$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd732243-c576-3d0b-85a0-f97a851914be.roa File: cd732243-c576-3d0b-85a0-f97a851914be.roa (raw, json) Hash identifier: at0RHdzYx+HxWddsQQvP/9MRj+/wyk8N5EfKUJPOFvY= Subject key identifier: 4D:E3:77:13:99:52:D3:AC:9E:FE:76:D9:88:6D:A7:0F:F4:A0:0B:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DA815957CCCDD0636C7CF2380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd732243-c576-3d0b-85a0-f97a851914be.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 208.76.71.144/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:95:7c:cc:dd:06:36:c7:cf:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=3b0909ce-08d1-4aef-adad-93d5e1966211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1e:7c:97:5f:a9:a3:b6:b6:2a:b2:07:ac:9e: e1:e2:08:8e:0a:94:30:56:a5:6b:e5:fc:72:70:d7: 2b:cd:8c:10:57:2a:49:f7:fe:56:50:63:63:9c:9c: bb:73:f3:ac:96:51:c1:f0:c5:ab:2d:15:ed:d8:b1: df:95:58:f1:3c:5c:cd:1f:e1:f6:64:d0:73:d7:70: 3e:ba:33:0d:31:df:73:de:5a:d3:f9:f1:db:b1:f3: b2:4c:2e:f7:cf:2f:77:86:33:56:9a:62:7b:84:03: 33:57:a5:6c:40:54:ec:ae:c0:21:46:ea:89:2e:09: ee:08:cb:67:40:25:8f:8f:94:c1:fe:86:2b:fc:14: ce:e3:40:df:b8:bd:66:43:60:85:5b:7a:20:f3:4a: 7c:53:44:5d:65:e9:ec:b7:16:54:e0:67:9e:20:19: 9e:3d:0c:95:a6:38:22:76:46:ae:ac:f7:72:54:7e: 4f:2f:cb:d2:f3:6c:a1:91:14:0d:44:e7:5d:f5:a3: 44:98:9c:78:a4:00:1f:88:6a:b8:9d:30:d8:9a:5b: 80:73:62:fa:99:a3:9d:a0:75:dd:e6:52:15:fd:2b: 7e:91:75:a6:27:42:11:94:33:1f:75:44:7e:7b:be: 67:ca:43:3d:db:b7:61:20:0d:eb:ad:6e:eb:e4:6e: 07:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E3:77:13:99:52:D3:AC:9E:FE:76:D9:88:6D:A7:0F:F4:A0:0B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd732243-c576-3d0b-85a0-f97a851914be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.144/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3e:f6:58:6a:24:f2:04:11:e5:96:e5:58:8d:b5:54:c6:40: c7:5d:38:4f:87:f1:c9:04:47:47:d6:db:95:d9:20:a8:fc:13: cc:04:6b:e0:53:08:54:24:c8:09:f2:51:71:d1:38:04:f8:be: 49:26:78:c9:cd:22:8c:f8:ad:b8:a8:ce:14:a4:db:db:e9:9b: c9:2c:1e:9c:b0:c2:8c:27:62:f5:1a:fe:00:a0:7a:26:56:d3: be:2b:f9:9a:f4:69:cc:25:ce:39:2e:3a:c3:df:05:b7:b0:62: b8:09:4c:a4:32:ec:b0:08:54:44:7f:cd:dc:1b:ce:ad:e5:ef: 48:2f:23:1e:45:94:50:45:c3:aa:99:35:ef:f3:d4:37:c9:20: 3a:ee:84:3e:b4:03:ad:01:9c:e7:3d:5f:47:b6:f9:53:e7:91: f3:ca:fc:7f:ff:1e:14:cd:d8:df:c8:2b:73:85:1c:74:0c:21: 7b:79:6a:df:bc:c3:a5:61:fa:11:60:3f:a2:01:97:2d:3e:5f: b0:3e:66:0f:7d:9f:b5:b7:42:22:44:c7:2e:11:b8:16:78:c2: d6:95:93:7b:ed:83:de:2f:8e:7d:ac:f1:6f:18:81:c9:9f:9c: 41:31:6b:e4:8f:0a:0a:fd:ee:99:05:e9:14:a5:d2:85:6a:3a: a8:b3:1e:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFZV8zN0GNsfPI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk M2IwOTA5Y2UtMDhkMS00YWVmLWFkYWQtOTNkNWUxOTY2MjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR58l1+po7a2KrIHrJ7h4giOCpQwVqVr5fxy cNcrzYwQVypJ9/5WUGNjnJy7c/OsllHB8MWrLRXt2LHflVjxPFzNH+H2ZNBz13A+ ujMNMd9z3lrT+fHbsfOyTC73zy93hjNWmmJ7hAMzV6VsQFTsrsAhRuqJLgnuCMtn QCWPj5TB/oYr/BTO40DfuL1mQ2CFW3og80p8U0RdZenstxZU4GeeIBmePQyVpjgi dkaurPdyVH5PL8vS82yhkRQNROdd9aNEmJx4pAAfiGq4nTDYmluAc2L6maOdoHXd 5lIV/St+kXWmJ0IRlDMfdUR+e75nykM927dhIA3rrW7r5G4H3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE3jdxOZUtOsnv522Yhtpw/0oAtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Q3MzIyNDMtYzU3Ni0z ZDBiLTg1YTAtZjk3YTg1MTkxNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExHkDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9PvZYaiTyBBHlluVYjbVUxkDHXThPh/HJBEdH1tuV2SCo/BPMBGvg UwhUJMgJ8lFx0TgE+L5JJnjJzSKM+K24qM4UpNvb6ZvJLB6csMKMJ2L1Gv4AoHom VtO+K/ma9GnMJc45LjrD3wW3sGK4CUykMuywCFREf83cG86t5e9ILyMeRZRQRcOq mTXv89Q3ySA67oQ+tAOtAZznPV9HtvlT55Hzyvx//x4UzdjfyCtzhRx0DCF7eWrf vMOlYfoRYD+iAZctPl+wPmYPfZ+1t0IiRMcuEbgWeMLWlZN77YPeL459rPFvGIHJ n5xBMWvkjwoK/e6ZBekUpdKFajqosx5K -----END CERTIFICATE-----Generated at Wed May 13 05:11:05 2026 by rpki-client