$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa File: 63db3ed2-26ed-3f99-9a9b-2878649952c7.roa (raw, json) Hash identifier: xRT12r/CXylqjwyXsErXlA5ORw1D+LXbtayCKYiSDGs= Subject key identifier: 87:89:EA:DE:3D:45:2C:91:9A:60:ED:5C:48:20:A6:E1:C7:35:0C:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F89313713A3471219D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 208.76.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f8:93:13:71:3a:34:71:21:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=74b73438-d83a-4339-b5d4-b1ac88d541c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bc:1f:06:73:81:da:d9:7c:77:1f:4f:5c:45: 6c:42:d6:80:01:d7:30:ea:70:e7:b2:78:49:94:03: 93:cc:0c:46:1b:5b:10:5d:96:c8:a7:55:20:24:19: d2:d2:2e:3a:af:83:7b:dc:2e:7d:85:74:30:56:f3: 38:3a:1a:a6:73:44:30:b9:35:c4:eb:e1:ce:21:b7: 8f:81:39:26:ed:50:0d:09:7e:61:2c:a6:bb:eb:ec: 06:17:41:f2:c6:70:1f:53:ab:4c:40:7c:03:fd:d0: 04:ad:dc:32:b2:41:fa:59:84:4b:df:91:4b:41:8b: 51:b9:c6:f2:86:bb:84:e6:d1:29:20:34:e8:c4:4b: 02:cf:30:78:8e:97:d4:c9:1c:b5:f2:86:24:7c:68: 00:f1:70:bb:72:54:a4:05:97:84:4a:2a:a1:8e:b9: 5f:c5:e1:f5:33:69:51:80:f7:c0:c6:45:e3:dd:6e: 71:af:90:32:86:55:de:09:e1:56:e9:c7:c0:47:fa: 51:4c:93:05:de:b5:f7:97:5b:b5:dd:f3:cf:2e:00: bf:de:48:c2:91:93:42:9b:9d:95:18:93:da:6d:4d: 14:19:a2:14:f8:78:49:ad:eb:40:c4:cc:d8:92:53: de:8d:f4:79:57:04:e4:6f:ea:1f:0a:e4:fd:87:43: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:89:EA:DE:3D:45:2C:91:9A:60:ED:5C:48:20:A6:E1:C7:35:0C:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:69:1b:f0:dc:d1:73:51:a2:9d:7a:ec:f1:6f:e8:04:ae:c5: dd:08:3f:be:b6:e8:01:e5:d3:b9:ab:1a:74:29:2a:5d:5d:b3: 6a:76:9b:58:d9:73:57:37:89:49:58:f3:c9:c9:2f:42:74:53: 31:af:18:eb:52:f9:1b:d7:fd:e7:a0:9a:c9:b0:3c:03:81:0d: 61:e3:16:cd:d8:77:2f:a5:22:38:64:d2:84:51:16:9d:11:92: a4:b1:4b:ab:76:4e:bb:86:c2:a2:5e:37:52:00:08:ab:8a:86: ba:bd:d7:44:49:ee:dc:d7:a6:59:85:e6:0d:8f:0d:15:ba:3d: 8a:6b:1f:b7:04:f5:7d:16:83:c1:f8:aa:d1:0f:a1:52:5d:43: a6:61:c2:f9:43:25:04:74:1c:99:36:4b:57:98:0c:08:d7:73: 1b:d4:74:cb:7e:52:e3:69:02:bc:48:69:06:a6:4b:eb:8a:57: ef:94:af:e7:e2:02:79:95:cf:0b:a6:fc:6b:82:43:e2:59:7a: 5f:2e:c0:62:ca:82:8a:88:f4:4b:99:a6:e4:9d:cc:2d:ab:0d: 48:20:14:6d:37:48:57:98:28:00:89:fd:3f:dc:06:12:53:63: 75:2f:64:d2:5e:bb:89:4f:59:d1:16:ce:8e:81:38:71:cd:08: 58:80:77:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PiTE3E6NHEhnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzRiNzM0MzgtZDgzYS00MzM5LWI1ZDQtYjFhYzg4ZDU0MWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLwfBnOB2tl8dx9PXEVsQtaAAdcw6nDnsnhJ lAOTzAxGG1sQXZbIp1UgJBnS0i46r4N73C59hXQwVvM4Ohqmc0QwuTXE6+HOIbeP gTkm7VANCX5hLKa76+wGF0HyxnAfU6tMQHwD/dAErdwyskH6WYRL35FLQYtRucby hruE5tEpIDToxEsCzzB4jpfUyRy18oYkfGgA8XC7clSkBZeESiqhjrlfxeH1M2lR gPfAxkXj3W5xr5AyhlXeCeFW6cfAR/pRTJMF3rX3l1u13fPPLgC/3kjCkZNCm52V GJPabU0UGaIU+HhJretAxMzYklPejfR5VwTkb+ofCuT9h0OGSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeJ6t49RSyRmmDtXEggpuHHNQzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjNkYjNlZDItMjZlZC0z Zjk5LTlhOWItMjg3ODY0OTk1MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFpG/Dc0XNRop167PFv6ASuxd0IP7626AHl07mrGnQpKl1ds2p2m1jZ c1c3iUlY88nJL0J0UzGvGOtS+RvX/eegmsmwPAOBDWHjFs3Ydy+lIjhk0oRRFp0R kqSxS6t2TruGwqJeN1IACKuKhrq910RJ7tzXplmF5g2PDRW6PYprH7cE9X0Wg8H4 qtEPoVJdQ6ZhwvlDJQR0HJk2S1eYDAjXcxvUdMt+UuNpArxIaQamS+uKV++Ur+fi AnmVzwum/GuCQ+JZel8uwGLKgoqI9EuZpuSdzC2rDUggFG03SFeYKACJ/T/cBhJT Y3UvZNJeu4lPWdEWzo6BOHHNCFiAd0U= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:28 2026 by rpki-client