$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa File: 10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa (raw, json) Hash identifier: 4GKwJPeKGrzLDy5nJ7Lvr+c565/JO71cxtz1sr7pdKk= Subject key identifier: AB:15:6E:3F:F9:62:60:75:F2:12:32:A6:29:6B:37:19:E9:44:98:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E00061736658C044D4515A700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 108.177.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:17:36:65:8c:04:4d:45:15:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=40eece75-2854-46c6-b90d-7653833fb62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:e6:d0:ad:e8:6c:58:35:ae:fe:0f:21:3f: 24:34:d0:55:d2:30:04:ee:d1:41:ca:8b:71:4e:8b: bf:0a:16:cf:f9:12:6f:4a:c2:f8:1e:bb:e0:00:5c: bc:32:da:e0:5d:c1:fb:a6:b3:2f:33:18:20:ef:4d: cb:7a:32:f4:a5:a7:a9:5e:e5:99:0f:d8:1f:ff:21: c9:3f:bd:3f:a7:9b:ac:73:e4:e2:7d:44:b2:a0:70: a4:53:71:0f:88:38:da:36:4c:4b:1d:77:85:ae:8a: 86:3a:7e:f8:06:63:e2:4a:1e:13:ae:99:9c:fd:58: a8:7d:65:96:9e:3a:4c:08:0d:fa:46:b4:14:84:1e: 01:da:73:bb:7e:5c:11:50:7a:67:f1:55:70:73:6c: f2:be:d9:44:35:da:2f:83:ad:61:5c:2d:19:38:15: ab:30:55:00:84:55:36:13:ce:54:c9:34:56:bd:09: 02:a5:c5:22:42:c0:2c:aa:94:85:01:93:7e:fe:59: 22:c0:d7:20:e2:1e:84:57:7d:db:31:e8:fb:e9:7d: d4:28:c4:9f:44:35:16:2c:1a:9b:92:e9:24:b1:a0: ec:52:5f:c2:a0:84:71:24:84:af:30:ad:a0:23:0b: 0f:79:31:f1:dc:24:ec:2e:68:37:28:19:33:f0:aa: f7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:15:6E:3F:F9:62:60:75:F2:12:32:A6:29:6B:37:19:E9:44:98:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:5d:9f:51:e9:5d:ae:7b:e3:2c:1c:10:06:cf:ab:4a:91:be: e9:a0:26:61:10:fd:3d:51:61:62:bb:67:cd:e2:5c:5d:98:d7: 42:fa:70:44:1c:5b:9e:c2:b6:ac:68:78:1b:44:85:55:cf:39: a2:12:c8:25:d1:aa:fe:40:8f:86:49:be:f4:98:69:4c:ec:18: 33:2e:68:b4:11:e4:0c:25:2c:29:9c:2b:fc:37:11:ad:66:bc: 88:e2:7f:65:b7:20:5d:de:d0:4c:ec:82:f7:11:cc:94:99:c1: 90:f1:cb:f6:48:33:d0:07:f1:c1:21:43:6d:d6:8c:a4:5a:47: d0:1b:3d:e4:80:25:9e:4a:c4:aa:8c:4b:fe:86:ca:f7:c7:e0: 1b:99:ec:d4:45:88:13:18:e9:69:9b:43:c0:db:1e:77:7e:2d: 0b:be:79:49:bc:58:bc:a9:90:ae:a4:f7:20:ef:d3:b8:1a:74: 1f:dd:72:2d:71:6e:d4:bf:76:df:57:da:9b:55:e2:59:53:d0: 2e:c4:83:7b:66:51:53:96:d0:96:a9:b6:d2:01:a9:f6:b3:83: e9:b7:2e:d7:03:fa:56:5b:53:37:14:25:cc:94:66:90:8c:da: 72:c2:56:b7:23:7e:03:b7:cf:6e:e7:df:8c:d6:2f:9a:6f:21: 4a:f9:f7:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABhc2ZYwETUUVpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk NDBlZWNlNzUtMjg1NC00NmM2LWI5MGQtNzY1MzgzM2ZiNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Lm0K3obFg1rv4PIT8kNNBV0jAE7tFByotx Tou/ChbP+RJvSsL4HrvgAFy8MtrgXcH7prMvMxgg703LejL0paepXuWZD9gf/yHJ P70/p5usc+TifUSyoHCkU3EPiDjaNkxLHXeFroqGOn74BmPiSh4Trpmc/ViofWWW njpMCA36RrQUhB4B2nO7flwRUHpn8VVwc2zyvtlENdovg61hXC0ZOBWrMFUAhFU2 E85UyTRWvQkCpcUiQsAsqpSFAZN+/lkiwNcg4h6EV33bMej76X3UKMSfRDUWLBqb kukksaDsUl/CoIRxJISvMK2gIwsPeTHx3CTsLmg3KBkz8Kr3TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsVbj/5YmB18hIypilrNxnpRJgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBjZjBjMzYtMDliYS0z ODI1LWI4MzctOGE4YTZhMTBmYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJldn1HpXa574ywcEAbPq0qRvumgJmEQ/T1RYWK7Z83iXF2Y10L6cEQc W57CtqxoeBtEhVXPOaISyCXRqv5Aj4ZJvvSYaUzsGDMuaLQR5AwlLCmcK/w3Ea1m vIjif2W3IF3e0EzsgvcRzJSZwZDxy/ZIM9AH8cEhQ23WjKRaR9AbPeSAJZ5KxKqM S/6GyvfH4BuZ7NRFiBMY6WmbQ8DbHnd+LQu+eUm8WLypkK6k9yDv07gadB/dci1x btS/dt9X2ptV4llT0C7Eg3tmUVOW0JapttIBqfazg+m3LtcD+lZbUzcUJcyUZpCM 2nLCVrcjfgO3z27n34zWL5pvIUr59+I= -----END CERTIFICATE-----Generated at Sat Jun 13 13:14:08 2026 by rpki-client