$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a40f8753-45d5-31a4-9829-bf896f10b054.roa File: a40f8753-45d5-31a4-9829-bf896f10b054.roa (raw, json) Hash identifier: DQXoAMQVQi78oTISVWoKmCuZEMWUm9fDLvVx014r1rM= Subject key identifier: E5:2C:F9:38:82:12:2A:32:F6:44:12:82:2B:77:C1:93:E9:89:E1:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E070094B06574227B479C0000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a40f8753-45d5-31a4-9829-bf896f10b054.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 396982 IP address blocks: 208.76.71.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:94:b0:65:74:22:7b:47:9c:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=aa3fd27b-4e30-4a6b-b81a-a2ead8e0b7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:8d:40:0b:40:e3:35:51:6c:2e:48:59:d2: c6:d5:92:50:f2:78:39:fe:64:d5:97:3a:64:5a:53: 31:b2:53:25:8a:00:84:91:88:9e:e8:c1:4b:4d:27: 8a:9b:ff:2c:26:75:d1:fd:62:2b:11:38:b2:15:fc: 6a:6d:27:be:d6:69:16:05:3b:34:47:24:9e:d0:e9: 42:2d:6a:4d:3b:21:e2:74:20:4d:10:88:a1:ae:ff: 49:a6:64:c2:a1:37:d8:be:cd:35:1f:b3:ae:fc:a1: af:1e:68:03:83:f3:b6:cc:ed:1a:10:07:4b:a7:9b: 47:f9:8b:5d:a3:bc:7e:47:cf:ef:15:3b:98:a9:e1: 28:39:4f:ae:a3:89:3e:93:ce:23:0f:c7:90:45:5a: 19:a2:ec:c3:89:36:a3:d0:5f:a4:92:a0:26:25:1e: 07:fc:18:fb:67:89:7c:fa:ea:ec:32:25:df:26:9a: 36:93:34:ea:a9:62:02:f1:89:ef:d0:51:76:e2:52: 80:9c:e3:5b:b1:2f:05:88:16:8c:db:23:62:25:59: 62:55:93:89:2d:f1:71:0a:a6:2e:04:5b:38:e6:a2: d0:92:5e:36:f7:e0:84:b8:15:8d:dc:82:9c:fe:5d: b3:69:4f:59:d9:d1:70:b6:eb:1f:69:09:07:dd:34: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2C:F9:38:82:12:2A:32:F6:44:12:82:2B:77:C1:93:E9:89:E1:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a40f8753-45d5-31a4-9829-bf896f10b054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.64/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b1:fd:a8:98:e3:f3:dc:8d:ba:d2:23:8a:8e:60:82:26:fe: 86:6e:49:f2:6a:46:75:c8:04:66:67:4d:80:0a:fc:08:ed:87: 78:a9:57:dd:95:24:3c:e3:a8:8b:56:0d:a2:cf:cf:da:01:a5: 23:a5:77:10:b0:46:31:11:33:13:ca:5c:f2:4a:a9:da:3f:4d: 57:4c:bb:0b:79:33:27:d2:b3:6b:99:8f:25:7a:7a:8d:7e:74: 3e:e5:57:bf:0b:6e:32:b5:e1:88:9c:1a:0d:55:70:59:fb:26: b6:89:7b:ef:bb:cb:ce:6f:20:66:8d:c2:77:d8:3a:03:b9:18: 21:4b:8d:6a:20:00:39:5f:a7:8d:91:d3:9f:15:71:37:a5:90: f8:e8:d8:57:a8:36:e8:b5:ce:c7:08:f0:e0:d8:96:f2:3f:b9: 63:4c:4d:e3:e9:d4:26:9c:80:a7:03:74:11:4e:f3:19:d9:2c: 58:7c:f2:91:ad:13:46:48:b3:37:a3:73:fa:f5:1e:a6:02:a4: bd:e9:df:49:9c:53:a6:28:ae:f5:28:90:00:25:ba:15:1d:dd: 40:d7:3b:62:b1:92:5c:12:ba:86:21:1a:0d:55:92:be:9d:0e: f0:f1:89:e1:54:60:2a:16:0f:99:10:4e:d7:2f:33:7b:44:4f: 29:3a:77:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4HAJSwZXQie0ecAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk YWEzZmQyN2ItNGUzMC00YTZiLWI4MWEtYTJlYWQ4ZTBiN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AKNQAtA4zVRbC5IWdLG1ZJQ8ng5/mTVlzpk WlMxslMligCEkYie6MFLTSeKm/8sJnXR/WIrETiyFfxqbSe+1mkWBTs0RySe0OlC LWpNOyHidCBNEIihrv9JpmTCoTfYvs01H7Ou/KGvHmgDg/O2zO0aEAdLp5tH+Ytd o7x+R8/vFTuYqeEoOU+uo4k+k84jD8eQRVoZouzDiTaj0F+kkqAmJR4H/Bj7Z4l8 +ursMiXfJpo2kzTqqWIC8Ynv0FF24lKAnONbsS8FiBaM2yNiJVliVZOJLfFxCqYu BFs45qLQkl429+CEuBWN3IKc/l2zaU9Z2dFwtusfaQkH3TRZTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOUs+TiCEioy9kQSgit3wZPpieGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQwZjg3NTMtNDVkNS0z MWE0LTk4MjktYmY4OTZmMTBiMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCsf2omOPz3I260iOKjmCCJv6GbknyakZ1yARmZ02ACvwI7Yd4qVfd lSQ846iLVg2iz8/aAaUjpXcQsEYxETMTylzySqnaP01XTLsLeTMn0rNrmY8lenqN fnQ+5Ve/C24yteGInBoNVXBZ+ya2iXvvu8vObyBmjcJ32DoDuRghS41qIAA5X6eN kdOfFXE3pZD46NhXqDbotc7HCPDg2JbyP7ljTE3j6dQmnICnA3QRTvMZ2SxYfPKR rRNGSLM3o3P69R6mAqS96d9JnFOmKK71KJAAJboVHd1A1ztisZJcErqGIRoNVZK+ nQ7w8YnhVGAqFg+ZEE7XLzN7RE8pOneF -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:53 2026 by rpki-client