$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa File: c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa (raw, json) Hash identifier: tLym42937s+skzglxmMzWu8PuqzLUVpQHfWbua5EnY0= Subject key identifier: 4E:D6:54:DB:DE:86:41:E9:BB:BE:7C:28:7F:45:6A:AD:62:E8:95:CD Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F30527C756ACBC1BEBC8C8500 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 22781 IP address blocks: 108.171.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:7c:75:6a:cb:c1:be:bc:8c:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=b6ef38cf-3ebf-48d9-be83-1a6b64b2afc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:82:d4:65:5a:5b:1c:45:32:9b:80:62:07:9a: 51:22:a5:f4:33:fa:b0:04:fb:73:3d:c3:bd:98:f1: 77:d9:fc:78:69:5b:33:26:d3:1e:74:aa:a2:35:91: 7b:f9:0d:9b:46:0e:16:25:b5:66:a3:8c:a0:90:10: c0:26:bb:98:93:df:b5:ab:d3:d7:b5:25:19:35:53: 5b:2e:52:fe:c6:9f:e4:ac:fa:af:17:5c:c2:d0:34: 44:79:62:a5:80:ae:44:28:a3:2f:f9:0a:5d:a7:fc: ff:5e:aa:98:0e:3e:08:6b:9d:bf:f8:6b:70:3d:32: b8:6a:7f:f6:5d:6b:81:1f:b4:24:2b:c0:d4:b8:5c: 75:3d:27:88:93:88:a6:ba:84:69:f3:fc:15:54:0f: 73:06:bd:e9:f2:3f:15:61:ba:a4:a9:36:84:fb:19: 81:21:60:92:12:06:8e:cd:ac:da:ad:6d:51:73:2c: 8a:0d:36:b5:17:10:87:e2:08:dd:df:88:54:65:f2: 4c:19:7e:2c:21:86:b2:d3:9e:d1:e7:71:c7:a7:82: c1:bd:e3:f7:94:80:3d:fe:41:61:d4:e7:ee:8d:00: 90:c7:8c:50:6f:a0:1f:07:72:86:43:ff:81:fd:3e: ae:cf:47:78:8b:63:36:de:d4:69:ad:36:50:d2:14: 56:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D6:54:DB:DE:86:41:E9:BB:BE:7C:28:7F:45:6A:AD:62:E8:95:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c7438f09-32a4-3097-b9b4-fa07ac7a22f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e1:9c:17:25:5b:69:73:d9:d0:0d:1f:fe:c9:c8:1a:6d:09: 16:b0:5e:a9:0f:d0:e9:24:9f:3a:9f:ab:bb:91:82:d5:fc:0c: 06:d5:9c:ed:91:07:71:9d:ef:49:3a:7e:89:86:1f:6a:84:55: 81:37:c3:38:94:20:63:26:8e:19:ec:9e:13:b2:9b:66:96:93: 5d:64:89:7e:0e:43:11:39:cc:a8:20:68:0d:20:f2:03:75:fa: 29:b5:bd:85:10:30:69:92:ef:01:f1:72:8d:bc:36:20:fc:d2: 0c:91:60:29:4b:fb:6c:a4:2c:42:41:48:ec:ab:a5:48:2a:7d: 0e:65:87:b7:c8:de:32:73:26:53:06:62:f3:fa:7c:17:6b:1d: f3:af:ed:d1:3a:a8:19:97:9d:9a:82:ea:12:85:14:f9:f8:1b: 36:64:6e:fa:04:56:d0:b4:74:b8:b4:c6:c5:a8:cd:9f:f1:b2: af:b8:35:71:d7:98:21:c9:34:0f:a7:dc:36:4a:2f:eb:70:1d: bb:4c:d7:6d:c4:36:60:b0:6f:fe:95:2b:b4:64:34:3f:0d:33: df:05:17:21:3d:8b:87:a2:82:ec:76:0a:dd:4a:f4:14:e9:97: 6d:47:86:9f:e3:27:27:59:ac:19:41:0d:21:3e:aa:69:20:f3: 78:cf:92:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnx1asvBvryMhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YjZlZjM4Y2YtM2ViZi00OGQ5LWJlODMtMWE2YjY0YjJhZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ILUZVpbHEUym4BiB5pRIqX0M/qwBPtzPcO9 mPF32fx4aVszJtMedKqiNZF7+Q2bRg4WJbVmo4ygkBDAJruYk9+1q9PXtSUZNVNb LlL+xp/krPqvF1zC0DREeWKlgK5EKKMv+Qpdp/z/XqqYDj4Ia52/+GtwPTK4an/2 XWuBH7QkK8DUuFx1PSeIk4imuoRp8/wVVA9zBr3p8j8VYbqkqTaE+xmBIWCSEgaO zazarW1RcyyKDTa1FxCH4gjd34hUZfJMGX4sIYay057R53HHp4LBveP3lIA9/kFh 1OfujQCQx4xQb6AfB3KGQ/+B/T6uz0d4i2M23tRprTZQ0hRWswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7WVNvehkHpu758KH9Faq1i6JXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYzc0MzhmMDktMzJhNC0z MDk3LWI5YjQtZmEwN2FjN2EyMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7hnBclW2lz2dANH/7JyBptCRawXqkP0Okknzqfq7uRgtX8DAbVnO2R B3Gd70k6fomGH2qEVYE3wziUIGMmjhnsnhOym2aWk11kiX4OQxE5zKggaA0g8gN1 +im1vYUQMGmS7wHxco28NiD80gyRYClL+2ykLEJBSOyrpUgqfQ5lh7fI3jJzJlMG YvP6fBdrHfOv7dE6qBmXnZqC6hKFFPn4GzZkbvoEVtC0dLi0xsWozZ/xsq+4NXHX mCHJNA+n3DZKL+twHbtM123ENmCwb/6VK7RkND8NM98FFyE9i4eigux2Ct1K9BTp l21Hhp/jJydZrBlBDSE+qmkg83jPkko= -----END CERTIFICATE-----Generated at Sun Oct 11 18:49:14 2026 by rpki-client