$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30b70245-33e2-32b3-9c0a-f731940fbf71.roa File: 30b70245-33e2-32b3-9c0a-f731940fbf71.roa (raw, json) Hash identifier: oDbm7hHp2egt8tt6HgEGOcOmcIP4Olb8bSiIUvIReAM= Subject key identifier: CA:18:7E:A6:01:90:43:9C:B1:09:6D:E3:D4:F0:02:87:57:25:D2:81 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC6796CBFB966DCBABC2800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30b70245-33e2-32b3-9c0a-f731940fbf71.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.200/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:79:6c:bf:b9:66:dc:ba:bc:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=8f7b286c-7081-49c4-83fd-6dc06e65d142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:04:ba:8b:e9:8e:6b:a2:d8:0c:5e:ac:21: bd:94:87:2e:a5:74:da:35:c8:c7:2a:70:b9:1b:4d: 6c:48:c0:2a:52:73:25:62:f3:00:87:ee:f2:ed:24: b4:cc:2c:7e:00:f3:99:96:cd:06:76:cc:e0:c5:41: ad:a3:fb:76:1a:0e:fa:e3:aa:ce:3f:aa:88:7d:2b: 15:21:f4:84:02:60:16:f5:37:11:42:cf:a4:ab:44: a2:ea:7a:a6:ac:da:27:06:b3:b3:8f:26:11:b5:15: d7:9b:d7:02:6a:f0:dd:31:57:a3:2b:4d:41:99:4a: b9:4f:ec:69:f5:cb:0d:01:1c:21:45:12:a4:d2:bb: f9:d4:84:d4:fb:49:f6:a9:1f:01:4e:56:00:46:b2: 94:b9:c9:b0:78:32:0e:08:00:c3:29:a3:37:36:e5: 43:ae:fb:00:06:64:f9:00:f4:79:fc:eb:f0:df:2d: 3e:f7:82:88:bf:25:99:d2:55:63:44:b8:0c:80:bf: 59:c1:22:89:21:9a:15:f0:49:56:49:1c:22:24:72: cc:4c:6b:ef:24:28:ed:bf:34:bd:57:79:d6:21:cf: 8b:f4:14:fb:b2:a7:62:37:c2:25:7d:fb:ec:77:af: 8d:18:97:59:c5:0d:32:ba:44:8c:fb:ee:f5:b6:ef: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:18:7E:A6:01:90:43:9C:B1:09:6D:E3:D4:F0:02:87:57:25:D2:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30b70245-33e2-32b3-9c0a-f731940fbf71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.200/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:25:e4:92:45:3d:e8:c9:0f:68:73:a8:3a:f8:6b:72:96:ab: 25:fa:7a:6a:fc:78:ee:cf:99:3b:57:b7:3c:ed:db:28:54:57: 16:10:39:f6:6c:22:fb:98:5d:15:b2:db:d6:ca:ab:2b:6f:8d: 6d:b8:29:7d:57:01:f6:81:46:83:a8:4e:c8:a5:83:a1:48:50: ba:6f:ba:74:63:d8:69:d2:8e:b6:a5:10:95:40:59:6b:52:72: 41:d0:14:c3:7a:09:11:43:2b:0b:2a:00:63:6f:7b:5b:fc:80: cb:c3:69:fd:75:3f:ba:c4:85:e2:31:94:5b:1f:08:9b:07:41: 8a:d6:f1:0b:36:15:47:29:9a:d8:2c:10:22:19:ba:c5:52:05: 98:09:1d:35:af:67:43:8e:d1:0b:9b:43:0f:a9:be:91:f8:84: 2c:e3:e0:f8:57:b5:cc:40:86:af:44:b4:69:32:96:0b:42:5b: f1:57:02:91:c2:9c:41:34:e6:5f:3f:33:86:d5:3b:df:af:41: 50:82:84:44:ca:73:86:b0:b0:8e:3e:a9:0e:89:c9:40:dc:c7: b3:75:c7:fb:95:2b:10:d0:52:d0:3b:f7:57:9c:8b:cc:f9:25: fd:7f:08:66:00:98:e9:20:ca:ae:c0:7a:54:9a:07:5e:68:69: 66:1a:5f:f7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/Mxnlsv7lm3Lq8KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk OGY3YjI4NmMtNzA4MS00OWM0LTgzZmQtNmRjMDZlNjVkMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivkEuovpjmui2AxerCG9lIcupXTaNcjHKnC5 G01sSMAqUnMlYvMAh+7y7SS0zCx+APOZls0GdszgxUGto/t2Gg7646rOP6qIfSsV IfSEAmAW9TcRQs+kq0Si6nqmrNonBrOzjyYRtRXXm9cCavDdMVejK01BmUq5T+xp 9csNARwhRRKk0rv51ITU+0n2qR8BTlYARrKUucmweDIOCADDKaM3NuVDrvsABmT5 APR5/Ovw3y0+94KIvyWZ0lVjRLgMgL9ZwSKJIZoV8ElWSRwiJHLMTGvvJCjtvzS9 V3nWIc+L9BT7sqdiN8Ilffvsd6+NGJdZxQ0yukSM++71tu+aPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMoYfqYBkEOcsQlt49TwAodXJdKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzBiNzAyNDUtMzNlMi0z MmIzLTljMGEtZjczMTk0MGZiZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUD0ExHyDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUJeSSRT3oyQ9oc6g6+Gtylqsl+npq/Hjuz5k7V7c87dsoVFcWEDn2 bCL7mF0VstvWyqsrb41tuCl9VwH2gUaDqE7IpYOhSFC6b7p0Y9hp0o62pRCVQFlr UnJB0BTDegkRQysLKgBjb3tb/IDLw2n9dT+6xIXiMZRbHwibB0GK1vELNhVHKZrY LBAiGbrFUgWYCR01r2dDjtELm0MPqb6R+IQs4+D4V7XMQIavRLRpMpYLQlvxVwKR wpxBNOZfPzOG1Tvfr0FQgoREynOGsLCOPqkOiclA3Mezdcf7lSsQ0FLQO/dXnIvM +SX9fwhmAJjpIMquwHpUmgdeaGlmGl/3 -----END CERTIFICATE-----Generated at Sun Nov 15 15:39:17 2026 by rpki-client