$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1c0e4f-a88c-3e90-bc9c-fe82994a57d3.roa File: 1e1c0e4f-a88c-3e90-bc9c-fe82994a57d3.roa (raw, json) Hash identifier: kEWBlw+B8vN6FCd89W8VzoOYZJZ8BFzXg4OqkIeGGf8= Subject key identifier: 90:CB:33:37:9F:99:51:70:64:87:3E:B4:50:CA:20:05:E0:0E:FE:04 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F2ABD2EB8241741D569EE91C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1c0e4f-a88c-3e90-bc9c-fe82994a57d3.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.96/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2e:b8:24:17:41:d5:69:ee:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=05b45e81-1c81-47eb-9332-4ba7a10c5966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2b:dc:96:fa:57:2d:a7:54:6a:c9:b2:dc:3a: 51:12:69:c8:cf:e0:f7:5d:42:1b:87:91:dd:bd:6d: ce:70:0c:3b:0d:c1:5b:b1:dd:ae:30:f0:0c:d1:c3: c4:cf:63:79:70:c7:be:a5:ee:64:39:b3:b6:c5:45: e9:5c:f3:a8:87:32:c8:75:20:1a:8d:f6:e9:5e:3e: f8:ac:4a:d7:12:f5:59:28:f4:bc:22:2d:ee:8e:9a: e7:ba:45:b7:33:ea:4f:97:7c:70:ec:74:4d:e9:a8: f9:14:2b:e5:a5:5c:e6:40:21:ba:5b:c0:f6:f3:94: f5:40:a3:c4:63:7d:1b:32:67:a7:43:52:bb:6b:64: 96:d9:22:ad:88:32:a2:61:e5:cc:59:b3:3f:bb:3f: bd:d2:a0:30:8e:6a:b2:31:25:d0:0a:95:d6:5d:9e: 5b:41:18:f9:bf:f0:32:dc:f2:10:a0:a2:82:ea:31: da:5d:a7:cb:4a:5e:83:06:55:cb:23:f9:e3:bb:ad: 62:c8:78:84:d7:a3:65:69:78:c9:6d:69:19:d8:26: da:b5:f7:06:b9:03:f9:25:7d:22:96:e5:1e:34:76: 64:59:28:da:79:2c:49:10:5f:3f:fc:46:e1:78:fb: 4a:97:3d:8d:61:f1:d5:26:44:8a:c9:4d:b8:04:66: ec:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CB:33:37:9F:99:51:70:64:87:3E:B4:50:CA:20:05:E0:0E:FE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1c0e4f-a88c-3e90-bc9c-fe82994a57d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.96/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ec:76:9f:cf:a3:a8:35:71:7e:80:fd:0e:b6:2a:6d:ca:40: 95:bd:dd:a6:94:30:d4:1c:f5:45:f2:93:d8:b4:6b:70:6e:4d: 66:78:6b:df:f3:9f:cc:dd:6b:dd:fe:a0:a6:62:f2:a3:55:a8: e1:c9:d6:75:34:66:62:69:f5:ca:84:cf:de:2b:79:b5:39:ac: f0:48:3e:24:5b:43:71:3d:e0:54:7a:2b:77:a4:1e:0c:68:12: 56:cf:70:50:ed:d2:dc:f7:11:93:a9:d9:8e:4e:0f:cf:00:db: 6d:ac:89:bb:3f:ae:c2:be:4a:7c:45:fa:93:18:3e:cc:21:b8: 8f:19:20:57:7a:a8:be:e7:d2:fa:73:26:74:18:fd:9c:85:42: 95:b6:f9:27:63:3e:42:a3:74:d3:49:52:30:1a:72:63:43:52: ea:9f:8c:5d:c6:52:d8:e4:b9:62:08:b0:f0:f2:98:75:ec:4e: ba:c3:62:59:bf:b2:87:d3:9a:6b:5a:8c:42:b6:f5:74:84:e0: ef:0b:0f:66:97:75:6c:16:12:a0:52:95:a4:5d:88:88:f8:46: 54:a2:5a:14:c3:9f:d8:9a:94:18:c5:3e:1f:79:27:71:c8:a9: 8a:07:ad:32:21:0c:36:c6:b7:f2:ec:78:77:49:3c:38:d1:74: 89:d3:00:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvS64JBdB1WnukcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MDViNDVlODEtMWM4MS00N2ViLTkzMzItNGJhN2ExMGM1OTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSvclvpXLadUasmy3DpREmnIz+D3XUIbh5Hd vW3OcAw7DcFbsd2uMPAM0cPEz2N5cMe+pe5kObO2xUXpXPOohzLIdSAajfbpXj74 rErXEvVZKPS8Ii3ujprnukW3M+pPl3xw7HRN6aj5FCvlpVzmQCG6W8D285T1QKPE Y30bMmenQ1K7a2SW2SKtiDKiYeXMWbM/uz+90qAwjmqyMSXQCpXWXZ5bQRj5v/Ay 3PIQoKKC6jHaXafLSl6DBlXLI/nju61iyHiE16NlaXjJbWkZ2CbatfcGuQP5JX0i luUeNHZkWSjaeSxJEF8//EbhePtKlz2NYfHVJkSKyU24BGbsIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJDLMzefmVFwZIc+tFDKIAXgDv4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWUxYzBlNGYtYTg4Yy0z ZTkwLWJjOWMtZmU4Mjk5NGE1N2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCi7Hafz6OoNXF+gP0OtiptykCVvd2mlDDUHPVF8pPYtGtwbk1meGvf 85/M3Wvd/qCmYvKjVajhydZ1NGZiafXKhM/eK3m1OazwSD4kW0NxPeBUeit3pB4M aBJWz3BQ7dLc9xGTqdmOTg/PANttrIm7P67Cvkp8RfqTGD7MIbiPGSBXeqi+59L6 cyZ0GP2chUKVtvknYz5Co3TTSVIwGnJjQ1Lqn4xdxlLY5LliCLDw8ph17E66w2JZ v7KH05prWoxCtvV0hODvCw9ml3VsFhKgUpWkXYiI+EZUoloUw5/YmpQYxT4feSdx yKmKB60yIQw2xrfy7Hh3STw40XSJ0wCj -----END CERTIFICATE-----Generated at Tue Sep 22 16:01:55 2026 by rpki-client