$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ff3f55e-db7c-3170-9879-510d3a1a1f7f.roa File: 1ff3f55e-db7c-3170-9879-510d3a1a1f7f.roa (raw, json) Hash identifier: 0A+Qy9huWCoC/bai3W7mCy0T4wEGycAmKx3fehwqY08= Subject key identifier: C5:8D:24:22:2C:14:47:45:5C:9C:03:0E:E6:9C:E1:A1:C0:B9:85:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EDB2C870649C15C4EDCCC5E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ff3f55e-db7c-3170-9879-510d3a1a1f7f.roa Signing time: Sun 16 Aug 2026 13:00:12 +0000 ROA not before: Sun 16 Aug 2026 13:00:12 +0000 ROA not after: Sat 14 Nov 2026 14:00:12 +0000 asID: 15169 IP address blocks: 108.177.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:2c:87:06:49:c1:5c:4e:dc:cc:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 16 13:00:12 2026 GMT Not After : Nov 14 14:00:12 2026 GMT Subject: CN=1f1361aa-abe2-4e26-9bf0-0ba62663ce9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:36:93:68:a1:41:a7:98:d8:6e:cc:95:cb: fa:d9:34:f4:0f:5e:01:64:91:91:d5:12:f3:19:2d: 16:86:19:75:fa:7c:7d:06:33:1a:e1:e5:25:2a:19: a5:d2:03:95:cc:30:a2:ce:ef:ed:36:a6:ca:24:e6: 28:4d:84:4a:f3:89:c8:56:01:20:43:58:2e:15:f5: 3e:68:18:7d:cc:1a:da:74:94:e9:6e:a2:01:67:1b: ad:cb:9d:fd:f8:50:8f:ba:c8:90:2b:a9:40:91:cd: b4:ea:87:17:f1:e9:f4:60:46:90:b1:a9:cb:c9:21: 0f:3c:7d:55:1e:ef:18:c8:02:5c:fb:ac:53:53:c1: b6:9b:d2:70:36:0f:78:b7:fd:5b:ce:13:2e:a4:3c: 23:28:49:88:82:7c:27:ae:f9:1d:2e:b0:ad:cb:ad: 74:69:8a:d3:7f:fd:28:e0:a2:d6:30:fa:df:14:bc: 6c:94:a2:86:38:ae:d2:4b:a7:0a:b3:6f:73:09:14: d2:8e:8f:3f:4c:66:17:27:25:1c:ed:b3:bf:77:1f: ed:6a:e1:e6:3f:2f:9d:08:37:36:48:3f:8a:b8:47: fd:9f:f0:c7:c8:20:96:57:ca:8f:b0:9d:35:09:f0: c1:ba:2f:3e:6b:6c:a0:a7:e4:e1:e0:0e:b6:81:ea: 5f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8D:24:22:2C:14:47:45:5C:9C:03:0E:E6:9C:E1:A1:C0:B9:85:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ff3f55e-db7c-3170-9879-510d3a1a1f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f1:dd:89:e6:b1:ba:69:a3:36:0e:03:ff:07:7d:fd:6e:29: f5:35:90:42:48:61:0a:18:83:e4:ca:24:9b:4b:fc:d4:ef:81: de:3b:a2:8a:36:b9:d9:0f:43:1a:b2:27:57:b0:b3:f0:03:46: e2:da:00:0d:42:8a:6d:28:b3:f5:d0:23:33:70:b5:63:03:c0: 0e:da:97:38:88:d6:8c:76:77:65:6a:86:96:50:f1:80:a0:d1: 4e:55:06:c1:2c:ed:85:a3:0a:70:42:d7:ba:ca:f6:86:f3:24: 5c:99:eb:53:ac:5c:f0:4d:5b:a0:8b:03:1f:b8:3c:94:42:13: d5:8d:8e:f7:5f:cb:83:8a:4a:f7:ef:b8:47:38:53:c0:64:27: 87:78:44:26:31:00:a5:5a:57:67:84:e6:63:fb:b9:82:2e:4d: 78:58:bb:80:4e:04:e4:74:af:8c:51:d1:3b:13:2b:ef:d7:ee: db:1f:46:1a:6f:dc:8a:33:2e:99:aa:f0:68:85:4f:06:54:55: 77:33:dd:36:1d:f2:5c:ce:53:e9:ce:3e:80:e0:5a:89:34:7a: a7:4f:17:c7:5d:2a:21:28:fd:92:f9:d7:ca:1b:ef:07:33:aa: ca:3e:92:49:a9:28:6e:9f:3a:c3:2e:3e:b9:d3:18:f9:fe:60: 33:6d:ed:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLIcGScFcTtzMXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk MWYxMzYxYWEtYWJlMi00ZTI2LTliZjAtMGJhNjI2NjNjZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktk2k2ihQaeY2G7Mlcv62TT0D14BZJGR1RLz GS0Whhl1+nx9BjMa4eUlKhml0gOVzDCizu/tNqbKJOYoTYRK84nIVgEgQ1guFfU+ aBh9zBradJTpbqIBZxuty539+FCPusiQK6lAkc206ocX8en0YEaQsanLySEPPH1V Hu8YyAJc+6xTU8G2m9JwNg94t/1bzhMupDwjKEmIgnwnrvkdLrCty610aYrTf/0o 4KLWMPrfFLxslKKGOK7SS6cKs29zCRTSjo8/TGYXJyUc7bO/dx/tauHmPy+dCDc2 SD+KuEf9n/DHyCCWV8qPsJ01CfDBui8+a2ygp+Th4A62gepfPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWNJCIsFEdFXJwDDuac4aHAuYV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZmM2Y1NWUtZGI3Yy0z MTcwLTk4NzktNTEwZDNhMWExZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnx3YnmsbppozYOA/8Hff1uKfU1kEJIYQoYg+TKJJtL/NTvgd47ooo2 udkPQxqyJ1ews/ADRuLaAA1Cim0os/XQIzNwtWMDwA7alziI1ox2d2VqhpZQ8YCg 0U5VBsEs7YWjCnBC17rK9obzJFyZ61OsXPBNW6CLAx+4PJRCE9WNjvdfy4OKSvfv uEc4U8BkJ4d4RCYxAKVaV2eE5mP7uYIuTXhYu4BOBOR0r4xR0TsTK+/X7tsfRhpv 3IozLpmq8GiFTwZUVXcz3TYd8lzOU+nOPoDgWok0eqdPF8ddKiEo/ZL518ob7wcz qso+kkmpKG6fOsMuPrnTGPn+YDNt7Rc= -----END CERTIFICATE-----Generated at Sun Sep 20 19:12:19 2026 by rpki-client