42:1f:a1:8e: 0b:59:19:72:b3:1f:9a:2a:64:c2:4e:f4:19:67:08: 5f:b1:d2:c5:34:9d:60:d9:43:55:e5:77:e2:bd:11: 65:b0:ae:22:b9:74:73:9d:67:dd:fc:b0:16:72:00: 41:3c:e7:b5:1f:3a:fd:d8:ae:0c:29:af:36:7c:47: 34:99:ab:dd:61:7e:df:59:ee:5f:3f:7c:b3:69:85: 6e:18:02:0d:c2:40:72:d3:53:fe:f4:10:3e:b0:b6: a9:f5:21:15:c6:0d:be:99:b8:45:1d:bb:69:ee:88: 5f:9a:67:e4:6a:eb:41:da:c9:3b:93:34:0c:07:f8: 68:93:e5:91:c3:69:ba:ff:3b:cf:2f:28:a0:2e:23: 2b:ea:93:06:f6:a7:3d:79:96:b8:77:29:7c:f0:d4: 33:86:d5:84:3c:5e:82:97:d2:0e:4d:b6:d8:22:c2: 6e:4a:6c:34:ae:85:ad:a4:86:16:b6:da:54:79:5e: 09:3f:39:ec:25:dd:58:5e:28:9c:35:1b:b8:b4:5c: 97:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:16:79:EA:78:BF:BE:58:9F:9D:B7:28:93:CF:FB:30:39:0B:69:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf65d1fe-e77b-3b53-a7bc-de08ebc7af7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.88/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a9:fe:fd:44:4a:a1:39:1e:2d:4d:2f:59:d8:0e:7f:4e:6a: 3f:22:1a:f1:ff:3a:bd:d8:30:bd:3d:73:a3:9f:9c:e1:84:c4: 0a:45:0e:9c:2c:d5:16:b8:9a:50:18:12:cc:a6:e6:37:7c:fc: 46:0a:13:8b:84:c5:de:f4:72:fd:4c:0a:f8:b7:73:69:24:e8: 3d:aa:6b:27:5e:29:1e:b3:d0:97:0d:ba:18:83:d6:27:eb:64: fc:61:cb:2a:70:76:23:be:f5:03:f0:95:43:43:37:c7:dc:bb: 00:3f:44:73:ab:f3:d1:c8:7e:83:d5:80:84:52:18:06:84:fb: 8e:71:b1:be:9b:67:d4:24:d2:03:5d:1b:b2:91:c1:fe:8d:b9: 07:b7:86:77:e9:5f:e6:76:de:0d:88:d7:13:e9:4a:db:aa:e5: e8:ab:db:99:77:7a:05:3c:5c:ad:82:fe:30:0e:c0:31:6e:57: b6:65:b1:14:85:4d:3a:df:23:4b:31:8b:5e:30:a1:96:76:be: fe:35:a6:84:08:13:96:4d:b6:ef:5d:b3:07:a7:84:32:1f:b1: 75:d8:47:21:29:ad:a5:9c:c2:32:11:a0:dd:6d:76:f6:19:b2: 50:41:88:8a:64:be:ff:75:81:57:34:9c:e9:5a:c4:72:38:82: 1d:f2:f4:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6IWjigeZabY12nPyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk ZGIwZDFlY2QtOWFhYy00YTI5LTgzNmEtOTFhZjNlMzZlOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSZLMpm4cRIQbi8JUNHBe3iQ36F2xFh7Ptx4 iXdtlAP67sCZnJBPYuMBRItB2+woFcNKc6t1eEIfoY4LWRlysx+aKmTCTvQZZwhf sdLFNJ1g2UNV5XfivRFlsK4iuXRznWfd/LAWcgBBPOe1Hzr92K4MKa82fEc0mavd YX7fWe5fP3yzaYVuGAINwkBy01P+9BA+sLap9SEVxg2+mbhFHbtp7ohfmmfkautB 2sk7kzQMB/hok+WRw2m6/zvPLyigLiMr6pMG9qc9eZa4dyl88NQzhtWEPF6Cl9IO TbbYIsJuSmw0roWtpIYWttpUeV4JPznsJd1YXiicNRu4tFyXewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMIWeep4v75Yn523KJPP+zA5C2nYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmY2NWQxZmUtZTc3Yi0z YjUzLWE3YmMtZGUwOGViYzdhZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHWDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHqf79REqhOR4tTS9Z2A5/Tmo/Ihrx/zq92DC9PXOjn5zhhMQKRQ6c LNUWuJpQGBLMpuY3fPxGChOLhMXe9HL9TAr4t3NpJOg9qmsnXikes9CXDboYg9Yn 62T8YcsqcHYjvvUD8JVDQzfH3LsAP0Rzq/PRyH6D1YCEUhgGhPuOcbG+m2fUJNID XRuykcH+jbkHt4Z36V/mdt4NiNcT6UrbquXoq9uZd3oFPFytgv4wDsAxble2ZbEU hU063yNLMYteMKGWdr7+NaaECBOWTbbvXbMHp4QyH7F12EchKa2lnMIyEaDdbXb2 GbJQQYiKZL7/dYFXNJzpWsRyOIId8vTu -----END CERTIFICATE-----Generated at Thu Jul 23 22:50:40 2026 by rpki-client