$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf65d1fe-e77b-3b53-a7bc-de08ebc7af7d.roa File: bf65d1fe-e77b-3b53-a7bc-de08ebc7af7d.roa (raw, json) Hash identifier: cYiw1+7yA0EKV8TAA1+D+j99tztnm9G8bggc184ABAU= Subject key identifier: 5C:A9:DC:CF:B6:C5:DA:77:06:3F:69:EE:97:9F:0C:BD:8C:1C:92:B6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DA81593BF2C9531F9EEAF95C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf65d1fe-e77b-3b53-a7bc-de08ebc7af7d.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 208.76.71.88/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:93:bf:2c:95:31:f9:ee:af:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=6fae161f-dbbd-4d9b-905f-e67b2b15b58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ee:61:b5:06:30:8b:1b:b6:a4:f9:5e:4b:39: ef:54:6c:36:ac:a7:f5:9d:50:3e:3f:4a:76:fc:ce: e3:42:7e:81:51:e3:53:d5:c1:73:07:39:62:01:39: 62:c0:75:41:31:b5:59:11:1a:6f:ca:67:14:27:15: 40:da:8b:9b:8a:29:00:66:9a:89:33:78:54:7d:e6: bd:ef:f9:ce:fa:55:37:a0:49:ca:b1:f4:d1:06:7e: 21:eb:14:f3:31:d8:fb:a8:cd:3e:06:18:7d:0d:35: 7c:80:31:12:51:71:aa:3c:ab:19:75:2c:70:f3:27: 47:09:2b:e1:d9:b9:ce:93:b0:c5:59:9e:f9:6f:0a: d7:d1:b9:d2:3b:a2:88:dd:d5:0a:50:8c:fb:a9:44: c0:54:89:92:18:19:05:c5:33:ba:8d:06:de:e3:71: 66:25:f6:9a:0b:84:10:e4:b2:b7:c5:38:39:11:bf: 67:87:cd:d3:47:e0:f3:1f:63:35:cf:6f:d0:41:69: ba:11:e8:36:6f:bf:db:bb:fe:66:67:b6:f5:a6:15: b7:65:4f:a1:40:d8:a9:b6:51:5e:5a:1b:b2:77:e2: fb:9e:98:e6:2f:ba:ae:de:ab:71:ad:f0:24:2e:d3: f3:04:09:5f:5c:0e:61:60:24:28:2b:a3:c9:97:0b: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A9:DC:CF:B6:C5:DA:77:06:3F:69:EE:97:9F:0C:BD:8C:1C:92:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf65d1fe-e77b-3b53-a7bc-de08ebc7af7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.88/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:57:31:0e:24:96:97:34:70:ca:e0:44:98:63:62:13:67:05: 9d:8d:4d:92:f8:77:a6:c6:9c:19:55:b2:e8:64:cd:7f:20:ac: ff:5a:c9:0e:a9:66:ec:e8:08:1c:ec:e7:39:78:ca:e3:ae:d3: e2:5d:99:96:85:6c:95:eb:99:31:c6:2b:6e:6d:9e:ca:8e:98: 51:21:6a:d9:ea:b4:5a:01:7e:37:ad:e5:1b:ea:2f:c1:09:bc: e6:16:e4:90:a9:6d:7d:f2:4e:c0:10:8c:bd:2a:fa:b4:0b:39: 6d:11:c9:a6:31:83:f2:e3:72:20:61:6d:31:5a:73:72:96:06: 5f:b5:31:d3:7f:07:2a:d7:35:45:35:6b:e8:e9:32:32:20:9b: 37:a4:d6:34:2b:04:c3:0b:00:5f:00:a7:01:97:30:fd:bd:73: 79:b0:c2:8a:8f:ce:1c:c0:24:cb:c5:46:74:8f:50:37:90:1b: 22:61:07:51:dc:01:36:32:30:ef:fe:12:08:e8:d7:0b:44:be: b1:0e:cd:83:9a:b3:1a:dc:25:07:5e:d1:a2:32:c9:64:2b:b5: a3:d5:23:13:aa:1d:18:31:f4:34:c6:17:34:e5:fb:47:84:b6: ce:0a:c8:c2:28:25:2a:ce:3b:f1:8a:65:8c:af:e9:79:51:35: b6:cb:d0:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFZO/LJUx+e6vlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NmZhZTE2MWYtZGJiZC00ZDliLTkwNWYtZTY3YjJiMTViNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO5htQYwixu2pPleSznvVGw2rKf1nVA+P0p2 /M7jQn6BUeNT1cFzBzliATliwHVBMbVZERpvymcUJxVA2oubiikAZpqJM3hUfea9 7/nO+lU3oEnKsfTRBn4h6xTzMdj7qM0+Bhh9DTV8gDESUXGqPKsZdSxw8ydHCSvh 2bnOk7DFWZ75bwrX0bnSO6KI3dUKUIz7qUTAVImSGBkFxTO6jQbe43FmJfaaC4QQ 5LK3xTg5Eb9nh83TR+DzH2M1z2/QQWm6Eeg2b7/bu/5mZ7b1phW3ZU+hQNiptlFe Whuyd+L7npjmL7qu3qtxrfAkLtPzBAlfXA5hYCQoK6PJlwvIdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFyp3M+2xdp3Bj9p7pefDL2MHJK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmY2NWQxZmUtZTc3Yi0z YjUzLWE3YmMtZGUwOGViYzdhZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHWDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCuVzEOJJaXNHDK4ESYY2ITZwWdjU2S+HemxpwZVbLoZM1/IKz/WskO qWbs6Agc7Oc5eMrjrtPiXZmWhWyV65kxxitubZ7KjphRIWrZ6rRaAX43reUb6i/B CbzmFuSQqW198k7AEIy9Kvq0CzltEcmmMYPy43IgYW0xWnNylgZftTHTfwcq1zVF NWvo6TIyIJs3pNY0KwTDCwBfAKcBlzD9vXN5sMKKj84cwCTLxUZ0j1A3kBsiYQdR 3AE2MjDv/hII6NcLRL6xDs2DmrMa3CUHXtGiMslkK7Wj1SMTqh0YMfQ0xhc05ftH hLbOCsjCKCUqzjvximWMr+l5UTW2y9Cq -----END CERTIFICATE-----Generated at Wed May 13 02:29:59 2026 by rpki-client