$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/18a3f55c-077a-35b5-98b5-8d870c220038.roa File: 18a3f55c-077a-35b5-98b5-8d870c220038.roa (raw, json) Hash identifier: 7pqXV0XpS1q1a7UmVuGIJPrW/yXstqsZ7wAGctb4GDY= Subject key identifier: FF:67:42:83:70:21:65:21:61:91:65:1D:2B:C0:91:75:D6:ED:D1:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CC777405A21BCF89FC0792C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/18a3f55c-077a-35b5-98b5-8d870c220038.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 396982 IP address blocks: 208.76.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:40:5a:21:bc:f8:9f:c0:79:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=ded4cac2-a417-4d69-9dbd-4aad18b98611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f8:07:c9:40:0e:17:31:ac:8c:69:ea:9a:45: 26:20:61:c8:69:86:6f:ef:6c:be:90:8b:0a:ba:a3: d3:a4:7a:ce:36:a8:30:c5:07:21:6d:52:68:e9:54: 59:a4:39:cc:43:73:9a:6c:99:b0:9e:5e:4b:d6:51: cc:66:da:32:91:d4:6e:8e:06:1e:24:41:6e:82:6f: 08:9b:5b:14:f2:83:32:ad:be:9a:5d:57:9b:61:f6: 9d:69:38:34:61:ee:3f:0a:34:68:12:31:27:cd:de: db:a2:90:45:4b:82:57:0c:45:63:8a:a3:b3:34:5e: 70:cb:20:d8:64:2b:24:d6:00:13:27:a4:ba:fc:de: 4d:f7:18:d5:14:4b:f9:88:77:c2:72:f6:be:e1:ad: ee:7c:55:46:24:9c:3e:aa:ff:18:d0:f3:c4:4e:e1: 4e:18:e2:63:72:ba:22:f1:af:ef:10:13:53:98:52: a6:a6:ae:10:dc:f9:80:4f:cb:24:77:b8:c0:a6:4f: 66:69:f9:5c:a4:6d:10:f0:71:df:53:67:6b:30:45: d3:14:72:b1:d7:65:1c:f0:ca:5d:b5:51:e6:4e:9b: ad:72:8c:34:c5:02:76:43:84:5e:94:0a:2a:46:df: 37:1e:84:0a:70:30:a6:84:81:0b:6e:e9:bc:5a:5a: 8d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:67:42:83:70:21:65:21:61:91:65:1D:2B:C0:91:75:D6:ED:D1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/18a3f55c-077a-35b5-98b5-8d870c220038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:65:59:3a:c1:10:15:0b:1c:9a:37:18:2e:97:ad:f4:80:28: 3a:a3:b2:1e:56:0f:cd:92:f0:b9:cc:ce:67:01:7e:78:2a:26: 85:ec:4e:6b:ad:82:a5:5b:f9:29:e3:84:2b:45:a4:95:92:e1: 19:12:c9:88:ce:8d:f0:d1:34:fc:8f:e6:c9:50:23:53:81:1f: 89:8f:6e:68:69:2e:54:37:96:08:d8:e3:55:80:93:9a:5f:21: ab:67:18:ae:70:8a:96:89:51:28:2a:24:cd:21:cd:d0:16:6b: a4:e4:37:29:90:d9:2c:0f:63:2d:b5:b8:21:c9:a0:3c:19:79: 8f:88:fa:a9:22:48:94:61:74:27:09:07:de:15:d8:00:44:3d: cc:80:27:87:a8:c5:ce:21:8b:fb:99:e6:65:3c:b2:d9:33:1b: b6:0a:a6:cb:51:bc:ac:39:e2:ab:e1:d0:f8:db:d8:e5:41:fa: 3c:b8:63:64:b2:21:0a:c8:a3:8b:7e:e6:45:e5:89:4b:63:dd: 95:bd:ef:09:cb:c1:8a:2a:86:94:11:64:ad:b5:ab:43:06:71: 5c:03:3a:b7:83:19:fc:64:c5:da:ae:eb:d0:58:b8:fb:d9:a4: 80:03:42:bb:44:6b:75:74:c6:82:1b:b1:e9:1a:fc:0e:5f:b9: dd:b5:79:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0BaIbz4n8B5LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk ZGVkNGNhYzItYTQxNy00ZDY5LTlkYmQtNGFhZDE4Yjk4NjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPgHyUAOFzGsjGnqmkUmIGHIaYZv72y+kIsK uqPTpHrONqgwxQchbVJo6VRZpDnMQ3OabJmwnl5L1lHMZtoykdRujgYeJEFugm8I m1sU8oMyrb6aXVebYfadaTg0Ye4/CjRoEjEnzd7bopBFS4JXDEVjiqOzNF5wyyDY ZCsk1gATJ6S6/N5N9xjVFEv5iHfCcva+4a3ufFVGJJw+qv8Y0PPETuFOGOJjcroi 8a/vEBNTmFKmpq4Q3PmAT8skd7jApk9maflcpG0Q8HHfU2drMEXTFHKx12Uc8Mpd tVHmTputcow0xQJ2Q4RelAoqRt83HoQKcDCmhIELbum8WlqNIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9nQoNwIWUhYZFlHSvAkXXW7dFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMThhM2Y1NWMtMDc3YS0z NWI1LTk4YjUtOGQ4NzBjMjIwMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1lWTrBEBULHJo3GC6XrfSAKDqjsh5WD82S8LnMzmcBfngqJoXsTmut gqVb+SnjhCtFpJWS4RkSyYjOjfDRNPyP5slQI1OBH4mPbmhpLlQ3lgjY41WAk5pf IatnGK5wipaJUSgqJM0hzdAWa6TkNymQ2SwPYy21uCHJoDwZeY+I+qkiSJRhdCcJ B94V2ABEPcyAJ4eoxc4hi/uZ5mU8stkzG7YKpstRvKw54qvh0Pjb2OVB+jy4Y2Sy IQrIo4t+5kXliUtj3ZW97wnLwYoqhpQRZK21q0MGcVwDOreDGfxkxdqu69BYuPvZ pIADQrtEa3V0xoIbseka/A5fud21ecQ= -----END CERTIFICATE-----Generated at Mon Mar 2 04:58:00 2026 by rpki-client