$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1c0e4f-a88c-3e90-bc9c-fe82994a57d3.roa File: 1e1c0e4f-a88c-3e90-bc9c-fe82994a57d3.roa (raw, json) Hash identifier: ZfaVcMoeSz7kap0JA8jwGwhqSZTYq7ECpH95fvZkZFE= Subject key identifier: 22:FC:1D:03:DC:DD:01:5D:C0:1C:1F:D8:AB:7D:17:E0:7E:25:31:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC6A1B85EB9FB5C647CA350 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1c0e4f-a88c-3e90-bc9c-fe82994a57d3.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.96/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:a1:b8:5e:b9:fb:5c:64:7c:a3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=49b5180f-4425-4f0b-bff3-c849d7dbc65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:16:0d:7e:34:46:ac:b1:3e:c0:d9:19:f6: 07:54:47:25:d2:46:f6:d6:fb:a4:44:63:a2:07:38: 55:c5:ab:82:50:f4:ef:8d:0f:43:74:64:c1:51:e6: ea:f5:7a:36:9c:11:51:bf:55:69:87:c1:de:3d:b7: 5b:7e:0d:70:fb:ea:f5:30:96:ff:c6:3c:05:f6:80: c0:40:b4:8f:4f:56:a3:c5:22:02:31:de:d8:9c:23: 5d:9f:4d:3e:3d:68:8b:9d:c9:d6:1f:cb:dc:7f:72: 5b:08:de:b8:2b:43:23:ce:36:ee:1d:54:88:1f:2f: 78:08:f7:66:f6:c1:31:e7:c2:d3:6e:d1:58:4b:29: 4b:31:d4:41:c3:de:bd:74:90:27:1f:73:6e:d1:05: 40:3e:0e:8c:f1:fe:61:53:36:70:7a:a5:91:70:13: 6c:b8:2d:86:36:49:e9:5c:2d:af:9d:0f:72:d2:84: cd:14:05:17:03:14:42:2a:08:a0:50:ae:c5:c8:81: b4:e7:ef:9b:f4:35:c4:98:dc:07:79:55:2f:c5:9f: 21:4c:53:32:a3:42:22:3b:e5:a8:3b:15:b4:88:03: a8:9c:e7:23:4c:08:f7:ae:4b:9c:26:65:64:c0:11: 74:61:60:4f:a5:9e:f3:09:0a:8a:8d:c5:0f:a7:44: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FC:1D:03:DC:DD:01:5D:C0:1C:1F:D8:AB:7D:17:E0:7E:25:31:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1c0e4f-a88c-3e90-bc9c-fe82994a57d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.96/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:43:b3:77:28:d6:74:bb:40:99:22:cf:3d:f3:49:fd:4e:71: 39:34:f5:63:ae:24:a7:52:2f:02:8a:f4:a1:49:a2:e6:6b:63: 98:a3:2e:d2:b3:7e:88:af:6f:db:df:1b:a0:22:c5:ac:58:30: 90:60:fe:91:2c:d6:5d:de:f0:ea:3f:f1:bb:c2:76:21:bc:7d: 68:8d:e2:2b:67:7c:65:fb:e5:a0:36:1f:16:f1:14:af:6b:ed: 6e:ef:44:13:cf:17:82:30:66:ec:c7:57:ea:af:0b:63:27:5f: cb:f5:66:b1:bb:43:91:51:c1:d7:16:f6:b6:1a:4c:e3:d4:4d: af:78:7a:7b:f0:e0:cd:9b:36:c2:63:bb:27:db:6a:f6:33:b7: ec:7a:81:30:f8:9f:9b:53:eb:8d:13:29:6d:ac:00:2d:f3:2d: 64:4b:bd:e8:c3:0b:6e:86:a8:a1:4b:a0:05:aa:95:51:73:85: f8:94:92:e7:e8:95:bb:7a:c4:ac:1b:19:33:00:c2:4b:2d:6d: a3:59:26:6a:86:43:1f:8d:95:73:99:67:8d:77:c1:6b:58:eb: cf:2e:50:38:81:11:00:f6:6d:f2:72:a2:bd:72:1c:f5:ac:96: 67:3c:cc:06:e6:59:03:2e:68:8a:ce:0e:59:68:a7:24:ec:3d: b8:6d:d1:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/MxqG4Xrn7XGR8o1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk NDliNTE4MGYtNDQyNS00ZjBiLWJmZjMtYzg0OWQ3ZGJjNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVMWDX40RqyxPsDZGfYHVEcl0kb21vukRGOi BzhVxauCUPTvjQ9DdGTBUebq9Xo2nBFRv1Vph8HePbdbfg1w++r1MJb/xjwF9oDA QLSPT1ajxSICMd7YnCNdn00+PWiLncnWH8vcf3JbCN64K0MjzjbuHVSIHy94CPdm 9sEx58LTbtFYSylLMdRBw969dJAnH3Nu0QVAPg6M8f5hUzZweqWRcBNsuC2GNknp XC2vnQ9y0oTNFAUXAxRCKgigUK7FyIG05++b9DXEmNwHeVUvxZ8hTFMyo0IiO+Wo OxW0iAOonOcjTAj3rkucJmVkwBF0YWBPpZ7zCQqKjcUPp0SLjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCL8HQPc3QFdwBwf2Kt9F+B+JTEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWUxYzBlNGYtYTg4Yy0z ZTkwLWJjOWMtZmU4Mjk5NGE1N2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCWQ7N3KNZ0u0CZIs8980n9TnE5NPVjriSnUi8CivShSaLma2OYoy7S s36Ir2/b3xugIsWsWDCQYP6RLNZd3vDqP/G7wnYhvH1ojeIrZ3xl++WgNh8W8RSv a+1u70QTzxeCMGbsx1fqrwtjJ1/L9Waxu0ORUcHXFva2Gkzj1E2veHp78ODNmzbC Y7sn22r2M7fseoEw+J+bU+uNEyltrAAt8y1kS73owwtuhqihS6AFqpVRc4X4lJLn 6JW7esSsGxkzAMJLLW2jWSZqhkMfjZVzmWeNd8FrWOvPLlA4gREA9m3ycqK9chz1 rJZnPMwG5lkDLmiKzg5ZaKck7D24bdHl -----END CERTIFICATE-----Generated at Sun Nov 15 15:26:30 2026 by rpki-client