$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa File: fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa (raw, json) Hash identifier: qJC/yUfAzRAgNWQWkP5b1c4C+UwtQ0fZniNodI+/gzc= Subject key identifier: 75:89:1A:42:43:6C:6C:7D:9C:CD:E8:4C:EF:5A:3B:44:4D:69:BB:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D5F8EAA9645A7766208E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 208.76.71.96/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5f:8e:aa:96:45:a7:76:62:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=de50c91f-d696-4ace-ac18-7c520eb92741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:ef:8c:d7:99:46:95:34:6e:3b:a7:c9:48: 81:ae:14:4a:f1:d1:e5:a6:57:53:ed:ac:1e:b4:be: 27:b2:39:ed:49:1d:46:97:a7:06:a4:63:c8:1d:ca: a0:6e:08:b5:a8:75:63:0c:44:f8:fe:4d:6f:5e:1b: da:34:8f:42:7f:71:48:b1:e9:77:2a:45:47:60:64: d3:d3:cb:f0:c6:c6:e5:cd:37:ec:51:1b:c3:24:6d: 48:87:3a:b3:0d:39:c2:be:a8:22:bc:4e:27:7e:6e: f2:58:b8:20:4e:5a:12:cc:80:b4:34:80:ad:e6:99: 88:ce:27:be:24:fd:7a:3a:c7:07:01:b5:fd:5c:74: 18:d3:7e:07:31:1a:65:c0:74:c8:ee:45:a0:dc:03: f1:fb:24:79:de:8f:27:b0:0f:cb:82:c5:12:09:2a: 94:4d:87:b2:bd:35:e2:d8:51:b4:86:5a:09:df:39: 61:28:39:8b:95:6e:9a:12:e4:6c:dc:97:0c:48:21: 9d:5f:b4:25:c5:71:2f:ea:cb:64:e9:d5:08:37:0e: ab:d9:72:aa:fc:fb:c2:a2:6e:58:6b:0c:9f:fd:d0: e2:87:2c:9b:ab:46:40:3d:69:8e:ab:26:4d:b7:e8: 98:3f:e8:2f:c7:9b:cd:82:0b:87:50:6a:f8:d3:80: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:89:1A:42:43:6C:6C:7D:9C:CD:E8:4C:EF:5A:3B:44:4D:69:BB:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fb8b1155-f7d5-345b-a29a-0b867eb37aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.96/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:5b:e1:8c:4c:e4:c9:2b:cb:f5:47:79:bf:6d:5c:3d:4c:4f: 62:d2:ab:de:e2:93:82:0f:89:3f:eb:1a:03:28:bc:28:9a:fc: 79:57:1a:68:a4:4a:19:6f:ff:69:6c:fe:28:1f:d7:36:58:56: e5:da:a0:42:eb:1d:86:81:c2:3d:bb:4e:5e:f4:03:23:dc:66: 3d:79:0a:fa:2a:6e:39:44:1a:bc:19:f4:90:42:35:ca:d1:df: e3:5a:18:2f:85:6d:71:83:b4:62:c3:71:7d:6f:48:7b:e1:f9: bc:b8:d4:e8:bc:77:d6:0a:f0:c6:d7:af:bf:7b:ef:a2:f3:41: 57:1a:05:8b:79:b2:54:0a:43:f0:be:c2:c1:51:03:1a:fb:ac: 5c:50:19:3e:46:68:d2:44:57:ed:87:92:b1:25:cd:8e:44:57: db:15:ed:08:c4:b6:af:9d:bf:4d:d5:71:94:77:34:3c:41:c1: 66:d7:0f:7c:ad:cf:0d:4b:24:5c:9c:e8:d0:f3:ca:75:7e:48: 80:dc:4c:fb:73:ba:80:e0:8e:0d:ca:3c:c3:28:b4:7d:8e:51: ab:e7:14:1e:76:da:fa:85:ff:bf:7f:65:2a:49:41:0e:5d:ed: 08:05:c9:bb:d8:52:87:21:e5:a9:12:1a:ac:f5:64:03:18:3d: e7:9c:cb:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9MPV+OqpZFp3ZiCOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGU1MGM5MWYtZDY5Ni00YWNlLWFjMTgtN2M1MjBlYjkyNzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8vvjNeZRpU0bjunyUiBrhRK8dHlpldT7awe tL4nsjntSR1Gl6cGpGPIHcqgbgi1qHVjDET4/k1vXhvaNI9Cf3FIsel3KkVHYGTT 08vwxsblzTfsURvDJG1IhzqzDTnCvqgivE4nfm7yWLggTloSzIC0NICt5pmIzie+ JP16OscHAbX9XHQY034HMRplwHTI7kWg3APx+yR53o8nsA/LgsUSCSqUTYeyvTXi 2FG0hloJ3zlhKDmLlW6aEuRs3JcMSCGdX7QlxXEv6stk6dUINw6r2XKq/PvCom5Y awyf/dDihyybq0ZAPWmOqyZNt+iYP+gvx5vNgguHUGr404DqTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHWJGkJDbGx9nM3oTO9aO0RNabtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmI4YjExNTUtZjdkNS0z NDViLWEyOWEtMGI4NjdlYjM3YWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCcW+GMTOTJK8v1R3m/bVw9TE9i0qve4pOCD4k/6xoDKLwomvx5Vxpo pEoZb/9pbP4oH9c2WFbl2qBC6x2GgcI9u05e9AMj3GY9eQr6Km45RBq8GfSQQjXK 0d/jWhgvhW1xg7Riw3F9b0h74fm8uNTovHfWCvDG16+/e++i80FXGgWLebJUCkPw vsLBUQMa+6xcUBk+RmjSRFfth5KxJc2ORFfbFe0IxLavnb9N1XGUdzQ8QcFm1w98 rc8NSyRcnOjQ88p1fkiA3Ez7c7qA4I4NyjzDKLR9jlGr5xQedtr6hf+/f2UqSUEO Xe0IBcm72FKHIeWpEhqs9WQDGD3nnMsJ -----END CERTIFICATE-----Generated at Thu Nov 5 07:34:19 2026 by rpki-client