$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa File: 63db3ed2-26ed-3f99-9a9b-2878649952c7.roa (raw, json) Hash identifier: XaRrm6D5FOkMXLgzc7RXI2EREwKoTqqQ09IGkBZ5H6Q= Subject key identifier: 1D:7F:51:41:27:80:40:7B:63:B7:40:DA:4A:70:6F:C2:A4:5B:87:EA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498525DE3984EB7F2BBB87B0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 208.76.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:25:de:39:84:eb:7f:2b:bb:87:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=00e253c8-e0ea-4cbc-9cfd-33eaa0ed3938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4d:42:65:1a:4e:b7:56:e0:9d:af:84:c8:75: 77:cd:e3:6e:97:c9:c6:02:ea:2b:3d:b3:c2:e0:2c: 16:bc:1e:c8:82:8b:8f:61:6f:d2:ca:8e:e9:3e:2f: e0:84:4a:34:b3:23:b0:c7:f1:45:4e:14:04:65:e3: f2:4d:26:84:65:f7:d8:d0:c0:0d:b7:09:e8:ec:61: 3b:81:12:cb:fd:a2:bb:80:ea:3d:71:07:b0:56:73: 9f:24:4a:a9:dd:23:2e:42:01:c2:90:ba:c7:51:5b: ed:14:68:65:01:aa:34:c4:ae:6f:13:e0:36:37:90: 02:d7:69:04:8f:92:36:52:3c:5c:97:50:54:44:ea: 51:a0:6d:90:7a:c1:be:13:85:83:a7:c7:72:3a:c7: ef:9c:5a:d6:2b:67:03:85:4a:7a:7d:1a:db:3c:08: 33:e5:6b:1b:83:e3:20:9a:98:ca:29:c5:3f:7e:bb: b0:4e:b1:b7:46:6a:de:86:3e:91:59:61:35:45:08: 78:69:dc:13:98:04:21:74:86:9c:70:7e:7a:63:9c: 34:00:52:0b:6e:17:a1:07:9d:06:15:88:ae:9f:e2: c8:a3:77:ed:49:29:cc:c4:5a:ce:ad:7a:8f:c4:fb: 56:f9:c9:53:5b:23:3b:73:86:96:f7:fc:a7:20:84: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7F:51:41:27:80:40:7B:63:B7:40:DA:4A:70:6F:C2:A4:5B:87:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ef:db:a4:68:e6:66:8f:91:d5:07:10:1f:0d:2e:09:9e:9a: df:41:e6:18:3e:4c:46:2a:0c:ed:c7:a1:4e:db:fb:8b:d4:74: 36:36:6c:f6:fa:da:23:7e:7f:42:a9:f9:91:fc:6c:2c:54:37: f2:62:77:bc:59:5d:72:75:71:00:e9:56:44:0a:41:0e:25:60: 8c:8d:4e:b8:9e:d7:b3:2b:35:44:83:52:4f:d6:cc:fc:4a:e9: 28:86:79:f9:b4:46:40:c2:7c:0c:a0:85:1d:24:38:cf:8e:33: e0:f6:97:0c:14:47:ce:14:c5:2c:a6:44:e9:87:43:97:ee:c1: 3f:a5:48:47:e9:4e:f9:e5:a0:30:01:d0:c8:b7:c1:d0:6b:0f: 6e:8e:73:c3:2f:e1:b3:68:c5:4b:96:f1:25:4c:ab:08:41:00: e8:b2:d3:e4:b2:e5:ab:3b:47:c0:30:f0:49:f2:78:be:84:29: c9:bc:2d:39:a2:d3:89:f2:c3:be:e1:f8:85:87:63:09:c3:e7: 29:8b:c7:f3:f8:87:e0:89:fb:37:b4:31:2d:29:97:79:39:87: 52:0f:c6:cf:ac:c8:37:ec:9b:8e:1e:bd:9e:61:4b:7b:0f:df: 6b:4c:53:01:93:87:8f:03:21:b2:ad:f1:04:2c:75:5a:3f:4f: 92:3b:03:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhSXeOYTrfyu7h7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDBlMjUzYzgtZTBlYS00Y2JjLTljZmQtMzNlYWEwZWQzOTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU1CZRpOt1bgna+EyHV3zeNul8nGAuorPbPC 4CwWvB7IgouPYW/Syo7pPi/ghEo0syOwx/FFThQEZePyTSaEZffY0MANtwno7GE7 gRLL/aK7gOo9cQewVnOfJEqp3SMuQgHCkLrHUVvtFGhlAao0xK5vE+A2N5AC12kE j5I2Ujxcl1BUROpRoG2QesG+E4WDp8dyOsfvnFrWK2cDhUp6fRrbPAgz5Wsbg+Mg mpjKKcU/fruwTrG3Rmrehj6RWWE1RQh4adwTmAQhdIaccH56Y5w0AFILbhehB50G FYiun+LIo3ftSSnMxFrOrXqPxPtW+clTWyM7c4aW9/ynIIQaKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1/UUEngEB7Y7dA2kpwb8KkW4fqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjNkYjNlZDItMjZlZC0z Zjk5LTlhOWItMjg3ODY0OTk1MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbv26Ro5maPkdUHEB8NLgmemt9B5hg+TEYqDO3HoU7b+4vUdDY2bPb6 2iN+f0Kp+ZH8bCxUN/Jid7xZXXJ1cQDpVkQKQQ4lYIyNTrie17MrNUSDUk/WzPxK 6SiGefm0RkDCfAyghR0kOM+OM+D2lwwUR84UxSymROmHQ5fuwT+lSEfpTvnloDAB 0Mi3wdBrD26Oc8Mv4bNoxUuW8SVMqwhBAOiy0+Sy5as7R8Aw8EnyeL6EKcm8LTmi 04nyw77h+IWHYwnD5ymLx/P4h+CJ+ze0MS0pl3k5h1IPxs+syDfsm44evZ5hS3sP 32tMUwGTh48DIbKt8QQsdVo/T5I7AxQ= -----END CERTIFICATE-----Generated at Sat Sep 26 04:16:47 2026 by rpki-client