$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63bd870e-8c3f-3f70-9400-805af410d7e5.roa File: 63bd870e-8c3f-3f70-9400-805af410d7e5.roa (raw, json) Hash identifier: d4Rmz9yKiAnt/4oZQtv+HypbIe36F5+wnSzkBP2bPJ0= Subject key identifier: 57:E6:FF:7E:1B:53:36:A0:F1:72:12:A1:EE:7F:B8:BB:E2:50:88:C9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584CA78CE6F9729FC2F2E1480160 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63bd870e-8c3f-3f70-9400-805af410d7e5.roa Signing time: Mon 26 Jan 2026 15:38:32 +0000 ROA not before: Mon 26 Jan 2026 15:38:32 +0000 ROA not after: Sun 26 Apr 2026 14:38:32 +0000 asID: 13536 IP address blocks: 108.171.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:8c:e6:f9:72:9f:c2:f2:e1:48:01:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 26 15:38:32 2026 GMT Not After : Apr 26 14:38:32 2026 GMT Subject: CN=85554546-c756-4d8b-b692-15256445ea96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:02:52:c1:fa:a3:b8:fb:36:7d:12:59:be: a3:85:d8:0a:01:0a:07:87:50:0b:55:36:44:73:8b: c0:b4:f1:7d:e2:54:89:b1:a4:dd:8c:f6:0a:ae:cc: 1e:9a:20:78:ae:7a:71:60:19:0d:d9:f7:bc:a1:72: 8f:35:9c:00:f1:f1:50:a0:2b:27:51:0c:37:27:25: c7:03:4f:bc:7f:6a:00:bf:25:5f:f1:3b:8e:af:3c: cc:e2:28:53:bd:30:de:ca:89:67:ee:1b:19:9f:41: d4:7f:ba:0a:90:b1:0c:81:75:24:57:4d:ab:70:d8: 2f:f6:13:f7:37:37:36:8b:04:95:4a:08:12:8e:5b: 9e:52:24:16:9f:ec:bb:3f:da:ed:38:bb:61:3c:8f: 70:8d:1c:0c:db:c0:0c:fa:13:69:89:e7:ee:ac:82: c3:5d:5c:f5:62:ec:71:47:68:e3:03:5b:3f:f0:9b: ca:95:a0:01:75:03:54:c7:e3:23:ae:02:7f:5a:35: 4b:89:b5:84:5b:b0:1a:44:67:fb:32:83:db:88:aa: c0:b7:4a:89:d7:9a:44:d8:8c:e9:6f:53:0e:6b:b1: fa:09:64:cd:24:33:50:e9:cf:dc:02:70:90:ee:7f: 4c:4b:0c:f3:5f:61:50:be:8e:4e:e0:e8:91:47:f1: 91:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E6:FF:7E:1B:53:36:A0:F1:72:12:A1:EE:7F:B8:BB:E2:50:88:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63bd870e-8c3f-3f70-9400-805af410d7e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 108.171.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a5:25:05:ef:8a:db:14:02:50:ad:56:b5:31:78:d0:9e:c0: 2c:fd:8a:72:0a:11:f2:2d:e1:c5:77:38:7a:9e:03:df:b3:77: 91:88:62:0d:ce:bc:a1:03:95:6d:0a:75:bb:70:db:94:d4:6e: 85:67:38:df:6c:77:00:33:27:7a:5d:50:ed:a6:b3:bb:c0:c2: 24:f6:e5:05:82:ab:93:f8:6a:8a:8b:c5:a2:fc:ab:a5:aa:25: f2:85:48:23:e3:44:23:30:a8:9c:2b:50:87:e7:60:b4:fa:e9: 7a:a8:fc:dc:f6:e4:e4:cb:ed:0b:c5:a2:ce:a6:0b:7f:ac:dc: 17:fa:a3:d6:83:71:ea:20:d5:d0:dd:31:ba:7e:a8:e8:84:c8: d4:b6:bf:e8:04:8e:8a:da:ee:8d:46:2d:79:14:1b:06:52:94: 8d:e9:84:fc:e0:37:f0:0c:9d:e5:12:e5:cf:7d:6c:0f:3c:a6: 8d:05:47:73:c6:54:2b:8c:79:a3:17:a4:94:a0:7f:89:dc:ab: 4d:87:b0:cf:e4:40:6b:70:ce:25:ad:fa:7c:46:e0:80:0c:9e: 1d:a6:72:ae:cd:7e:f2:14:e7:a8:0f:d6:73:3f:0f:bf:53:88: 96:76:be:31:58:49:a2:ff:6c:4a:02:0e:e7:35:4a:e5:48:ca: 25:70:02:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynjOb5cp/C8uFIAWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDEyNjE1MzgzMloXDTI2MDQyNjE0MzgzMlowLzEtMCsGA1UEAxMk ODU1NTQ1NDYtYzc1Ni00ZDhiLWI2OTItMTUyNTY0NDVlYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsoCUsH6o7j7Nn0SWb6jhdgKAQoHh1ALVTZE c4vAtPF94lSJsaTdjPYKrswemiB4rnpxYBkN2fe8oXKPNZwA8fFQoCsnUQw3JyXH A0+8f2oAvyVf8TuOrzzM4ihTvTDeyoln7hsZn0HUf7oKkLEMgXUkV02rcNgv9hP3 Nzc2iwSVSggSjlueUiQWn+y7P9rtOLthPI9wjRwM28AM+hNpiefurILDXVz1Yuxx R2jjA1s/8JvKlaABdQNUx+MjrgJ/WjVLibWEW7AaRGf7MoPbiKrAt0qJ15pE2Izp b1MOa7H6CWTNJDNQ6c/cAnCQ7n9MSwzzX2FQvo5O4OiRR/GRmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfm/34bUzag8XISoe5/uLviUIjJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjNiZDg3MGUtOGMzZi0z ZjcwLTk0MDAtODA1YWY0MTBkN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAelJQXvitsUAlCtVrUxeNCewCz9inIKEfIt4cV3OHqeA9+zd5GIYg3O vKEDlW0Kdbtw25TUboVnON9sdwAzJ3pdUO2ms7vAwiT25QWCq5P4aoqLxaL8q6Wq JfKFSCPjRCMwqJwrUIfnYLT66Xqo/Nz25OTL7QvFos6mC3+s3Bf6o9aDceog1dDd Mbp+qOiEyNS2v+gEjora7o1GLXkUGwZSlI3phPzgN/AMneUS5c99bA88po0FR3PG VCuMeaMXpJSgf4ncq02HsM/kQGtwziWt+nxG4IAMnh2mcq7NfvIU56gP1nM/D79T iJZ2vjFYSaL/bEoCDuc1SuVIyiVwAiA= -----END CERTIFICATE-----Generated at Sun Mar 1 20:08:48 2026 by rpki-client