$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d37e3f2-a204-3b0f-88d6-bcbfbf814eed.roa File: 4d37e3f2-a204-3b0f-88d6-bcbfbf814eed.roa (raw, json) Hash identifier: yP4CRYQ4wjRtpV+tMrv4cHE1eKRnR0Se/Nh1MWC8IgU= Subject key identifier: 56:6E:AE:3F:30:0D:E7:A2:F4:FA:8D:1A:6D:FB:21:03:66:52:90:9E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F0AA230E7B373D12BEA0CA900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d37e3f2-a204-3b0f-88d6-bcbfbf814eed.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 13536 IP address blocks: 108.171.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:30:e7:b3:73:d1:2b:ea:0c:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=a36bb4aa-04f0-4f75-bea9-4d9e3f8be66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ab:e4:50:f8:83:48:3f:19:7b:23:52:b4:25: e5:54:4f:0e:1b:d6:86:12:de:24:45:b2:43:dc:71: 37:c2:4a:f9:dc:eb:a8:5e:5f:c5:91:f3:62:ed:25: a2:90:2d:9b:f6:98:91:0e:d4:11:45:96:b7:e2:c8: 3e:e2:b6:0b:e6:4e:76:b0:e4:1c:a9:c7:c9:fe:9f: d5:58:7b:0a:3f:83:23:2b:5d:53:e5:0a:3b:4b:be: 05:e1:7d:96:c1:ee:a7:a3:93:27:db:c1:1c:0f:51: 4c:9b:0b:91:a3:70:9f:9f:ce:ba:43:ee:47:db:69: cb:eb:26:e1:33:ac:38:75:35:f3:79:0d:9d:3d:7e: 18:56:75:39:e4:c9:18:a3:5b:46:ac:29:fc:5d:02: 0d:77:8f:b8:9e:82:4e:b9:bc:a7:0a:d7:cb:7a:2b: 5e:43:a2:6c:c3:64:71:f4:6e:3f:80:5b:07:68:70: 59:68:39:da:6b:10:4f:21:40:b4:bc:b8:a7:9d:a9: a3:d2:4d:5a:c5:80:2c:b3:28:71:8b:31:30:5a:3a: 56:2d:42:d5:73:ae:6c:de:f6:d2:b4:79:a2:7e:dd: 5d:85:e8:d3:2f:17:44:49:8a:e5:4c:01:b8:c5:ee: e4:16:5f:e2:c7:92:d1:3c:02:8c:7b:d9:19:34:e1: b1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6E:AE:3F:30:0D:E7:A2:F4:FA:8D:1A:6D:FB:21:03:66:52:90:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d37e3f2-a204-3b0f-88d6-bcbfbf814eed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 108.171.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9b:25:6f:5d:ae:bd:45:85:1d:cd:0e:f8:25:0a:3b:18:ea: ca:e4:a4:9b:6f:6d:3b:04:28:06:50:41:5c:8b:8b:7c:36:ac: 69:91:7c:87:b3:bf:b8:9b:a5:1e:2d:87:d9:67:eb:eb:ee:af: 46:98:74:30:1c:a3:4b:88:3a:7d:74:ad:24:61:53:92:84:65: 29:18:47:6c:44:bf:a2:b7:b1:14:7a:0f:2f:13:79:c6:83:67: d1:ec:f8:8a:25:38:23:75:ec:c4:29:b1:89:64:34:c4:1f:90: 3c:7c:a7:e7:f0:a5:2e:a5:b0:02:d2:c3:67:76:8d:07:b5:c2: 0f:ff:e8:98:e9:16:38:f7:02:9a:81:df:d9:a9:35:83:2e:a8: ef:74:92:ca:3a:69:ac:5d:d6:99:72:da:1c:ec:b9:50:ba:db: b9:bb:ae:33:75:a7:99:28:19:4b:a0:12:6c:f4:c9:03:cb:fa: 06:90:f5:4a:14:06:8b:eb:27:62:8a:1d:71:32:9b:33:08:bb: 10:7e:66:7d:27:df:4c:9e:0c:2f:6d:87:d3:69:7a:8e:4a:93: 91:d2:23:38:61:fc:8b:fa:09:62:de:b5:49:41:47:53:63:41: 3b:1a:b2:06:df:ca:10:cf:0d:ef:b8:9a:84:51:74:90:19:3b: 64:c9:45:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KojDns3PRK+oMqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk YTM2YmI0YWEtMDRmMC00Zjc1LWJlYTktNGQ5ZTNmOGJlNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5avkUPiDSD8ZeyNStCXlVE8OG9aGEt4kRbJD 3HE3wkr53OuoXl/FkfNi7SWikC2b9piRDtQRRZa34sg+4rYL5k52sOQcqcfJ/p/V WHsKP4MjK11T5Qo7S74F4X2Wwe6no5Mn28EcD1FMmwuRo3Cfn866Q+5H22nL6ybh M6w4dTXzeQ2dPX4YVnU55MkYo1tGrCn8XQINd4+4noJOubynCtfLeiteQ6Jsw2Rx 9G4/gFsHaHBZaDnaaxBPIUC0vLinnamj0k1axYAssyhxizEwWjpWLULVc65s3vbS tHmift1dhejTLxdESYrlTAG4xe7kFl/ix5LRPAKMe9kZNOGxiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZurj8wDeei9PqNGm37IQNmUpCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGQzN2UzZjItYTIwNC0z YjBmLTg4ZDYtYmNiZmJmODE0ZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqbJW9drr1FhR3NDvglCjsY6srkpJtvbTsEKAZQQVyLi3w2rGmRfIez v7ibpR4th9ln6+vur0aYdDAco0uIOn10rSRhU5KEZSkYR2xEv6K3sRR6Dy8TecaD Z9Hs+IolOCN17MQpsYlkNMQfkDx8p+fwpS6lsALSw2d2jQe1wg//6JjpFjj3ApqB 39mpNYMuqO90kso6aaxd1ply2hzsuVC627m7rjN1p5koGUugEmz0yQPL+gaQ9UoU BovrJ2KKHXEymzMIuxB+Zn0n30yeDC9th9Npeo5Kk5HSIzhh/Iv6CWLetUlBR1Nj QTsasgbfyhDPDe+4moRRdJAZO2TJRcI= -----END CERTIFICATE-----Generated at Mon Sep 21 14:14:56 2026 by rpki-client