$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa File: dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa (raw, json) Hash identifier: ycdh1Xp2KRWLjNNV8BYC219WW+0kmAmWv+tCXwKHtJg= Subject key identifier: 06:BB:49:7A:5D:66:45:E6:15:E7:B6:38:F6:E5:41:A0:A3:E3:5F:99 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D2644BB5CFB1DD8520B22C780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 396982 IP address blocks: 208.76.71.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:bb:5c:fb:1d:d8:52:0b:22:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=24f3badb-879d-41f3-b2e6-f965c86b6a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:6a:8a:32:7d:c9:12:db:98:75:f1:2f:a4: 46:48:9a:37:31:4c:cb:31:83:95:35:ce:37:30:ef: 00:11:c2:e1:d7:32:4f:c2:a1:77:7c:7b:ea:7a:18: 1f:5d:9f:0e:7e:ae:f9:bd:b3:f1:d5:22:1f:48:32: 6e:16:28:93:23:6e:bc:15:0e:39:79:82:50:6c:b3: 34:2b:79:84:33:10:99:90:16:75:89:34:dd:01:34: e5:83:7f:1c:77:70:a5:40:60:ea:d0:88:81:cd:10: 53:f7:bd:e6:ad:88:ff:c4:6e:7c:cb:47:81:8b:8d: a0:ea:1d:34:46:15:d0:c0:b7:d4:4b:95:1b:ba:1d: 5d:2c:a5:d7:79:08:fc:a0:75:6f:a0:67:a9:02:1c: ce:4c:36:a2:ba:fb:69:9f:b0:e0:4a:bd:c1:9e:42: 59:16:38:4f:0e:e6:93:54:9e:a8:92:c4:c6:9e:ac: 1f:57:4e:19:b6:dd:dd:15:46:2e:23:e6:32:f7:72: c5:63:ef:91:3c:1c:69:7a:0e:18:49:c2:d5:36:5f: 90:35:b3:0b:8e:1f:d5:08:b9:89:cc:dc:30:25:9e: 99:2d:04:01:a2:a3:9c:4c:96:a1:93:dd:77:7d:6b: 92:f0:39:bb:ef:2f:83:34:75:80:cc:45:be:2c:f6: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BB:49:7A:5D:66:45:E6:15:E7:B6:38:F6:E5:41:A0:A3:E3:5F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a6:27:9b:46:0d:d7:19:ff:16:4f:37:d1:c6:22:04:c5:9e: d8:54:59:76:a4:ea:15:f0:0d:ad:40:de:50:94:5d:c5:a4:c6: d9:26:59:56:37:10:66:ee:e0:95:c2:17:e6:8f:d7:16:88:7f: 05:71:37:c0:67:3c:0a:35:b3:4d:8b:37:ec:84:f8:ce:6e:8d: 9e:fb:f8:7d:c2:1d:66:49:9f:c3:8c:27:fd:86:2b:88:33:da: e4:c9:68:1f:e6:c4:73:83:ab:a0:21:a5:03:02:d9:03:35:b7: 7b:7a:03:b5:7a:3c:f7:71:78:21:f8:c4:4d:1e:17:e6:b0:74: a0:5b:cc:84:75:82:01:c6:9b:a6:f7:8e:86:b8:46:a4:87:50: be:f4:f4:21:44:5f:42:87:20:65:1c:c0:83:7b:d3:42:1a:59: 95:04:d3:04:4e:23:18:f2:0f:de:a5:fb:a3:b3:3e:e2:1d:39: 4a:43:4e:1b:99:06:ec:4a:fb:74:4f:cf:8d:b8:ab:4a:15:06: 66:eb:5c:c2:a1:b5:d8:3a:a2:b4:4f:6a:c7:68:4e:3c:f6:37: be:d8:91:00:34:e5:14:d5:dc:93:ec:30:39:c8:e6:dd:76:9e: 03:42:07:e3:34:c9:9c:bb:36:b5:fa:f0:0a:bd:ac:59:11:64: a5:43:57:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0mRLtc+x3YUgsix4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MjRmM2JhZGItODc5ZC00MWYzLWIyZTYtZjk2NWM4NmI2YTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSlqijJ9yRLbmHXxL6RGSJo3MUzLMYOVNc43 MO8AEcLh1zJPwqF3fHvqehgfXZ8Ofq75vbPx1SIfSDJuFiiTI268FQ45eYJQbLM0 K3mEMxCZkBZ1iTTdATTlg38cd3ClQGDq0IiBzRBT973mrYj/xG58y0eBi42g6h00 RhXQwLfUS5Ubuh1dLKXXeQj8oHVvoGepAhzOTDaiuvtpn7DgSr3BnkJZFjhPDuaT VJ6oksTGnqwfV04Ztt3dFUYuI+Yy93LFY++RPBxpeg4YScLVNl+QNbMLjh/VCLmJ zNwwJZ6ZLQQBoqOcTJahk913fWuS8Dm77y+DNHWAzEW+LPZeBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAa7SXpdZkXmFee2OPblQaCj41+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQxNzBjZTItMjA1ZC0z NWZhLWJhMDMtZDJhY2RkM2NlMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBypiebRg3XGf8WTzfRxiIExZ7YVFl2pOoV8A2tQN5QlF3FpMbZJllW NxBm7uCVwhfmj9cWiH8FcTfAZzwKNbNNizfshPjObo2e+/h9wh1mSZ/DjCf9hiuI M9rkyWgf5sRzg6ugIaUDAtkDNbd7egO1ejz3cXgh+MRNHhfmsHSgW8yEdYIBxpum 946GuEakh1C+9PQhRF9ChyBlHMCDe9NCGlmVBNMETiMY8g/epfujsz7iHTlKQ04b mQbsSvt0T8+NuKtKFQZm61zCobXYOqK0T2rHaE489je+2JEANOUU1dyT7DA5yObd dp4DQgfjNMmcuza1+vAKvaxZEWSlQ1eW -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:35 2026 by rpki-client