$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd732243-c576-3d0b-85a0-f97a851914be.roa File: cd732243-c576-3d0b-85a0-f97a851914be.roa (raw, json) Hash identifier: 1xclXvhsSRtjmehuNk8PVz8KkYMyTNc6b20GXRTk674= Subject key identifier: B1:44:ED:00:CA:F8:EC:79:CA:FB:C0:82:E9:81:27:94:70:27:6B:56 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F2ABD2E4D5B694D92C6676240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd732243-c576-3d0b-85a0-f97a851914be.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.144/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2e:4d:5b:69:4d:92:c6:67:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=f66f06d2-6803-417c-9942-5388a2bcb081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:76:80:db:f7:ed:30:bf:f9:c4:39:53:b7:11: e2:23:c8:16:a5:02:56:64:6f:8c:af:ea:ef:2a:3d: 79:d0:22:65:8a:fe:45:96:4d:df:c5:b9:c6:2a:1b: 66:38:18:f7:b7:53:5c:21:c1:49:5a:46:47:a8:53: 99:cd:24:50:67:9b:be:b2:bd:eb:29:a2:1e:22:65: a4:f9:b7:d3:70:fb:16:93:7f:bd:91:91:1b:a3:35: b9:61:84:c5:fc:4f:54:41:e5:d1:73:86:e1:8a:38: 1a:85:a9:72:19:25:54:ce:ba:f3:86:7f:ed:24:48: c1:62:58:86:04:5c:be:b0:b1:b9:c0:d3:3e:9b:3d: 31:06:83:39:7e:89:77:10:a1:b2:f6:93:67:42:dc: 8e:fe:d1:e3:39:e8:54:a2:89:bc:f8:61:e2:78:a3: 34:d7:1d:60:63:6a:b2:c2:46:7c:ef:c7:13:d9:ac: 0a:ce:34:de:59:21:86:bb:de:8c:c0:1b:c7:ab:18: 6d:18:71:5d:05:33:e7:35:0f:05:99:49:be:80:76: 45:a8:50:ad:27:be:23:57:25:78:c8:3b:83:33:77: ae:17:fc:5d:a7:eb:42:86:ef:c7:c2:96:84:5d:c9: 88:33:0d:e5:ae:03:65:c4:c7:10:3e:c3:da:a2:a6: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:44:ED:00:CA:F8:EC:79:CA:FB:C0:82:E9:81:27:94:70:27:6B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd732243-c576-3d0b-85a0-f97a851914be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.144/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:aa:df:d1:c9:5a:12:67:48:1e:a1:4a:ab:18:32:69:00:17: b6:8c:44:49:f1:4e:b9:62:fa:40:c1:c4:96:69:20:ca:06:0e: 63:a7:6a:bb:fd:05:07:c5:a0:02:5c:31:e0:0e:a4:bc:b4:e1: b2:42:d3:eb:1b:3b:10:db:50:48:9e:ec:11:da:8d:82:6b:3f: 9c:51:fa:b8:03:60:45:79:5a:f1:2a:71:17:20:17:d8:54:02: a6:9d:26:40:49:cd:fa:a5:23:2b:a5:8a:97:94:de:20:7a:85: cd:71:8d:40:44:8b:c9:9e:94:f4:ad:f5:63:fd:5a:4b:1d:fb: 3d:68:da:31:cc:56:e0:49:60:39:58:32:1c:35:10:32:09:56: e7:24:9d:53:4d:20:a8:4c:73:bd:52:a2:89:74:8b:3c:0e:d3: 21:32:8a:1f:f5:82:c8:d2:d6:e7:10:07:f2:ef:dc:46:9e:40: 68:9f:5d:35:c9:e6:5d:ab:db:04:c5:7f:2c:9d:a4:58:42:d5: 52:fa:f2:7e:16:2c:89:ef:0c:69:c9:43:e6:1d:9a:32:0c:75: df:4f:0e:97:4d:b5:e4:a3:05:0c:4f:3c:76:22:b9:04:d0:76: 36:32:de:45:22:ad:55:c3:9e:a8:60:21:8f:3c:af:81:81:9d: 5b:32:a9:ad -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvS5NW2lNksZnYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjY2ZjA2ZDItNjgwMy00MTdjLTk5NDItNTM4OGEyYmNiMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnaA2/ftML/5xDlTtxHiI8gWpQJWZG+Mr+rv Kj150CJliv5Flk3fxbnGKhtmOBj3t1NcIcFJWkZHqFOZzSRQZ5u+sr3rKaIeImWk +bfTcPsWk3+9kZEbozW5YYTF/E9UQeXRc4bhijgahalyGSVUzrrzhn/tJEjBYliG BFy+sLG5wNM+mz0xBoM5fol3EKGy9pNnQtyO/tHjOehUoom8+GHieKM01x1gY2qy wkZ878cT2awKzjTeWSGGu96MwBvHqxhtGHFdBTPnNQ8FmUm+gHZFqFCtJ74jVyV4 yDuDM3euF/xdp+tChu/HwpaEXcmIMw3lrgNlxMcQPsPaoqYQWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLFE7QDK+Ox5yvvAgumBJ5RwJ2tWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Q3MzIyNDMtYzU3Ni0z ZDBiLTg1YTAtZjk3YTg1MTkxNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExHkDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCfqt/RyVoSZ0geoUqrGDJpABe2jERJ8U65YvpAwcSWaSDKBg5jp2q7 /QUHxaACXDHgDqS8tOGyQtPrGzsQ21BInuwR2o2Caz+cUfq4A2BFeVrxKnEXIBfY VAKmnSZASc36pSMrpYqXlN4geoXNcY1ARIvJnpT0rfVj/VpLHfs9aNoxzFbgSWA5 WDIcNRAyCVbnJJ1TTSCoTHO9UqKJdIs8DtMhMoof9YLI0tbnEAfy79xGnkBon101 yeZdq9sExX8snaRYQtVS+vJ+FiyJ7wxpyUPmHZoyDHXfTw6XTbXkowUMTzx2IrkE 0HY2Mt5FIq1Vw56oYCGPPK+BgZ1bMqmt -----END CERTIFICATE-----Generated at Sun Sep 20 19:46:42 2026 by rpki-client