$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa File: 43f0c32a-4c18-3924-b3cc-013a54cd1812.roa (raw, json) Hash identifier: hV9+yfLRNojDWopZFjTdsc15D0+wfT6KUOesh8gPU68= Subject key identifier: A5:80:71:54:E6:B8:A1:32:FB:6E:04:67:FD:80:1A:5B:3E:15:3F:DE Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Certificate serial: 010D0C9F4328584F331D16A758A81B6BA3396A00 Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 396982 IP address blocks: 108.174.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:16:a7:58:a8:1b:6b:a3:39:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=e5670fc4-8d8b-4912-9935-894b196b1cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:4c:d6:4f:a6:51:b3:82:8f:06:1e:39:72: 49:1c:48:ad:4c:f0:67:a1:2e:87:f4:35:ab:b4:89: c7:da:6b:e8:49:6b:15:a8:89:d3:81:c0:00:dc:b1: d3:8c:81:b0:47:e3:0d:a4:74:21:f6:c9:30:a2:bc: f3:ec:b6:90:75:c2:e4:3c:8b:33:ef:97:eb:48:6a: ea:3e:bf:a4:3c:78:2e:f8:76:05:c1:fb:b8:4b:bb: 62:b6:64:40:58:b9:c7:51:a2:94:50:1b:58:46:c7: 15:f0:e0:72:f7:73:81:cd:0d:98:d4:33:7c:e9:e9: 1a:63:2d:a5:0f:29:d1:84:58:b9:14:ea:41:e3:fc: c4:6c:d0:a4:3d:63:2e:f8:6c:8e:da:96:ee:fe:b6: 71:c4:ad:16:af:88:12:f6:49:5e:aa:9d:86:02:a4: 7d:ad:21:36:d5:e3:5f:9b:08:4d:39:a3:19:c1:e2: 8e:73:68:4b:e9:ff:c4:6d:d1:32:23:dc:0d:b1:8b: 6f:a8:f3:f5:85:24:97:2c:9f:32:57:ea:99:d7:73: ee:3d:30:15:b1:40:3b:cb:d7:98:05:df:ef:b9:db: d1:fe:e2:b8:10:62:31:00:6f:ef:a7:65:61:b8:1f: 2d:9e:b7:cf:e9:39:07:97:39:3e:30:ef:b8:d2:e6: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:71:54:E6:B8:A1:32:FB:6E:04:67:FD:80:1A:5B:3E:15:3F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/43f0c32a-4c18-3924-b3cc-013a54cd1812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl X509v3 Authority Key Identifier: keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer sbgp-ipAddrBlock: critical IPv4: 108.174.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1c:56:e0:5d:c5:fa:50:b8:14:63:d0:16:5d:7b:ad:77:73: 28:a0:89:7e:cb:3e:ff:f7:ef:ab:55:57:3b:7e:02:b2:26:06: eb:59:ac:c1:ae:4f:cd:70:45:b9:9a:25:94:a2:18:9c:f0:76: e7:6f:a7:20:bf:3b:69:14:c8:2a:bd:43:75:3f:a8:df:45:1e: ef:63:6c:a9:51:db:b0:05:80:78:35:87:32:0c:f4:7e:8f:48: b9:f6:a4:5a:a5:d8:60:b4:2a:1e:b9:f4:fc:a9:e7:e9:18:c0: 1d:48:a5:4b:ec:90:cf:df:12:be:26:ae:ba:a4:83:a9:89:30: 23:f2:75:7c:30:79:ea:46:10:b2:41:62:a2:26:f6:86:e0:ce: b2:94:b5:fc:e6:a2:66:7d:23:6e:c0:53:d6:76:94:0f:41:ce: 72:49:a2:b6:ad:64:bb:e8:9a:29:d9:1a:83:d3:ee:70:da:20: 27:fa:46:f8:37:da:4e:df:d6:2d:a5:2a:36:b1:a6:3e:04:e4: a0:c2:94:db:fb:1d:62:f8:4e:ab:81:29:48:59:0e:9a:b1:9c: f7:45:44:7f:a4:ef:a9:57:94:5e:e3:3a:28:a0:1d:01:fd:81: eb:2c:55:33:51:7e:7c:f6:ed:c9:67:8a:67:93:be:71:c0:81: 6d:5f:9f:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHRanWKgba6M5agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0MzRhYTYtYjY4Zi00MWU3LThkNGItOWM4MzEyNTVm MTFjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZTU2NzBmYzQtOGQ4Yi00OTEyLTk5MzUtODk0YjE5NmIxY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrxM1k+mUbOCjwYeOXJJHEitTPBnoS6H9DWr tInH2mvoSWsVqInTgcAA3LHTjIGwR+MNpHQh9skworzz7LaQdcLkPIsz75frSGrq Pr+kPHgu+HYFwfu4S7titmRAWLnHUaKUUBtYRscV8OBy93OBzQ2Y1DN86ekaYy2l DynRhFi5FOpB4/zEbNCkPWMu+GyO2pbu/rZxxK0Wr4gS9kleqp2GAqR9rSE21eNf mwhNOaMZweKOc2hL6f/EbdEyI9wNsYtvqPP1hSSXLJ8yV+qZ13PuPTAVsUA7y9eY Bd/vudvR/uK4EGIxAG/vp2VhuB8tnrfP6TkHlzk+MO+40uYRtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWAcVTmuKEy+24EZ/2AGls+FT/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjQz NGFhNi1iNjhmLTQxZTctOGQ0Yi05YzgzMTI1NWYxMWMvNDNmMGMzMmEtNGMxOC0z OTI0LWIzY2MtMDEzYTU0Y2QxODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWI0MzRhYTYtYjY4Zi00MWU3LThk NGItOWM4MzEyNTVmMTFjLzliNDM0YWE2LWI2OGYtNDFlNy04ZDRiLTljODMxMjU1 ZjExYy5jcmwwHwYDVR0jBBgwFoAUxEt0dIPMmHr/sBSEs9h6dG0fLGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjQzNGFhNi1iNjhmLTQxZTctOGQ0Yi05Yzgz MTI1NWYxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQcVuBdxfpQuBRj0BZde613cyigiX7LPv/376tVVzt+ArImButZrMGu T81wRbmaJZSiGJzwdudvpyC/O2kUyCq9Q3U/qN9FHu9jbKlR27AFgHg1hzIM9H6P SLn2pFql2GC0Kh659Pyp5+kYwB1IpUvskM/fEr4mrrqkg6mJMCPydXwweepGELJB YqIm9obgzrKUtfzmomZ9I27AU9Z2lA9BznJJoratZLvominZGoPT7nDaICf6Rvg3 2k7f1i2lKjaxpj4E5KDClNv7HWL4TquBKUhZDpqxnPdFRH+k76lXlF7jOiigHQH9 gessVTNRfnz27clnimeTvnHAgW1fn04= -----END CERTIFICATE-----Generated at Mon Sep 21 20:59:00 2026 by rpki-client