$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb3da23c-79c3-3090-9618-ce7cc98b2f63.roa File: eb3da23c-79c3-3090-9618-ce7cc98b2f63.roa (raw, json) Hash identifier: S27KCUNKMMr9HeCbQMXUvLEMrpRDELIsYBd5nfICf0c= Subject key identifier: EC:E9:36:95:10:FB:7B:57:C4:CB:CC:65:53:01:AD:8D:FB:6B:93:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC6A2B24E07BE7518D2C980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb3da23c-79c3-3090-9618-ce7cc98b2f63.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.128/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:a2:b2:4e:07:be:75:18:d2:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=ec6ccc0f-2854-4528-b9f0-f8ff66aab769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3b:b8:32:7f:41:f9:72:d7:6d:86:c4:13:1c: 6e:5c:29:02:a1:50:eb:45:03:d6:c5:7a:7f:e9:fb: f3:4d:64:ab:6d:8d:ed:3d:6d:cd:d4:95:b1:a8:6f: fb:93:f7:41:73:9c:2f:d3:05:14:b8:94:6f:98:20: c1:12:19:b0:e9:00:8c:78:a3:48:54:f3:14:a1:29: da:aa:31:43:6d:42:79:19:fe:e8:de:c5:d7:79:ec: 3a:7b:a6:95:3e:a0:6a:d4:cb:54:9d:84:3a:d8:d4: 15:35:94:ef:c1:59:66:b1:fa:21:55:25:55:e2:ad: be:f1:f1:9a:6d:cd:14:91:7c:d8:19:8f:c0:ec:14: e6:4f:49:57:ac:18:f8:20:c5:ad:ed:2e:4f:14:38: 84:4f:5b:1e:b1:b8:ce:24:5c:03:c8:19:df:82:3f: a3:71:9d:50:4b:00:70:e7:7e:92:53:77:45:81:95: 56:b3:92:a3:c8:23:43:db:3f:f5:cd:ea:b5:62:2f: a5:7a:b4:ca:5e:81:1f:bc:92:5d:a5:56:f8:68:0a: c1:43:18:56:dc:16:e0:ef:7e:b4:97:60:2a:ee:3c: 85:fd:fa:c6:61:28:41:35:f0:3b:ca:ba:17:44:32: 99:3b:31:03:a2:97:5d:36:9f:b0:b2:16:68:4f:c9: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E9:36:95:10:FB:7B:57:C4:CB:CC:65:53:01:AD:8D:FB:6B:93:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb3da23c-79c3-3090-9618-ce7cc98b2f63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.128/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:8c:e7:c0:fb:f9:14:48:d1:60:2e:e3:d2:f1:da:9a:3d:dc: 9c:92:83:a5:ca:50:ba:69:f0:9d:ed:39:68:22:40:14:bb:f7: d7:1e:aa:32:c0:9a:43:dd:9b:9b:c2:c6:c3:f0:9e:af:09:f7: 27:79:2c:13:0b:03:75:83:f9:34:07:dd:ef:79:2f:f9:b9:e1: e4:28:f7:b5:5b:50:e0:d7:d7:41:b3:96:ee:03:5c:d2:44:3e: 88:77:f2:92:f8:85:87:11:61:25:97:82:76:e9:5d:3e:16:c5: af:22:9d:06:20:76:59:f2:32:b3:ea:80:b7:18:32:c7:db:0c: 85:1d:82:27:e1:3f:cf:04:8f:03:4b:24:22:75:9a:01:42:e8: d7:cf:d2:38:4c:77:d6:0f:a0:14:19:a6:c3:06:30:70:5d:f1: f0:8a:87:63:74:ec:36:e2:76:c9:40:8b:dc:0f:ab:37:92:3f: 8d:15:b2:f9:c1:db:42:7b:c4:89:0d:6e:0b:78:97:06:aa:dc: 71:d0:4b:06:aa:41:21:23:70:44:bd:a2:21:68:49:8f:68:53: bd:1f:c2:66:c1:81:d7:c2:27:c6:05:5f:77:16:ff:19:18:d1: 77:8e:fb:0d:7b:0e:80:51:b8:78:86:db:46:a0:34:97:3f:08: cc:22:71:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/MxqKyTge+dRjSyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk ZWM2Y2NjMGYtMjg1NC00NTI4LWI5ZjAtZjhmZjY2YWFiNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ju4Mn9B+XLXbYbEExxuXCkCoVDrRQPWxXp/ 6fvzTWSrbY3tPW3N1JWxqG/7k/dBc5wv0wUUuJRvmCDBEhmw6QCMeKNIVPMUoSna qjFDbUJ5Gf7o3sXXeew6e6aVPqBq1MtUnYQ62NQVNZTvwVlmsfohVSVV4q2+8fGa bc0UkXzYGY/A7BTmT0lXrBj4IMWt7S5PFDiET1sesbjOJFwDyBnfgj+jcZ1QSwBw 536SU3dFgZVWs5KjyCND2z/1zeq1Yi+lerTKXoEfvJJdpVb4aArBQxhW3Bbg7360 l2Aq7jyF/frGYShBNfA7yroXRDKZOzEDopddNp+wshZoT8l87QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOzpNpUQ+3tXxMvMZVMBrY37a5MXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWIzZGEyM2MtNzljMy0z MDkwLTk2MTgtY2U3Y2M5OGIyZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWjOfA+/kUSNFgLuPS8dqaPdyckoOlylC6afCd7TloIkAUu/fXHqoy wJpD3ZubwsbD8J6vCfcneSwTCwN1g/k0B93veS/5ueHkKPe1W1Dg19dBs5buA1zS RD6Id/KS+IWHEWEll4J26V0+FsWvIp0GIHZZ8jKz6oC3GDLH2wyFHYIn4T/PBI8D SyQidZoBQujXz9I4THfWD6AUGabDBjBwXfHwiodjdOw24nbJQIvcD6s3kj+NFbL5 wdtCe8SJDW4LeJcGqtxx0EsGqkEhI3BEvaIhaEmPaFO9H8JmwYHXwifGBV93Fv8Z GNF3jvsNew6AUbh4httGoDSXPwjMInE5 -----END CERTIFICATE-----Generated at Sun Nov 15 10:23:02 2026 by rpki-client