$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b777829-a1dc-367e-9751-2ff05020e7e8.roa File: 5b777829-a1dc-367e-9751-2ff05020e7e8.roa (raw, json) Hash identifier: W4xpNYAhphUf5yqDM3GPDadA8OXn++kYQxj2nnY9+xY= Subject key identifier: 5E:F1:3A:D0:78:1A:04:B3:16:86:3D:81:E0:F1:B0:E0:68:14:BC:39 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F2ABD176F2E95FB4D8DC439E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b777829-a1dc-367e-9751-2ff05020e7e8.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.232/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:17:6f:2e:95:fb:4d:8d:c4:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=a0342885-f868-4c1d-ab6c-cdd3bf97a781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:6d:b9:16:be:d5:0b:40:4a:d7:72:87:fc: 1a:68:a5:77:f1:cf:ad:42:50:a6:6d:e1:f7:f0:83: 57:dd:a4:6b:af:18:7e:b7:17:4c:7a:c3:b6:ae:93: e3:63:51:b5:9d:55:3f:35:e2:1f:9b:9d:3e:33:27: 8c:19:2e:a1:81:e0:b3:a5:b0:a9:f5:c9:11:6d:ef: 13:ee:75:ec:8e:65:03:a1:92:fc:d0:23:78:5f:92: 5c:22:de:7f:cb:c1:af:c7:78:c6:d0:0e:00:a2:7a: 8a:7c:5a:9b:40:62:c6:95:b8:d4:a5:52:ef:e7:53: 8e:a7:d5:50:bf:9b:0a:1e:cb:cd:81:da:51:e0:d8: 2f:d6:81:99:91:f3:3f:e0:95:b1:08:29:ca:7f:00: 62:6e:07:c3:bd:ff:61:b1:db:e2:22:ee:09:a1:d0: 6e:31:d3:70:30:ac:92:e0:bf:d2:65:3b:d7:25:c8: 46:7d:e8:09:ae:86:d5:3e:3d:d2:02:e8:9f:24:e3: 6d:d7:f3:15:75:a0:8b:e1:93:2f:f8:d3:40:98:d2: 0b:f8:d7:d6:78:7e:b9:56:ad:f7:59:eb:c0:12:fd: 3d:12:80:88:c7:cf:d0:de:17:bc:c6:5c:e0:7a:1d: 65:e3:04:0a:f5:d0:c0:c9:b7:4b:97:c9:1c:84:6d: 81:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F1:3A:D0:78:1A:04:B3:16:86:3D:81:E0:F1:B0:E0:68:14:BC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b777829-a1dc-367e-9751-2ff05020e7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.232/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:38:ca:2a:da:3f:1e:57:5b:42:94:1c:ea:4c:73:eb:f3:fe: 8b:ff:7b:74:f3:09:63:97:73:cd:8a:38:e6:13:99:9c:66:a9: 2e:81:9c:6b:cd:30:94:71:f1:81:a9:a3:78:f1:de:32:3f:41: 6e:e2:ea:84:eb:17:03:7d:af:12:82:3c:94:03:0e:f0:bc:d3: 68:e1:b1:b8:9a:70:0e:f7:c6:6a:61:a0:e5:82:1f:fa:63:92: 5e:f1:4f:9b:f2:0c:4d:b5:e0:cb:e7:36:1e:f7:69:12:3c:21: 0b:c6:c6:ef:ca:36:c6:39:1a:a5:51:7b:e3:b2:41:aa:de:3e: ce:df:a3:c1:ae:48:cd:64:f5:95:da:f3:41:98:cb:2b:46:0a: a8:8f:18:ba:7c:86:be:a5:ed:a7:93:ca:89:56:1e:9f:0b:c5: 19:e0:25:5f:87:90:10:64:88:b7:c9:53:fc:41:bf:7c:4c:b3: a5:ce:69:f7:48:42:ea:11:7e:ce:2d:74:ba:06:08:40:ba:0c: 70:c1:e7:f2:4d:cd:a0:59:a8:c9:6f:2d:a1:a5:31:02:f0:65: 23:15:0a:69:01:af:69:53:9c:c9:b0:84:ac:e5:f7:4f:02:fa: bc:06:f8:c5:73:37:90:23:ea:93:88:d4:00:b4:55:97:96:25: 14:c1:93:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvRdvLpX7TY3EOeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YTAzNDI4ODUtZjg2OC00YzFkLWFiNmMtY2RkM2JmOTdhNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSxtuRa+1QtAStdyh/waaKV38c+tQlCmbeH3 8INX3aRrrxh+txdMesO2rpPjY1G1nVU/NeIfm50+MyeMGS6hgeCzpbCp9ckRbe8T 7nXsjmUDoZL80CN4X5JcIt5/y8Gvx3jG0A4AonqKfFqbQGLGlbjUpVLv51OOp9VQ v5sKHsvNgdpR4Ngv1oGZkfM/4JWxCCnKfwBibgfDvf9hsdviIu4JodBuMdNwMKyS 4L/SZTvXJchGfegJrobVPj3SAuifJONt1/MVdaCL4ZMv+NNAmNIL+NfWeH65Vq33 WevAEv09EoCIx8/Q3he8xlzgeh1l4wQK9dDAybdLl8kchG2BKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF7xOtB4GgSzFoY9geDxsOBoFLw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWI3Nzc4MjktYTFkYy0z NjdlLTk3NTEtMmZmMDUwMjBlN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExH6DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBEOMoq2j8eV1tClBzqTHPr8/6L/3t08wljl3PNijjmE5mcZqkugZxr zTCUcfGBqaN48d4yP0Fu4uqE6xcDfa8SgjyUAw7wvNNo4bG4mnAO98ZqYaDlgh/6 Y5Je8U+b8gxNteDL5zYe92kSPCELxsbvyjbGORqlUXvjskGq3j7O36PBrkjNZPWV 2vNBmMsrRgqojxi6fIa+pe2nk8qJVh6fC8UZ4CVfh5AQZIi3yVP8Qb98TLOlzmn3 SELqEX7OLXS6BghAugxwwefyTc2gWajJby2hpTEC8GUjFQppAa9pU5zJsISs5fdP Avq8BvjFczeQI+qTiNQAtFWXliUUwZMI -----END CERTIFICATE-----Generated at Mon Sep 21 17:47:06 2026 by rpki-client