$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b6354a1-3d07-30eb-a798-bc15c348444c.roa File: 3b6354a1-3d07-30eb-a798-bc15c348444c.roa (raw, json) Hash identifier: L1PtIZRg9LvJkc4lQyzdUmr36JGsnHW14OeIx3q3INM= Subject key identifier: 56:4B:7A:17:5A:96:FA:C0:4D:32:9D:3C:EE:1E:C5:E0:0F:68:7F:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC67A225CD4B85E5146DD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b6354a1-3d07-30eb-a798-bc15c348444c.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.80/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:7a:22:5c:d4:b8:5e:51:46:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=311da27d-8eed-443e-8d48-ca00eef82405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:fc:3d:6d:b3:e4:4b:65:20:71:46:1c:03: 81:aa:a9:92:90:48:18:b7:10:59:94:34:56:6f:44: 7a:04:33:58:3c:95:cd:63:1c:52:7b:30:7a:0b:38: 25:8e:23:be:6c:5e:48:b5:9b:21:7a:25:07:19:80: da:2f:ea:a7:12:85:13:8e:0d:ec:6c:08:48:ac:2f: 72:0d:cb:54:4d:fc:3d:ec:27:65:d0:99:68:b4:6b: 32:e5:df:12:3a:77:63:48:b5:fd:fa:ff:f3:1b:eb: a4:10:67:03:d7:d2:50:9a:01:83:9d:d9:b0:dc:de: d3:a6:a2:10:63:7b:91:dd:b6:f6:dc:39:1f:dd:8d: 03:ec:29:39:12:aa:58:d7:e5:9b:87:1a:1d:4a:05: a4:1f:cb:85:97:29:82:5f:2a:ac:83:33:5a:2f:66: d2:5b:33:7f:3d:b6:2f:5a:96:e4:19:a2:a0:49:ca: 40:a4:bb:40:96:5e:d5:f2:33:e3:03:7c:31:19:3c: fd:1f:96:45:01:0f:17:87:3f:24:e8:7d:29:9c:f5: 42:9b:f9:07:84:0f:6d:f7:f4:c1:29:7d:6b:44:62: b1:58:90:33:6a:b7:35:d1:67:80:b6:d3:20:6c:1d: 20:1b:cf:fa:c9:e9:05:6d:e7:3c:3c:8f:01:e4:f5: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4B:7A:17:5A:96:FA:C0:4D:32:9D:3C:EE:1E:C5:E0:0F:68:7F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b6354a1-3d07-30eb-a798-bc15c348444c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.80/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a5:fa:9d:ae:44:12:12:bc:a9:b3:01:83:36:91:92:e8:b6: fa:31:82:23:30:16:2f:48:0d:d8:db:4e:99:61:e7:bb:89:3f: 97:d8:3d:69:f4:92:89:c1:7f:f5:fa:7f:2f:fd:c4:74:f2:f5: d8:de:22:80:17:b3:06:1c:b8:3e:6c:27:52:63:a8:37:27:5a: 25:73:58:1a:67:fc:58:61:c7:4b:cb:95:8d:f1:8b:6d:7e:0e: 3c:e4:e1:28:d5:8a:3b:db:a2:66:26:17:81:d9:b2:6a:42:08: ea:67:21:34:33:03:6c:27:d6:0a:c6:ed:d4:23:75:8b:ff:87: 6a:7a:b6:e0:f1:ec:b9:de:f6:d4:f6:f4:01:24:33:af:a2:c7: 9d:a6:e3:cf:51:a7:42:99:02:ac:01:f4:84:fd:d4:1a:0d:ae: c1:e6:1a:3d:52:e9:c7:d6:39:6b:d8:c1:88:d6:1e:48:6b:32: 07:95:17:fa:e9:9d:b9:2c:07:05:4c:03:cb:60:e6:ce:f5:67: ad:c7:d2:5d:78:72:57:99:10:49:da:14:01:b2:4f:f6:d9:b1: a1:b8:f5:d8:e9:68:50:1b:f3:1f:77:2a:f9:f4:af:05:11:fc: 01:f5:6e:4a:b0:a0:9f:d9:8d:07:70:e1:46:18:b3:c2:90:63: 5f:c4:80:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/MxnoiXNS4XlFG3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk MzExZGEyN2QtOGVlZC00NDNlLThkNDgtY2EwMGVlZjgyNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJv8PW2z5EtlIHFGHAOBqqmSkEgYtxBZlDRW b0R6BDNYPJXNYxxSezB6CzgljiO+bF5ItZsheiUHGYDaL+qnEoUTjg3sbAhIrC9y DctUTfw97Cdl0JlotGsy5d8SOndjSLX9+v/zG+ukEGcD19JQmgGDndmw3N7TpqIQ Y3uR3bb23Dkf3Y0D7Ck5EqpY1+WbhxodSgWkH8uFlymCXyqsgzNaL2bSWzN/PbYv WpbkGaKgScpApLtAll7V8jPjA3wxGTz9H5ZFAQ8Xhz8k6H0pnPVCm/kHhA9t9/TB KX1rRGKxWJAzarc10WeAttMgbB0gG8/6yekFbec8PI8B5PXdTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFZLehdalvrATTKdPO4exeAPaH8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2I2MzU0YTEtM2QwNy0z MGViLWE3OTgtYmMxNWMzNDg0NDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExHUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDpfqdrkQSErypswGDNpGS6Lb6MYIjMBYvSA3Y206ZYee7iT+X2D1p 9JKJwX/1+n8v/cR08vXY3iKAF7MGHLg+bCdSY6g3J1olc1gaZ/xYYcdLy5WN8Ytt fg485OEo1Yo726JmJheB2bJqQgjqZyE0MwNsJ9YKxu3UI3WL/4dqerbg8ey53vbU 9vQBJDOvosedpuPPUadCmQKsAfSE/dQaDa7B5ho9UunH1jlr2MGI1h5IazIHlRf6 6Z25LAcFTAPLYObO9Wetx9JdeHJXmRBJ2hQBsk/22bGhuPXY6WhQG/Mfdyr59K8F EfwB9W5KsKCf2Y0HcOFGGLPCkGNfxIDr -----END CERTIFICATE-----Generated at Sun Nov 15 17:45:02 2026 by rpki-client