$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/ccea6cc0-a7f3-31be-a4cd-d87500269d67.roa File: ccea6cc0-a7f3-31be-a4cd-d87500269d67.roa (raw, json) Hash identifier: Kt+jMiqloiIcDi2mVp27Mvi7P4m6t2JNP6fL9bjE/5Q= Subject key identifier: 7D:B3:6A:B1:91:BC:B6:EE:71:EC:14:11:EC:95:26:46:1D:06:37:F3 Certificate issuer: /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec Certificate serial: 010D0C9F4328584F26750C967D752ABEAA544880 Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/ccea6cc0-a7f3-31be-a4cd-d87500269d67.roa Signing time: Sat 12 Sep 2026 12:12:00 +0000 ROA not before: Sat 12 Sep 2026 12:12:00 +0000 ROA not after: Fri 11 Dec 2026 13:12:00 +0000 asID: 11179 IP address blocks: 108.163.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:75:0c:96:7d:75:2a:be:aa:54:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec Validity Not Before: Sep 12 12:12:00 2026 GMT Not After : Dec 11 13:12:00 2026 GMT Subject: CN=adbb306e-05b2-4fcb-92dd-536d4259225b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:d7:ba:b2:3c:d9:a9:02:3a:88:51:da:3e: fc:42:81:b8:6a:26:89:7c:0c:42:7a:f5:c5:19:35: 51:31:ab:99:c8:00:4d:af:65:4c:1b:a4:5e:01:28: bd:5a:cc:17:59:59:16:2e:de:4b:61:3f:32:11:7e: a4:a9:86:dd:21:86:80:60:0a:85:5c:42:79:e1:99: 20:e9:22:71:10:50:90:27:75:ba:7c:a5:6d:38:55: 75:c5:c5:ab:af:47:20:51:a5:11:49:dd:40:27:eb: bf:6b:a3:6b:27:54:fe:f9:a7:d1:47:b7:16:8d:1b: 5f:05:61:87:a7:2c:4a:45:59:08:09:7d:cb:23:3f: e6:8f:63:0f:bd:e7:06:6f:a4:86:67:02:30:da:9f: c7:72:55:b6:a0:c6:db:bb:cf:c9:a4:d3:29:3e:0c: 27:24:c6:dc:30:17:ce:78:91:61:a3:52:bb:80:3f: ca:55:07:05:a5:ab:61:52:62:a9:6f:f0:51:ca:5b: bb:ea:8a:76:f8:36:1e:41:0c:64:eb:85:ae:70:83: b6:14:9f:72:75:d8:78:cd:c2:06:bd:ec:2b:eb:20: 6e:07:06:85:75:a5:2c:60:8a:26:85:75:b1:d1:64: be:13:c5:63:a1:21:1b:72:c2:18:b8:90:07:f4:08: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B3:6A:B1:91:BC:B6:EE:71:EC:14:11:EC:95:26:46:1D:06:37:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/ccea6cc0-a7f3-31be-a4cd-d87500269d67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl X509v3 Authority Key Identifier: keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer sbgp-ipAddrBlock: critical IPv4: 108.163.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d7:d9:e4:b7:35:c7:15:c1:c6:a8:f9:ab:e9:09:e1:5e:0c: 01:91:4a:51:ec:8e:56:7d:72:e3:34:dd:e6:ab:0a:06:a6:e1: d2:a5:6e:a4:24:be:e7:d2:d0:d7:46:f4:b6:3c:35:a7:57:57: e8:38:46:15:93:17:fb:d5:13:e6:0d:22:7c:31:01:b1:8b:eb: 45:19:94:5d:ec:f2:aa:a3:7b:7f:30:e3:cd:32:72:3f:db:52: f4:ef:de:24:79:a6:42:e9:87:7a:ec:70:78:2d:a4:d2:15:ed: e8:02:cf:57:82:4e:27:f9:04:5d:b0:33:8f:43:2d:f7:51:eb: 5e:99:44:20:73:e9:ee:93:0c:95:43:4e:20:a6:e8:c0:4e:34: 86:a5:d0:a4:c0:79:36:ad:31:85:96:e5:09:be:47:40:09:08: 34:a4:22:c7:18:65:d5:df:9a:94:cc:43:19:e4:3b:fc:04:93: 36:77:1e:6d:42:6d:1c:07:a7:aa:aa:d8:26:59:e1:61:85:96: c8:88:5d:4b:82:32:be:f8:f7:eb:00:76:73:14:42:a5:49:1a: fb:d3:8e:26:b3:1a:c4:db:a9:41:7c:9a:18:b3:da:23:23:e2: 9a:5c:41:2e:f6:da:ab:29:7b:ef:c3:4b:15:63:e4:89:9c:bf: f0:9e:06:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mdQyWfXUqvqpUSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjMzNiZDUtOWRmNC00YWIwLWIwODQtOGQ1OGU1MmZm N2VjMB4XDTI2MDkxMjEyMTIwMFoXDTI2MTIxMTEzMTIwMFowLzEtMCsGA1UEAxMk YWRiYjMwNmUtMDViMi00ZmNiLTkyZGQtNTM2ZDQyNTkyMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui7XurI82akCOohR2j78QoG4aiaJfAxCevXF GTVRMauZyABNr2VMG6ReASi9WswXWVkWLt5LYT8yEX6kqYbdIYaAYAqFXEJ54Zkg 6SJxEFCQJ3W6fKVtOFV1xcWrr0cgUaURSd1AJ+u/a6NrJ1T++afRR7cWjRtfBWGH pyxKRVkICX3LIz/mj2MPvecGb6SGZwIw2p/HclW2oMbbu8/JpNMpPgwnJMbcMBfO eJFho1K7gD/KVQcFpathUmKpb/BRylu76op2+DYeQQxk64WucIO2FJ9yddh4zcIG vewr6yBuBwaFdaUsYIomhXWx0WS+E8VjoSEbcsIYuJAH9AgaWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2zarGRvLbucewUEeyVJkYdBjfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMz M2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4ZTUyZmY3ZWMvY2NlYTZjYzAtYTdmMy0z MWJlLWE0Y2QtZDg3NTAwMjY5ZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWFjMzNiZDUtOWRmNC00YWIwLWIw ODQtOGQ1OGU1MmZmN2VjLzlhYzMzYmQ1LTlkZjQtNGFiMC1iMDg0LThkNThlNTJm ZjdlYy5jcmwwHwYDVR0jBBgwFoAUtvOo9swQc0Y4X6tqyUfYdDIPlMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85YWMzM2JkNS05ZGY0LTRhYjAtYjA4NC04ZDU4 ZTUyZmY3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKNUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATX2eS3NccVwcao+avpCeFeDAGRSlHsjlZ9cuM03earCgam4dKlbqQk vufS0NdG9LY8NadXV+g4RhWTF/vVE+YNInwxAbGL60UZlF3s8qqje38w480ycj/b UvTv3iR5pkLph3rscHgtpNIV7egCz1eCTif5BF2wM49DLfdR616ZRCBz6e6TDJVD TiCm6MBONIal0KTAeTatMYWW5Qm+R0AJCDSkIscYZdXfmpTMQxnkO/wEkzZ3Hm1C bRwHp6qq2CZZ4WGFlsiIXUuCMr749+sAdnMUQqVJGvvTjiazGsTbqUF8mhiz2iMj 4ppcQS722qspe+/DSxVj5Imcv/CeBjM= -----END CERTIFICATE-----Generated at Mon Sep 21 18:00:57 2026 by rpki-client