$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58668dbc-8f0e-3a34-8407-f15828f7af2e.roa File: 58668dbc-8f0e-3a34-8407-f15828f7af2e.roa (raw, json) Hash identifier: OLJvBN4VcyaEX5rYuZYkCHObSyVC4rpYzaisAIbX3Xc= Subject key identifier: C0:45:82:23:82:74:14:31:54:1A:A0:AC:B1:62:7C:5A:1E:32:09:B8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC69D763287A4AEC9CE16E4 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58668dbc-8f0e-3a34-8407-f15828f7af2e.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.76.71.208/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:9d:76:32:87:a4:ae:c9:ce:16:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=dc75bf14-4b0e-46fb-8d73-66bd5b4cbf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b3:3e:0f:c8:71:8f:26:0a:e2:e4:51:c3:41: 71:50:1a:ac:f9:01:3b:58:0a:79:c4:bf:11:f7:de: f8:40:59:bb:59:57:dc:c1:89:44:28:75:5e:9e:79: 97:6c:4e:98:19:0e:d3:18:71:b1:b3:07:33:1d:0b: 77:ae:c8:9e:61:a2:0b:40:3b:d9:d2:b9:98:4c:df: a5:89:d8:f6:08:1c:c3:dc:fa:eb:f4:05:42:25:b8: ce:f3:2e:93:6d:48:76:68:c8:6c:1c:0f:42:d8:a1: a5:d4:a6:3f:3e:e3:11:de:ca:5d:f6:b7:26:27:99: 31:a5:d7:b7:a2:3b:5c:43:48:01:38:23:f6:58:67: ec:15:59:2e:f6:74:d8:fc:ea:e4:f9:6e:64:87:d5: da:ea:59:77:27:4e:13:5b:40:4c:7e:39:f6:10:d9: 33:d4:06:ab:2e:21:23:aa:8d:31:b4:15:40:75:bf: b0:65:dc:89:b3:38:99:b8:04:2c:42:c1:b9:42:e7: b4:ea:66:c1:b7:df:b4:82:77:cf:b9:49:8c:d5:02: d4:5e:65:ff:d4:77:fd:38:3c:76:82:72:7c:ef:b4: 9f:db:da:f3:6f:5a:27:36:fc:42:70:49:61:eb:d8: ba:f6:a2:84:29:9f:7b:da:bd:77:b3:95:94:33:1d: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:45:82:23:82:74:14:31:54:1A:A0:AC:B1:62:7C:5A:1E:32:09:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58668dbc-8f0e-3a34-8407-f15828f7af2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.208/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6e:93:1b:d5:05:e3:61:e6:bb:e1:2b:ec:71:5c:9f:f8:7c: 51:14:26:15:ee:4a:63:5c:f3:7b:06:3e:35:02:74:a3:96:39: 8a:89:f3:cd:3c:57:4e:ee:ab:11:60:d6:70:f1:e5:b7:02:6b: 17:3c:bf:25:21:e4:5b:fa:3a:61:b6:d0:bf:c7:5a:a4:51:c0: 02:b0:ad:7a:5f:ef:74:12:37:d3:2f:75:3c:18:ed:0f:db:54: c7:c8:d9:b9:19:f5:68:85:ad:d9:a2:a1:fd:b1:be:85:26:05: f6:52:d1:96:9a:ed:a5:a1:4d:5d:f9:a4:57:98:3b:ea:21:b2: 62:a0:1a:75:e1:f4:82:6e:92:c0:89:ac:5f:86:bc:cd:61:67: 6f:92:87:13:d0:f6:6c:5d:2a:bc:c2:5b:7c:63:01:d7:ef:06: d9:56:87:93:f6:6f:0d:ba:33:d1:1b:63:8c:58:49:34:a3:6e: 39:57:da:1e:95:13:62:d7:c4:1f:41:36:d0:3b:38:6e:6b:76: 94:2b:e2:9d:21:e0:f7:16:05:93:87:39:fe:03:2e:b0:9c:ae: 72:6b:89:8f:da:97:f6:bd:90:6d:5e:f9:2e:24:41:0d:b8:51: bd:18:01:ab:97:d1:e7:d1:c2:38:66:61:7c:66:bd:dd:04:70: 74:e2:1c:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/Mxp12MoekrsnOFuQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk ZGM3NWJmMTQtNGIwZS00NmZiLThkNzMtNjZiZDViNGNiZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrM+D8hxjyYK4uRRw0FxUBqs+QE7WAp5xL8R 9974QFm7WVfcwYlEKHVennmXbE6YGQ7TGHGxswczHQt3rsieYaILQDvZ0rmYTN+l idj2CBzD3Prr9AVCJbjO8y6TbUh2aMhsHA9C2KGl1KY/PuMR3spd9rcmJ5kxpde3 ojtcQ0gBOCP2WGfsFVku9nTY/Ork+W5kh9Xa6ll3J04TW0BMfjn2ENkz1AarLiEj qo0xtBVAdb+wZdyJsziZuAQsQsG5Que06mbBt9+0gnfPuUmM1QLUXmX/1Hf9ODx2 gnJ877Sf29rzb1onNvxCcElh69i69qKEKZ972r13s5WUMx1lXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMBFgiOCdBQxVBqgrLFifFoeMgm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTg2NjhkYmMtOGYwZS0z YTM0LTg0MDctZjE1ODI4ZjdhZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0ExH0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpbpMb1QXjYea74SvscVyf+HxRFCYV7kpjXPN7Bj41AnSjljmKifPN PFdO7qsRYNZw8eW3AmsXPL8lIeRb+jphttC/x1qkUcACsK16X+90EjfTL3U8GO0P 21THyNm5GfVoha3ZoqH9sb6FJgX2UtGWmu2loU1d+aRXmDvqIbJioBp14fSCbpLA iaxfhrzNYWdvkocT0PZsXSq8wlt8YwHX7wbZVoeT9m8NujPRG2OMWEk0o245V9oe lRNi18QfQTbQOzhua3aUK+KdIeD3FgWThzn+Ay6wnK5ya4mP2pf2vZBtXvkuJEEN uFG9GAGrl9Hn0cI4ZmF8Zr3dBHB04hzW -----END CERTIFICATE-----Generated at Sun Nov 15 20:30:02 2026 by rpki-client