$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c14e2f80-1f59-37d9-8484-270eb327919c.roa File: c14e2f80-1f59-37d9-8484-270eb327919c.roa (raw, json) Hash identifier: ZWC42yYcQooGItZr1Yi0M98fQK/oa50HrhRw2k8n4K0= Subject key identifier: 2A:9D:68:28:88:FD:ED:36:7C:47:84:D9:94:38:BF:0F:BB:38:30:C5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4C3D5DB3D27930E3C345B980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c14e2f80-1f59-37d9-8484-270eb327919c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396982 IP address blocks: 208.76.71.32/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5d:b3:d2:79:30:e3:c3:45:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1fbf02dc-d5ce-4803-8675-6268c4ce45da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:e8:ee:65:b1:9e:92:11:36:48:cc:90:05: f1:b6:65:3e:00:44:5a:18:90:ba:53:ed:72:2b:a5: 57:04:01:0e:9c:84:71:88:1a:0d:45:04:53:ee:c7: 6c:31:53:be:d6:e6:eb:c9:1e:0b:04:0d:83:c9:c3: aa:47:21:4e:1e:5a:a2:07:3e:bb:d0:4f:b3:f8:63: e7:68:13:8c:3d:ae:c7:a5:0a:c5:cc:73:95:8b:6c: 1a:c6:bf:7e:31:83:4d:58:b1:35:8f:aa:4f:05:e5: 86:c9:7a:e3:28:17:fc:e3:46:ee:2c:cd:be:46:d6: 34:c5:66:08:4f:2c:3b:23:15:67:c6:b4:68:91:b0: a3:be:98:71:d8:75:e9:1b:74:2b:e7:89:0b:f7:0a: 9d:38:28:d4:14:72:a0:3d:f9:f0:d5:35:e4:c9:a7: ce:24:1a:9e:8f:e1:b4:85:72:2b:af:31:17:eb:0e: 93:85:bb:d6:ca:11:70:9e:b0:77:56:7d:08:56:ca: ed:79:2d:a5:98:54:16:b4:53:41:59:36:65:53:14: ae:6a:e8:ab:d2:73:60:fa:51:ed:16:f8:94:63:a6: 45:0d:e4:dd:e1:9a:c8:5c:c1:15:b8:be:0a:71:81: 35:68:d5:71:db:0f:83:95:3d:49:99:f8:fc:de:66: 1a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9D:68:28:88:FD:ED:36:7C:47:84:D9:94:38:BF:0F:BB:38:30:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c14e2f80-1f59-37d9-8484-270eb327919c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.32/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3a:73:fb:61:d6:c0:80:10:13:e8:46:35:e9:27:27:22:17: a6:de:b9:22:f7:00:4e:f0:78:ec:34:ab:5c:fe:92:80:ab:5c: ea:73:a0:11:9f:5f:51:92:b3:e0:fb:c0:47:77:80:39:c0:3f: 29:4a:1f:a1:e4:41:97:94:de:62:65:2d:b0:23:b7:0f:33:22: dc:f7:53:6c:2f:4a:ac:47:88:ba:fc:9e:43:d5:76:09:bd:eb: 8a:20:64:6b:67:2e:7d:a0:7e:6a:45:c4:32:61:21:61:91:4e: 6c:4c:a8:e0:33:19:9c:92:31:a8:0b:6d:19:65:0e:1b:a8:0f: 06:f8:3f:06:89:d6:30:9d:b8:61:63:a3:b5:54:e4:a4:4f:21: 7d:1f:90:e0:64:c1:6b:48:df:38:ad:4f:8a:41:c0:4b:83:7a: 03:31:ae:f1:eb:a6:6a:50:4d:2a:60:b1:c9:25:be:16:bb:0e: 4c:57:ed:d3:a1:81:e2:64:40:af:50:6c:e6:b7:d9:37:07:29: 85:ce:0b:c4:0d:ea:c9:09:6e:23:70:ea:b6:a6:56:17:94:09: 02:dd:6a:83:04:d3:4f:f9:ee:56:f3:b1:75:20:23:3b:14:4d: f2:aa:8d:b2:6e:99:6b:0d:18:13:7b:94:eb:70:a5:23:33:37: 10:a2:7d:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9MPV2z0nkw48NFuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWZiZjAyZGMtZDVjZS00ODAzLTg2NzUtNjI2OGM0Y2U0NWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBDo7mWxnpIRNkjMkAXxtmU+AERaGJC6U+1y K6VXBAEOnIRxiBoNRQRT7sdsMVO+1ubryR4LBA2DycOqRyFOHlqiBz670E+z+GPn aBOMPa7HpQrFzHOVi2waxr9+MYNNWLE1j6pPBeWGyXrjKBf840buLM2+RtY0xWYI Tyw7IxVnxrRokbCjvphx2HXpG3Qr54kL9wqdOCjUFHKgPfnw1TXkyafOJBqej+G0 hXIrrzEX6w6ThbvWyhFwnrB3Vn0IVsrteS2lmFQWtFNBWTZlUxSuauir0nNg+lHt FviUY6ZFDeTd4ZrIXMEVuL4KcYE1aNVx2w+DlT1Jmfj83mYatwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCqdaCiI/e02fEeE2ZQ4vw+7ODDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzE0ZTJmODAtMWY1OS0z N2Q5LTg0ODQtMjcwZWIzMjc5MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzOnP7YdbAgBAT6EY16ScnIhem3rki9wBO8HjsNKtc/pKAq1zqc6AR n19RkrPg+8BHd4A5wD8pSh+h5EGXlN5iZS2wI7cPMyLc91NsL0qsR4i6/J5D1XYJ veuKIGRrZy59oH5qRcQyYSFhkU5sTKjgMxmckjGoC20ZZQ4bqA8G+D8GidYwnbhh Y6O1VOSkTyF9H5DgZMFrSN84rU+KQcBLg3oDMa7x66ZqUE0qYLHJJb4Wuw5MV+3T oYHiZECvUGzmt9k3BymFzgvEDerJCW4jcOq2plYXlAkC3WqDBNNP+e5W87F1ICM7 FE3yqo2ybplrDRgTe5TrcKUjMzcQon0K -----END CERTIFICATE-----Generated at Sun Nov 15 19:29:51 2026 by rpki-client