$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2bd10850-e1d5-371f-b451-00c9b8348b3d.roa File: 2bd10850-e1d5-371f-b451-00c9b8348b3d.roa (raw, json) Hash identifier: fDyIexRZJXuEwxJYnGK6DgWiEGCPFdwEnj768xwHQjU= Subject key identifier: 2D:4B:B7:37:15:67:FB:C1:05:F7:8A:69:03:04:B7:DD:73:FB:B0:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC6A14EAD926A5C7823E280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2bd10850-e1d5-371f-b451-00c9b8348b3d.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.224/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:a1:4e:ad:92:6a:5c:78:23:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=5264a903-9674-49cd-b6b6-2945e83e05f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2a:6e:4e:15:7d:fe:9a:a0:54:9f:1f:a5:4d: 9e:49:76:63:f2:9d:c0:d9:bb:90:2f:e3:65:d2:3d: 02:ea:3c:8a:0c:12:d7:89:06:40:ce:a4:df:18:b4: ee:60:25:d8:f6:72:48:7f:c0:e3:ef:45:65:62:c5: 8a:ed:ef:4e:57:1c:c7:17:24:ef:fc:37:41:ad:08: 3d:46:6d:d7:76:01:75:ff:eb:7f:e4:95:6b:ae:d4: 4d:1b:e5:5c:b1:d0:f7:71:19:9f:12:46:29:f7:89: dd:5b:e5:10:0a:b6:87:e9:ba:f7:99:62:cb:d3:5f: e2:9f:f5:b9:79:6a:ed:a8:20:e5:67:48:d4:84:4c: 8c:91:b7:5a:93:df:96:c8:a2:09:a4:81:a9:27:ae: bd:e2:36:a2:19:60:a0:58:1e:fe:bd:80:e3:b8:fe: 27:06:00:8c:51:7a:a3:b0:46:d2:5b:c8:10:2b:11: cb:2a:26:8d:8b:7e:20:ce:4b:af:df:a6:8b:9a:4c: fb:78:6f:18:86:fe:dc:e3:1d:7a:a4:69:fb:d1:75: 9d:e3:5c:e8:a2:10:de:a9:86:5a:e7:40:64:65:74: 33:b0:d6:ef:e8:8a:e8:46:b3:3f:38:d5:51:f9:73: 92:49:da:a8:4f:d7:28:0d:56:e4:66:c3:85:08:df: 76:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4B:B7:37:15:67:FB:C1:05:F7:8A:69:03:04:B7:DD:73:FB:B0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2bd10850-e1d5-371f-b451-00c9b8348b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.224/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9a:90:e0:a1:19:92:47:0f:f3:31:d7:0c:f7:19:c3:c6:f3: 7e:7a:23:a5:82:77:02:7a:92:dc:42:17:57:5b:8c:79:1d:cd: 6c:99:fc:bf:a9:b0:1b:ff:25:8b:97:6c:81:d6:25:f4:9a:e6: 0f:e5:7d:fd:02:c8:d0:60:2b:8f:2f:25:33:3c:27:15:a0:17: 7e:90:7f:70:8b:3c:f3:c6:86:93:c1:37:1b:86:b7:42:0a:a8: d4:e2:7d:a7:37:69:38:af:2d:3d:89:0b:88:a7:5d:2d:de:a6: a2:aa:ed:98:71:0d:12:0e:48:ee:0e:f1:f8:62:76:19:5c:84: b4:f5:18:fe:56:c0:61:6b:24:60:98:5b:ca:bb:d3:bd:1c:f1: 3a:c2:fc:69:2b:62:3e:ec:15:fc:9f:11:92:86:cc:a2:f1:9a: 47:f8:9e:94:8c:c3:92:72:79:6e:b0:ba:ef:18:0a:c4:6b:f6: 43:17:6d:96:bc:35:ef:63:da:d0:9a:7e:fa:60:3d:59:c2:93: 69:87:46:ac:c0:5d:04:04:ff:81:d6:b2:00:e3:c7:cd:e5:fc: 1b:ca:75:e4:d7:bb:09:e4:65:aa:99:7d:04:82:85:1b:a0:b0: 89:f9:72:b6:f3:50:03:93:75:63:04:cc:96:42:a8:46:34:eb: fe:e0:ae:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/MxqFOrZJqXHgj4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk NTI2NGE5MDMtOTY3NC00OWNkLWI2YjYtMjk0NWU4M2UwNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCpuThV9/pqgVJ8fpU2eSXZj8p3A2buQL+Nl 0j0C6jyKDBLXiQZAzqTfGLTuYCXY9nJIf8Dj70VlYsWK7e9OVxzHFyTv/DdBrQg9 Rm3XdgF1/+t/5JVrrtRNG+VcsdD3cRmfEkYp94ndW+UQCraH6br3mWLL01/in/W5 eWrtqCDlZ0jUhEyMkbdak9+WyKIJpIGpJ6694jaiGWCgWB7+vYDjuP4nBgCMUXqj sEbSW8gQKxHLKiaNi34gzkuv36aLmkz7eG8Yhv7c4x16pGn70XWd41zoohDeqYZa 50BkZXQzsNbv6IroRrM/ONVR+XOSSdqoT9coDVbkZsOFCN92yQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC1LtzcVZ/vBBfeKaQMEt91z+7DZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmJkMTA4NTAtZTFkNS0z NzFmLWI0NTEtMDBjOWI4MzQ4YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExH4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBempDgoRmSRw/zMdcM9xnDxvN+eiOlgncCepLcQhdXW4x5Hc1smfy/ qbAb/yWLl2yB1iX0muYP5X39AsjQYCuPLyUzPCcVoBd+kH9wizzzxoaTwTcbhrdC CqjU4n2nN2k4ry09iQuIp10t3qaiqu2YcQ0SDkjuDvH4YnYZXIS09Rj+VsBhayRg mFvKu9O9HPE6wvxpK2I+7BX8nxGShsyi8ZpH+J6UjMOScnlusLrvGArEa/ZDF22W vDXvY9rQmn76YD1ZwpNph0aswF0EBP+B1rIA48fN5fwbynXk17sJ5GWqmX0EgoUb oLCJ+XK281ADk3VjBMyWQqhGNOv+4K50 -----END CERTIFICATE-----Generated at Sun Nov 15 10:09:16 2026 by rpki-client