$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c14e2f80-1f59-37d9-8484-270eb327919c.roa File: c14e2f80-1f59-37d9-8484-270eb327919c.roa (raw, json) Hash identifier: WGh1kniZ5cr2TY3iS+rPjL864jdSuInnNB91f3dAw2A= Subject key identifier: CC:B9:83:4F:7D:BF:F0:BC:46:8B:94:47:23:46:59:2A:0F:15:68:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D2644D2B40AE8E75F0B671C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c14e2f80-1f59-37d9-8484-270eb327919c.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 396982 IP address blocks: 208.76.71.32/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:d2:b4:0a:e8:e7:5f:0b:67:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=ade84e35-c2f6-4659-b1be-22ff0fd82310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:f6:5c:ad:02:26:d0:a3:1b:6e:9d:9e:54: af:33:9a:d0:fa:7d:bb:7a:d5:26:3b:d4:ae:7f:eb: 79:21:c2:e3:72:fc:87:fb:83:72:e5:70:0b:5e:1f: 5f:ea:7c:23:71:22:93:ff:b9:fd:bf:d7:4c:11:de: 8e:de:82:3c:47:cb:0b:74:bd:dd:c8:58:f3:db:c7: 93:56:25:2d:8f:0d:6e:9f:cd:e8:2a:71:fb:74:fd: 33:32:17:b3:f9:f3:5d:99:ec:f7:85:0a:56:ed:bf: 63:66:c6:98:15:ea:09:50:5a:f7:e1:b3:fb:1f:b0: d1:08:dc:04:aa:7d:a1:3f:be:13:6c:58:1f:0c:60: 97:38:62:03:5a:7a:26:00:fd:f0:6c:2c:56:8e:48: 66:82:d0:00:37:b9:e2:88:2a:e2:f3:5c:cf:71:64: 00:a0:a0:9c:bc:b6:50:29:f2:71:c5:2c:fc:01:ef: b4:d0:f1:5f:71:d2:a5:bc:5a:82:19:5d:80:f5:1e: 51:68:13:18:81:69:b3:f3:9b:e5:70:71:44:80:c2: 79:bd:43:71:7e:02:7c:48:27:8f:4f:f8:1e:db:3d: 69:c5:3b:26:1b:a1:23:62:da:94:38:13:7a:d7:b9: 11:fd:90:26:1e:6c:22:d0:ad:44:5b:16:e3:de:53: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B9:83:4F:7D:BF:F0:BC:46:8B:94:47:23:46:59:2A:0F:15:68:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c14e2f80-1f59-37d9-8484-270eb327919c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.32/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9f:81:b0:eb:2d:21:71:db:1b:82:b1:db:e9:ca:bc:ec:84: 5f:d3:32:94:c8:7e:67:bb:ad:9b:77:90:0d:2c:b0:06:1d:94: 2c:2e:c4:2b:e1:ac:a8:ac:0d:5e:25:ae:2b:84:06:84:da:4c: 73:e7:b9:6c:8b:c3:24:a8:6f:49:66:a6:67:ec:b4:c1:d5:a1: a5:42:43:2b:9e:75:68:d3:60:78:6c:95:94:5b:99:bf:03:3b: b3:bd:7c:b2:62:f7:87:d1:b4:be:25:c3:22:45:cb:41:fb:78: 6a:d3:b8:9f:f3:5a:cd:19:83:48:cb:2c:b8:9e:43:9e:42:2a: 85:07:5f:0f:b8:85:c5:61:c9:3e:76:86:4a:e5:62:69:73:18: c7:7a:dc:37:17:b9:c6:f6:1b:26:6c:6a:05:3b:5a:c6:4d:c0: 67:6d:33:72:7b:86:d8:45:40:b7:d0:05:ee:64:b8:57:6e:19: 2c:77:45:50:1a:8b:86:4e:62:2b:b1:68:57:18:99:22:c5:5b: af:a5:29:9e:a6:53:a1:d0:90:fd:65:b0:47:8b:fa:9b:16:66: e1:f1:0d:66:27:c9:87:d9:c1:a1:d8:db:ef:2a:40:00:70:39: 23:9e:71:d3:ef:6b:14:d7:5f:ed:2c:86:23:74:0a:65:83:ef: 17:5f:c8:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0mRNK0CujnXwtnHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YWRlODRlMzUtYzJmNi00NjU5LWIxYmUtMjJmZjBmZDgyMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHz2XK0CJtCjG26dnlSvM5rQ+n27etUmO9Su f+t5IcLjcvyH+4Ny5XALXh9f6nwjcSKT/7n9v9dMEd6O3oI8R8sLdL3dyFjz28eT ViUtjw1un83oKnH7dP0zMhez+fNdmez3hQpW7b9jZsaYFeoJUFr34bP7H7DRCNwE qn2hP74TbFgfDGCXOGIDWnomAP3wbCxWjkhmgtAAN7niiCri81zPcWQAoKCcvLZQ KfJxxSz8Ae+00PFfcdKlvFqCGV2A9R5RaBMYgWmz85vlcHFEgMJ5vUNxfgJ8SCeP T/ge2z1pxTsmG6EjYtqUOBN617kR/ZAmHmwi0K1EWxbj3lOHWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMy5g099v/C8RouURyNGWSoPFWgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzE0ZTJmODAtMWY1OS0z N2Q5LTg0ODQtMjcwZWIzMjc5MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3n4Gw6y0hcdsbgrHb6cq87IRf0zKUyH5nu62bd5ANLLAGHZQsLsQr 4ayorA1eJa4rhAaE2kxz57lsi8MkqG9JZqZn7LTB1aGlQkMrnnVo02B4bJWUW5m/ AzuzvXyyYveH0bS+JcMiRctB+3hq07if81rNGYNIyyy4nkOeQiqFB18PuIXFYck+ doZK5WJpcxjHetw3F7nG9hsmbGoFO1rGTcBnbTNye4bYRUC30AXuZLhXbhksd0VQ GouGTmIrsWhXGJkixVuvpSmeplOh0JD9ZbBHi/qbFmbh8Q1mJ8mH2cGh2NvvKkAA cDkjnnHT72sU11/tLIYjdAplg+8XX8gz -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:55 2026 by rpki-client