$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa File: 43f0c32a-4c18-3924-b3cc-013a54cd1812.roa (raw, json) Hash identifier: rsSkPZafju4QpXIAPzuQ9YHt0MO+thJmsrt5Ejgykws= Subject key identifier: E4:9D:81:DC:D6:91:D6:58:F3:AE:52:36:81:2A:D5:58:13:A0:45:20 Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Certificate serial: 010D0C9F4328584CCFD73BD3CC25B09BC52EBD00 Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa Signing time: Tue 10 Feb 2026 02:00:31 +0000 ROA not before: Tue 10 Feb 2026 02:00:31 +0000 ROA not after: Mon 11 May 2026 01:00:31 +0000 asID: 396982 IP address blocks: 108.174.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:d7:3b:d3:cc:25:b0:9b:c5:2e:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Validity Not Before: Feb 10 02:00:31 2026 GMT Not After : May 11 01:00:31 2026 GMT Subject: CN=23633829-7803-4a5f-952e-093da54e06a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:72:dd:8c:1d:2d:ff:46:75:05:e6:65:64: 46:95:54:d5:95:8e:c2:cb:75:51:8f:58:3a:0f:d1: 15:20:26:69:51:f1:cd:9e:0b:8a:4b:9e:6f:67:7e: 4f:9d:fc:46:df:a4:ac:f7:3a:97:5c:38:ab:6c:e1: f7:bc:06:37:19:0b:0c:20:bc:32:42:82:17:73:3c: 97:42:af:42:80:2c:40:96:b2:a4:5a:c8:3e:2b:a5: c3:14:8e:bc:f4:b1:31:72:e2:e3:83:1b:e4:23:47: 82:57:3b:96:84:a8:1f:aa:ea:8c:b6:ba:03:ab:31: 4a:52:c2:de:43:60:ba:89:e2:62:d5:02:77:90:60: 14:bd:8f:f8:ea:1d:37:2e:47:b3:13:c0:ff:24:f6: 68:7c:27:4e:96:d5:b3:63:1e:45:e0:ec:90:1d:56: 1a:3f:21:a7:81:58:bb:6f:02:80:e3:35:9e:4f:07: 65:fa:72:db:67:39:d9:ca:a6:c8:6d:ff:65:00:7b: 89:98:63:97:84:3d:99:dc:cb:eb:44:1c:2e:15:4f: 8f:17:9e:90:fd:37:a8:16:43:3b:1b:81:d5:18:0a: 31:62:0c:70:91:ad:f1:7d:23:e2:14:a1:cd:97:68: 88:ed:b0:ba:f9:76:80:73:17:f5:cc:71:e5:cf:bc: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9D:81:DC:D6:91:D6:58:F3:AE:52:36:81:2A:D5:58:13:A0:45:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl X509v3 Authority Key Identifier: keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer sbgp-ipAddrBlock: critical IPv4: 108.174.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d2:7c:5e:50:43:fa:58:0e:b9:24:d6:22:e8:5d:f2:41:ba: a3:19:d7:db:0c:58:30:fa:35:33:09:04:53:84:32:e5:47:ac: 97:76:c0:07:6d:00:a5:a2:49:25:0e:f8:50:10:64:8f:5c:65: a9:47:99:14:0d:16:40:e2:3d:5a:69:48:6b:10:3f:47:cb:5f: b2:4c:47:4d:f7:c7:05:0a:13:ef:ba:79:ae:53:d8:c3:df:aa: 67:a3:90:80:f9:89:8c:17:25:3f:43:20:50:26:2e:ee:0d:46: fd:69:aa:63:e9:d6:84:77:ce:d0:dd:84:ae:70:eb:f8:69:17: 7d:b7:6e:2f:49:10:d6:88:44:c0:bf:8e:cc:ba:54:dd:40:84: e3:4e:2b:11:53:e4:72:ad:ab:ef:da:85:6a:b7:2c:b0:3e:b7: 29:ae:f4:36:d0:86:87:64:f6:4e:11:68:d9:ed:0e:e0:91:be: a1:71:80:2d:be:da:c7:26:13:0d:76:71:61:94:02:bc:03:04: b9:49:43:11:1b:7c:6d:26:56:02:88:8f:3d:30:fb:38:6b:cc: 00:86:88:11:29:c2:52:93:89:65:ca:5e:17:d7:2d:66:0b:8c: 21:97:ce:5c:3f:e4:a8:9e:05:83:49:d6:f6:10:94:50:27:0c: 99:c1:26:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP1zvTzCWwm8UuvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0MzRhYTYtYjY4Zi00MWU3LThkNGItOWM4MzEyNTVm MTFjMB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk MjM2MzM4MjktNzgwMy00YTVmLTk1MmUtMDkzZGE1NGUwNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGZy3YwdLf9GdQXmZWRGlVTVlY7Cy3VRj1g6 D9EVICZpUfHNnguKS55vZ35PnfxG36Ss9zqXXDirbOH3vAY3GQsMILwyQoIXczyX Qq9CgCxAlrKkWsg+K6XDFI689LExcuLjgxvkI0eCVzuWhKgfquqMtroDqzFKUsLe Q2C6ieJi1QJ3kGAUvY/46h03LkezE8D/JPZofCdOltWzYx5F4OyQHVYaPyGngVi7 bwKA4zWeTwdl+nLbZznZyqbIbf9lAHuJmGOXhD2Z3MvrRBwuFU+PF56Q/TeoFkM7 G4HVGAoxYgxwka3xfSPiFKHNl2iI7bC6+XaAcxf1zHHlz7xQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSdgdzWkdZY865SNoEq1VgToEUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjQz NGFhNi1iNjhmLTQxZTctOGQ0Yi05YzgzMTI1NWYxMWMvNDNmMGMzMmEtNGMxOC0z OTI0LWIzY2MtMDEzYTU0Y2QxODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWI0MzRhYTYtYjY4Zi00MWU3LThk NGItOWM4MzEyNTVmMTFjLzliNDM0YWE2LWI2OGYtNDFlNy04ZDRiLTljODMxMjU1 ZjExYy5jcmwwHwYDVR0jBBgwFoAUxEt0dIPMmHr/sBSEs9h6dG0fLGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjQzNGFhNi1iNjhmLTQxZTctOGQ0Yi05Yzgz MTI1NWYxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDSfF5QQ/pYDrkk1iLoXfJBuqMZ19sMWDD6NTMJBFOEMuVHrJd2wAdt AKWiSSUO+FAQZI9cZalHmRQNFkDiPVppSGsQP0fLX7JMR033xwUKE++6ea5T2MPf qmejkID5iYwXJT9DIFAmLu4NRv1pqmPp1oR3ztDdhK5w6/hpF323bi9JENaIRMC/ jsy6VN1AhONOKxFT5HKtq+/ahWq3LLA+tymu9DbQhodk9k4RaNntDuCRvqFxgC2+ 2scmEw12cWGUArwDBLlJQxEbfG0mVgKIjz0w+zhrzACGiBEpwlKTiWXKXhfXLWYL jCGXzlw/5KieBYNJ1vYQlFAnDJnBJjQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:27:14 2026 by rpki-client