$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa File: 31f66624-a6b9-3acd-938b-89b2386f5b28.roa (raw, json) Hash identifier: MTNik+NKiRX/IZVfoz1FMFcX625BccGOEbHkQ9shfyk= Subject key identifier: 0B:D7:FE:50:B3:92:74:C6:A2:38:DE:74:6E:E4:1C:5E:F5:A8:63:F6 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584F3E47E4DB62775924B9F7FC80 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 40788 IP address blocks: 108.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e4:db:62:77:59:24:b9:f7:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=58121c0b-0dce-4664-afea-64f07ac7acbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:81:bb:11:40:cb:42:ae:dc:3b:dc:8d:0a:1a: f9:14:77:c7:3c:ec:24:a2:dc:a8:52:76:5b:65:a2: 39:a4:09:af:83:d3:7b:b9:21:a5:3f:27:a5:67:f9: e6:01:e9:b8:45:f6:4b:64:af:1d:81:45:6a:e1:b6: 27:44:66:0b:55:71:e0:40:11:b4:0f:d7:5f:9c:1e: 9e:76:e2:1e:1b:dd:f3:23:1e:ec:3f:25:dc:fb:40: 7e:dc:86:60:9f:73:75:ef:39:c5:0d:9e:15:04:fd: 5d:ed:b3:3a:41:bd:9b:40:68:38:56:8d:8c:03:3b: 0a:a8:a2:18:f6:ae:54:76:f4:ed:de:fc:c4:80:38: 4e:86:fb:78:0c:c9:fc:52:d5:83:98:8f:7f:ef:05: af:c0:af:ab:6c:72:67:bc:16:ac:3c:39:bf:6d:2a: e1:b4:19:3e:ad:00:20:f6:66:7e:2c:15:f7:71:45: 80:7e:ad:f1:2f:ee:64:7c:22:d5:39:52:02:0b:15: 6a:8d:be:62:ee:99:9e:f5:ed:18:dd:5e:f2:e7:8a: 9b:91:48:aa:aa:ed:5e:9a:8a:25:e3:50:a6:b9:98: 5d:e2:e1:1a:13:a0:b9:2c:a7:c4:a8:46:5a:ac:44: 6e:f2:46:a1:54:bd:9b:18:06:c0:ac:f1:0d:8a:c2: db:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D7:FE:50:B3:92:74:C6:A2:38:DE:74:6E:E4:1C:5E:F5:A8:63:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 108.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:93:9f:f8:fb:bc:0c:39:ae:bb:0d:17:b4:5f:e2:d3:0b:d3: c0:f1:6d:40:c7:5f:c0:fc:a8:b3:9a:d0:e0:6d:57:e8:f1:ae: f0:fd:f4:67:d5:0f:d2:b7:17:03:14:24:0a:19:d4:7d:1c:b8: eb:a1:01:5c:f6:e6:d9:38:8e:76:15:b9:30:7b:94:f7:55:f9: 84:19:59:e2:21:e6:8c:42:00:8d:b3:13:4f:e0:11:46:78:6b: 85:e6:9c:52:9f:db:2c:97:07:9c:be:e5:8f:73:e0:e6:32:c4: 1c:6a:af:08:46:9e:4f:e5:c6:23:28:7f:a9:47:5f:7d:23:bc: d4:85:1b:07:67:eb:9d:e2:30:01:de:90:e9:8b:48:23:57:e4: fc:95:e4:5f:d8:f8:f6:fa:72:59:42:ac:2c:7f:59:51:7f:ce: 03:41:db:44:aa:f5:d1:a6:c6:94:17:9d:93:e6:77:64:57:3c: 75:1a:dc:d2:f5:e4:50:d1:6c:a5:0e:00:a7:19:63:41:d9:09: fd:44:dd:d1:37:d0:29:3e:a3:91:39:f6:b4:e4:83:71:04:e4: a2:67:db:e4:a2:ea:52:47:4f:4c:b1:b5:ab:b8:e3:28:c6:ed: cd:05:e9:bb:07:89:1e:f6:f9:57:b0:3d:13:2d:2d:aa:6c:cb: 74:26:c2:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+TbYndZJLn3/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NTgxMjFjMGItMGRjZS00NjY0LWFmZWEtNjRmMDdhYzdhY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IG7EUDLQq7cO9yNChr5FHfHPOwkotyoUnZb ZaI5pAmvg9N7uSGlPyelZ/nmAem4RfZLZK8dgUVq4bYnRGYLVXHgQBG0D9dfnB6e duIeG93zIx7sPyXc+0B+3IZgn3N17znFDZ4VBP1d7bM6Qb2bQGg4Vo2MAzsKqKIY 9q5UdvTt3vzEgDhOhvt4DMn8UtWDmI9/7wWvwK+rbHJnvBasPDm/bSrhtBk+rQAg 9mZ+LBX3cUWAfq3xL+5kfCLVOVICCxVqjb5i7pme9e0Y3V7y54qbkUiqqu1emool 41CmuZhd4uEaE6C5LKfEqEZarERu8kahVL2bGAbArPENisLbdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvX/lCzknTGojjedG7kHF71qGP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMzFmNjY2MjQtYTZiOS0z YWNkLTkzOGItODliMjM4NmY1YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbKgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiTn/j7vAw5rrsNF7Rf4tML08DxbUDHX8D8qLOa0OBtV+jxrvD99GfV D9K3FwMUJAoZ1H0cuOuhAVz25tk4jnYVuTB7lPdV+YQZWeIh5oxCAI2zE0/gEUZ4 a4XmnFKf2yyXB5y+5Y9z4OYyxBxqrwhGnk/lxiMof6lHX30jvNSFGwdn653iMAHe kOmLSCNX5PyV5F/Y+Pb6cllCrCx/WVF/zgNB20Sq9dGmxpQXnZPmd2RXPHUa3NL1 5FDRbKUOAKcZY0HZCf1E3dE30Ck+o5E59rTkg3EE5KJn2+Si6lJHT0yxtau44yjG 7c0F6bsHiR72+VewPRMtLapsy3Qmwpo= -----END CERTIFICATE-----Generated at Tue Sep 22 06:39:36 2026 by rpki-client