$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce16e79d-6d3f-3ea8-a3cf-c9d25da90e4c.roa File: ce16e79d-6d3f-3ea8-a3cf-c9d25da90e4c.roa (raw, json) Hash identifier: 27/SGLznvCOFNmJs7BIrcjd5dMW5iadfdEIDfua4bKU= Subject key identifier: 4B:40:CC:B2:33:87:E1:E0:57:B1:56:BF:18:34:FB:5A:7D:46:1C:AF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DA81595294F170C7E5F926DC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce16e79d-6d3f-3ea8-a3cf-c9d25da90e4c.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 396982 IP address blocks: 208.76.71.152/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:95:29:4f:17:0c:7e:5f:92:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=08f05004-725d-4abb-a66e-a79267b3b5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:eb:3a:ee:af:6d:80:6c:8c:bc:d8:9d:42:5d: fb:d7:b8:7c:0d:db:c7:6f:74:3c:c9:89:49:3b:f4: f4:84:03:d2:ab:de:47:0e:12:91:e1:0e:d0:16:b3: 2e:b0:f4:c2:f0:31:2d:00:0d:32:ad:f5:c7:1d:4f: cd:2a:cc:21:4c:a0:1f:2a:da:ab:fc:47:e2:ec:14: a9:67:dc:6c:7e:75:1e:b9:37:d3:9e:8d:1f:79:1e: 0b:47:0b:ef:c1:c1:96:9a:1c:02:c1:a8:ab:15:6e: 25:2f:68:1d:ac:c8:c6:50:d0:ba:3c:4c:62:23:f8: d7:5a:a7:99:3c:e8:ca:10:6e:29:ab:12:78:77:0a: 19:cb:2c:a9:b6:fc:a5:50:5f:23:ce:10:20:ab:e8: 0e:2e:6b:44:21:5a:7b:50:ba:c8:f1:d6:78:f6:15: 1a:ca:27:87:0b:52:77:01:d2:a9:51:82:d8:6f:23: 3c:10:70:d5:11:3d:1e:9e:d5:09:a1:92:ca:48:15: 89:e4:ce:98:e9:35:a1:e3:0c:a3:a4:61:90:51:2e: 36:32:24:00:11:6f:ed:bf:df:8c:af:b8:63:3c:95: 6f:1b:2a:45:17:59:b8:3c:27:e1:2a:aa:c2:d0:17: 82:4c:85:3a:0e:d0:65:73:57:be:f4:d1:23:6b:f6: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:40:CC:B2:33:87:E1:E0:57:B1:56:BF:18:34:FB:5A:7D:46:1C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce16e79d-6d3f-3ea8-a3cf-c9d25da90e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.152/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:51:b6:d8:79:94:80:c9:32:95:3b:df:20:df:dc:d1:46:db: 3c:77:f6:b0:8c:87:ec:16:52:e9:a4:5b:21:35:35:8f:d5:07: 3a:b4:bb:05:48:87:26:1d:09:12:ca:ee:ec:1c:5d:77:0a:ff: af:b7:7a:8a:53:e8:cc:90:b6:26:8f:e8:40:72:e3:ad:0f:91: 50:6f:0e:3c:4b:83:3b:df:90:9e:ec:6d:88:e5:8a:a4:35:ca: 06:e0:d0:c4:d2:15:83:d4:e3:8a:28:84:77:83:1c:8d:f1:cb: 07:ca:2a:36:e9:b4:cd:6c:d8:91:3b:5e:d6:35:49:89:b5:05: 31:52:55:70:1b:b1:69:b2:e8:3b:2b:03:fe:3a:86:d7:52:4c: e2:3c:56:ac:10:13:17:db:06:5e:39:d6:fa:28:2a:16:4b:45: bc:cf:1f:4b:3f:0e:79:e6:ee:3e:9d:f2:36:d1:20:c3:c3:2c: 7d:72:6f:be:7e:23:83:8d:6e:d8:da:31:32:5b:56:54:5d:44: 17:2b:a8:d2:61:68:5b:cc:67:cc:e2:9f:29:f5:0b:30:5c:ef: ac:85:bf:d4:30:f6:31:b4:1b:dc:f4:d9:9e:5b:66:97:66:59: a9:96:25:73:36:60:2a:6c:ef:79:09:f5:53:8c:fb:b6:f2:64: 3b:fa:21:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFZUpTxcMfl+SbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MDhmMDUwMDQtNzI1ZC00YWJiLWE2NmUtYTc5MjY3YjNiNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAies67q9tgGyMvNidQl3717h8DdvHb3Q8yYlJ O/T0hAPSq95HDhKR4Q7QFrMusPTC8DEtAA0yrfXHHU/NKswhTKAfKtqr/Efi7BSp Z9xsfnUeuTfTno0feR4LRwvvwcGWmhwCwairFW4lL2gdrMjGUNC6PExiI/jXWqeZ POjKEG4pqxJ4dwoZyyyptvylUF8jzhAgq+gOLmtEIVp7ULrI8dZ49hUayieHC1J3 AdKpUYLYbyM8EHDVET0entUJoZLKSBWJ5M6Y6TWh4wyjpGGQUS42MiQAEW/tv9+M r7hjPJVvGypFF1m4PCfhKqrC0BeCTIU6DtBlc1e+9NEja/YcnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEtAzLIzh+HgV7FWvxg0+1p9RhyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2UxNmU3OWQtNmQzZi0z ZWE4LWEzY2YtYzlkMjVkYTkwZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHmDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6UbbYeZSAyTKVO98g39zRRts8d/awjIfsFlLppFshNTWP1Qc6tLsF SIcmHQkSyu7sHF13Cv+vt3qKU+jMkLYmj+hAcuOtD5FQbw48S4M735Ce7G2I5Yqk NcoG4NDE0hWD1OOKKIR3gxyN8csHyio26bTNbNiRO17WNUmJtQUxUlVwG7Fpsug7 KwP+OobXUkziPFasEBMX2wZeOdb6KCoWS0W8zx9LPw555u4+nfI20SDDwyx9cm++ fiODjW7Y2jEyW1ZUXUQXK6jSYWhbzGfM4p8p9QswXO+shb/UMPYxtBvc9NmeW2aX ZlmpliVzNmAqbO95CfVTjPu28mQ7+iFi -----END CERTIFICATE-----Generated at Wed May 13 02:29:51 2026 by rpki-client