$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8e4ec87f-df64-396c-9179-20afcafeea87.roa File: 8e4ec87f-df64-396c-9179-20afcafeea87.roa (raw, json) Hash identifier: AR2BWXyCab7331dE8htXEt7uVe3lJk/VAAWKvlnkxs8= Subject key identifier: 77:79:C9:05:EC:43:06:A1:16:A5:70:DE:B2:B5:E9:54:5F:FE:3F:35 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F0AA22733C05F84994B0E61A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8e4ec87f-df64-396c-9179-20afcafeea87.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 13536 IP address blocks: 108.171.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:27:33:c0:5f:84:99:4b:0e:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=8b927bef-6442-47c4-b807-384d9885913b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4d:66:e7:07:5d:8e:73:7b:85:e4:5d:61:fb: b4:42:98:53:04:a0:2b:15:9f:7e:c1:7c:91:82:6c: 9a:72:cc:49:48:e7:c5:0a:7f:4e:ed:b2:9f:93:27: d1:c5:65:94:37:97:8e:14:f9:cf:34:27:ce:d1:91: ae:ea:b2:b8:0f:b3:95:d5:f9:ec:e9:d2:70:fc:b8: 28:da:fd:7f:f5:5e:65:29:92:08:2a:45:36:42:c5: 70:4a:ed:1b:75:33:42:b7:b1:3d:dc:41:7e:8e:8d: 94:5b:8f:89:a1:9e:49:7a:b6:46:3b:58:16:5a:4c: 18:75:e9:f8:b0:9f:f5:2c:98:ab:79:50:fd:ec:b4: e3:a2:4f:08:d1:c0:1f:84:d7:30:2d:04:5f:2b:6e: 95:13:34:5f:0f:9a:48:d3:7b:80:97:e8:af:5d:c6: 4e:8a:a1:51:a4:01:8d:05:bd:01:72:b0:d9:2f:29: ca:50:91:67:c7:bc:12:37:f3:41:95:0d:56:2b:4a: 6c:05:9b:8d:b5:45:e1:64:f8:84:18:f2:67:11:57: cd:ba:6f:40:3a:8a:e3:65:8d:9e:d5:1f:a5:2c:2a: 75:62:ef:07:45:0b:20:81:50:75:eb:da:81:09:97: 86:29:c9:b9:e4:1f:ed:91:58:98:99:8a:d1:fb:8f: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:79:C9:05:EC:43:06:A1:16:A5:70:DE:B2:B5:E9:54:5F:FE:3F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8e4ec87f-df64-396c-9179-20afcafeea87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 108.171.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:7f:b2:b7:a8:bb:8d:8a:58:83:4b:a3:6d:dc:9d:db:d4:16: 3f:ba:bb:00:45:fb:ab:d5:9e:bc:46:67:25:f2:e6:db:60:69: 15:d5:e0:fe:e3:23:97:f8:8b:42:fa:b1:3b:da:64:7b:7c:db: ba:b6:75:0c:68:98:d8:95:8e:95:03:44:04:15:81:98:08:e4: 84:17:47:79:e4:1a:0a:a9:e3:5e:ab:40:7d:70:9e:4a:ed:5b: e4:aa:d6:2b:8e:91:1a:dc:74:9b:ed:ba:26:9a:df:32:86:9f: ee:1d:e4:12:23:fa:04:8b:e4:43:16:09:50:d8:68:da:43:cd: cd:ec:3b:31:20:de:10:7f:69:ab:aa:9c:05:02:b0:3f:d5:b5: 13:b4:15:42:8c:59:b3:02:e5:21:cd:b7:49:82:5f:26:3c:65: 8d:6c:3d:98:71:61:ae:c3:31:5d:20:0a:23:cb:2a:68:94:c2: 48:ea:43:c0:2c:7a:0f:38:aa:18:39:42:23:3e:ee:79:ef:a9: f1:07:26:30:8b:a7:cc:98:e7:3b:48:1d:a8:d4:b2:4e:47:4c: d5:cb:ee:b5:4c:a8:9c:9f:93:70:8d:39:e8:3d:ca:d5:17:de: a0:6d:84:90:dd:be:c4:b6:58:4d:2e:c4:06:38:3f:75:42:f4: 2f:73:20:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoiczwF+EmUsOYaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk OGI5MjdiZWYtNjQ0Mi00N2M0LWI4MDctMzg0ZDk4ODU5MTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU1m5wddjnN7heRdYfu0QphTBKArFZ9+wXyR gmyacsxJSOfFCn9O7bKfkyfRxWWUN5eOFPnPNCfO0ZGu6rK4D7OV1fns6dJw/Lgo 2v1/9V5lKZIIKkU2QsVwSu0bdTNCt7E93EF+jo2UW4+JoZ5JerZGO1gWWkwYden4 sJ/1LJireVD97LTjok8I0cAfhNcwLQRfK26VEzRfD5pI03uAl+ivXcZOiqFRpAGN Bb0BcrDZLynKUJFnx7wSN/NBlQ1WK0psBZuNtUXhZPiEGPJnEVfNum9AOorjZY2e 1R+lLCp1Yu8HRQsggVB169qBCZeGKcm55B/tkViYmYrR+4+46wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHd5yQXsQwahFqVw3rK16VRf/j81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGU0ZWM4N2YtZGY2NC0z OTZjLTkxNzktMjBhZmNhZmVlYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKh/sreou42KWINLo23cndvUFj+6uwBF+6vVnrxGZyXy5ttgaRXV4P7j I5f4i0L6sTvaZHt827q2dQxomNiVjpUDRAQVgZgI5IQXR3nkGgqp416rQH1wnkrt W+Sq1iuOkRrcdJvtuiaa3zKGn+4d5BIj+gSL5EMWCVDYaNpDzc3sOzEg3hB/aauq nAUCsD/VtRO0FUKMWbMC5SHNt0mCXyY8ZY1sPZhxYa7DMV0gCiPLKmiUwkjqQ8As eg84qhg5QiM+7nnvqfEHJjCLp8yY5ztIHajUsk5HTNXL7rVMqJyfk3CNOeg9ytUX 3qBthJDdvsS2WE0uxAY4P3VC9C9zIMo= -----END CERTIFICATE-----Generated at Tue Sep 22 14:13:11 2026 by rpki-client