$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce8845eb-a517-38ef-86e1-856e3602eec5.roa File: ce8845eb-a517-38ef-86e1-856e3602eec5.roa (raw, json) Hash identifier: 81y2pyAaWREPy5wDMfHc9O52LThTkMwuCjQan4t0tRs= Subject key identifier: A4:33:50:A4:10:71:17:E6:6A:74:CB:C8:25:2E:32:83:BA:3E:71:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F2ABD15F331D36D3143BAF280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce8845eb-a517-38ef-86e1-856e3602eec5.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.176/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:15:f3:31:d3:6d:31:43:ba:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=827dbcc3-e14c-4256-a657-f3fecf75baed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a4:90:8e:20:97:a8:fa:78:ea:1f:2b:67:a3: ed:1e:2d:75:49:f0:8e:f7:61:24:d4:34:26:d2:e6: a3:02:77:ea:ed:cb:62:00:8f:99:b9:34:9f:9b:14: cb:95:04:a9:7f:af:0c:d9:96:39:a3:dc:78:0b:36: f4:a4:99:6b:55:e9:48:75:20:34:b0:9c:06:67:cc: f8:6c:7e:bb:e1:85:6a:d6:14:c3:d1:cc:24:6a:6a: 8e:29:9d:4c:2d:ba:f1:17:0b:0f:06:7f:5a:f1:e9: d4:ef:e8:da:3e:ac:82:a2:60:21:0f:57:f0:27:81: cc:73:83:c7:d8:54:e8:c9:8f:2f:2d:b7:d5:7d:2a: c7:3d:92:f3:b5:f6:10:28:64:02:40:d9:4d:50:73: ad:30:06:93:c3:ed:40:ad:8d:97:d7:d0:c2:b1:3c: 94:2a:ff:57:31:2a:de:f7:da:cc:99:55:dd:3e:e5: 48:43:0b:dc:9c:52:5d:5e:df:ec:9d:dc:26:cc:52: e5:c2:1e:16:07:ab:15:b7:fb:53:6a:44:3d:7b:49: ab:de:63:f6:e2:ab:8f:16:67:f0:b8:20:23:92:08: e9:04:f7:0b:db:4d:e1:46:53:65:16:11:87:3e:43: 38:eb:fe:33:32:d9:56:ae:4f:9b:94:e0:68:f6:c6: 03:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:33:50:A4:10:71:17:E6:6A:74:CB:C8:25:2E:32:83:BA:3E:71:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce8845eb-a517-38ef-86e1-856e3602eec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.176/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ab:07:37:a2:cd:03:37:4a:ec:61:a9:38:f1:0a:e1:06:45: 67:84:c6:86:01:27:b1:85:9c:e8:5b:47:3d:70:6f:60:b9:9f: 80:51:a9:1f:0d:b7:d3:df:d2:02:a6:60:22:f2:f9:5e:fa:cd: e1:f9:dd:38:74:7f:1a:94:64:71:b4:1e:4b:a4:31:88:ac:ad: 67:ac:ac:65:be:90:c8:e8:fc:07:61:68:66:bd:1e:7d:b5:b3: 10:08:f0:c8:6e:c9:e0:32:ec:6f:b2:6a:4c:d6:5c:3f:66:ea: 4b:ef:30:cd:fb:b7:f6:cb:8a:8e:f2:9d:62:13:fc:bd:d9:e4: 32:93:25:77:53:06:7c:94:02:93:3c:fe:98:50:f6:7c:64:34: b1:f7:aa:11:5a:60:74:55:c9:26:2a:f4:d2:83:a4:6d:6c:af: 4f:8c:03:15:a7:0c:3d:66:ae:41:67:c0:a2:0f:07:f5:e4:8a: b2:1e:6a:b6:76:fd:16:41:14:70:7f:4e:c5:9b:31:85:64:21: d5:b4:a3:30:b2:88:65:2b:1b:85:48:18:ed:bb:36:ef:18:56: c6:3d:06:0f:a4:67:ad:03:9d:4a:3b:02:80:9f:9c:04:a6:03: 3e:54:03:35:98:e0:1b:cf:77:04:43:82:cb:a6:7c:97:31:5b: 6b:10:5f:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvRXzMdNtMUO68oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ODI3ZGJjYzMtZTE0Yy00MjU2LWE2NTctZjNmZWNmNzViYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaSQjiCXqPp46h8rZ6PtHi11SfCO92Ek1DQm 0uajAnfq7ctiAI+ZuTSfmxTLlQSpf68M2ZY5o9x4Czb0pJlrVelIdSA0sJwGZ8z4 bH674YVq1hTD0cwkamqOKZ1MLbrxFwsPBn9a8enU7+jaPqyComAhD1fwJ4HMc4PH 2FToyY8vLbfVfSrHPZLztfYQKGQCQNlNUHOtMAaTw+1ArY2X19DCsTyUKv9XMSre 99rMmVXdPuVIQwvcnFJdXt/sndwmzFLlwh4WB6sVt/tTakQ9e0mr3mP24quPFmfw uCAjkgjpBPcL203hRlNlFhGHPkM46/4zMtlWrk+blOBo9sYDQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKQzUKQQcRfmanTLyCUuMoO6PnHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2U4ODQ1ZWItYTUxNy0z OGVmLTg2ZTEtODU2ZTM2MDJlZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExHsDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoqwc3os0DN0rsYak48QrhBkVnhMaGASexhZzoW0c9cG9guZ+AUakf DbfT39ICpmAi8vle+s3h+d04dH8alGRxtB5LpDGIrK1nrKxlvpDI6PwHYWhmvR59 tbMQCPDIbsngMuxvsmpM1lw/ZupL7zDN+7f2y4qO8p1iE/y92eQykyV3UwZ8lAKT PP6YUPZ8ZDSx96oRWmB0VckmKvTSg6RtbK9PjAMVpww9Zq5BZ8CiDwf15IqyHmq2 dv0WQRRwf07FmzGFZCHVtKMwsohlKxuFSBjtuzbvGFbGPQYPpGetA51KOwKAn5wE pgM+VAM1mOAbz3cEQ4LLpnyXMVtrEF/s -----END CERTIFICATE-----Generated at Mon Sep 21 23:34:19 2026 by rpki-client