$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b32a3135-314f-36e5-ab1c-c0eae88f9ebe.roa File: b32a3135-314f-36e5-ab1c-c0eae88f9ebe.roa (raw, json) Hash identifier: nY7moBjnZCUYERgZ9R6+M7eysSE7NedyAXWJ1XvwO6w= Subject key identifier: 8E:1E:68:39:F1:76:BE:E2:40:1D:91:E3:D3:36:56:C6:D0:4C:96:A4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F2ABD1835109AE00F0F597BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b32a3135-314f-36e5-ab1c-c0eae88f9ebe.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.160/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:18:35:10:9a:e0:0f:0f:59:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=f05a0d5c-543c-4ea7-8079-7871dcb68821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f6:80:27:9a:47:28:8d:c9:2c:29:ce:e5:25: c1:8e:fe:e9:6f:0f:8c:89:13:91:b0:8e:6f:92:bf: e8:51:5e:64:80:cc:e7:e6:34:c2:dc:fa:34:e6:b5: 40:6e:ad:cc:93:a8:79:62:7d:c7:e6:6c:e5:bd:57: 06:cd:8c:27:53:5c:59:66:c4:1f:2f:9d:f7:c8:04: 4d:4e:65:b3:3c:64:cb:31:99:d1:f2:eb:0e:95:68: 38:d0:d5:db:89:aa:f5:1c:f7:51:db:a9:85:0f:b1: 4f:af:23:86:61:46:80:13:c6:b9:4f:35:6e:6c:8c: 24:7c:15:1f:ef:ea:f9:1e:5c:da:75:1a:c7:24:8c: 00:f2:cc:02:84:a1:bb:ff:4c:35:37:04:e6:6a:46: 56:68:3a:72:9e:6a:70:64:4b:9c:db:d9:44:fb:19: a5:80:f2:68:7a:e7:8c:62:6c:13:89:ed:0f:9a:ea: 27:74:30:2a:62:32:2b:f4:22:7f:65:28:03:25:a0: b8:93:4a:d7:12:ee:a2:58:08:1f:d4:62:b5:e2:36: 7f:51:34:34:54:50:f6:e8:e3:9d:6c:2d:84:e3:b7: 84:06:35:c2:9d:f3:9a:f4:4e:2d:34:25:20:bd:ec: 2c:4e:fe:9c:f8:5b:d0:a3:86:b2:53:75:5b:35:b8: e9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1E:68:39:F1:76:BE:E2:40:1D:91:E3:D3:36:56:C6:D0:4C:96:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b32a3135-314f-36e5-ab1c-c0eae88f9ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.160/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d0:13:48:85:a1:33:6c:fa:02:bb:78:f6:5e:7b:b8:d9:06: 6e:bf:fa:10:b1:58:a6:70:6f:2f:6d:61:47:b9:dd:5d:96:75: 80:4d:9c:f9:9b:b0:e3:9a:8f:b4:f3:80:2b:c8:44:e8:39:e5: bc:cb:f2:a6:40:40:d2:20:36:9c:7b:e7:d4:97:4e:33:4e:00: 8f:79:96:79:33:2d:db:35:e4:8c:3b:9e:cc:4e:55:49:3a:33: 6c:82:37:74:7c:93:a3:85:0b:88:42:40:d0:3f:c0:77:03:ea: 01:b5:6b:7d:64:15:13:b6:72:c0:81:c4:38:7f:4c:f2:53:04: 45:ad:55:23:75:d4:b3:35:36:05:4a:31:66:9c:61:01:21:7a: 0a:93:58:73:d6:a5:81:3c:cc:54:f8:8c:b1:8e:f1:8e:08:dd: 30:49:96:23:25:0f:4b:0e:10:09:fc:5a:e3:73:3f:50:9d:52: 05:cc:f2:41:6e:b7:f2:2f:94:58:50:ef:83:a5:f7:a8:1d:9d: c9:78:0b:45:a6:84:c0:58:be:b2:ce:ee:05:91:68:80:a3:ad: 99:33:ce:82:5e:59:86:4b:4c:d2:bc:7c:37:11:2c:d0:86:9f: f8:8e:8b:02:5a:f3:e0:5d:2e:9a:53:b8:57:37:d8:0e:eb:e8: e4:76:bd:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvRg1EJrgDw9Ze8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjA1YTBkNWMtNTQzYy00ZWE3LTgwNzktNzg3MWRjYjY4ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8faAJ5pHKI3JLCnO5SXBjv7pbw+MiRORsI5v kr/oUV5kgMzn5jTC3Po05rVAbq3Mk6h5Yn3H5mzlvVcGzYwnU1xZZsQfL533yARN TmWzPGTLMZnR8usOlWg40NXbiar1HPdR26mFD7FPryOGYUaAE8a5TzVubIwkfBUf 7+r5HlzadRrHJIwA8swChKG7/0w1NwTmakZWaDpynmpwZEuc29lE+xmlgPJoeueM YmwTie0PmuondDAqYjIr9CJ/ZSgDJaC4k0rXEu6iWAgf1GK14jZ/UTQ0VFD26OOd bC2E47eEBjXCnfOa9E4tNCUgvewsTv6c+FvQo4ayU3VbNbjpxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI4eaDnxdr7iQB2R49M2VsbQTJakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjMyYTMxMzUtMzE0Zi0z NmU1LWFiMWMtYzBlYWU4OGY5ZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExHoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBY0BNIhaEzbPoCu3j2Xnu42QZuv/oQsVimcG8vbWFHud1dlnWATZz5 m7Djmo+084AryEToOeW8y/KmQEDSIDace+fUl04zTgCPeZZ5My3bNeSMO57MTlVJ OjNsgjd0fJOjhQuIQkDQP8B3A+oBtWt9ZBUTtnLAgcQ4f0zyUwRFrVUjddSzNTYF SjFmnGEBIXoKk1hz1qWBPMxU+IyxjvGOCN0wSZYjJQ9LDhAJ/Frjcz9QnVIFzPJB brfyL5RYUO+DpfeoHZ3JeAtFpoTAWL6yzu4FkWiAo62ZM86CXlmGS0zSvHw3ESzQ hp/4josCWvPgXS6aU7hXN9gO6+jkdr3r -----END CERTIFICATE-----Generated at Mon Sep 21 17:42:13 2026 by rpki-client