$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29ab56bf-062f-3052-a0c2-2fee1cecb9f9.roa File: 29ab56bf-062f-3052-a0c2-2fee1cecb9f9.roa (raw, json) Hash identifier: ezSBTmCQoq7F+SFo0Lb/+X9TA4mjxfNm0CL6vuAPktQ= Subject key identifier: 5F:4E:24:30:0C:3A:D0:1F:A7:C0:2C:11:A8:74:87:56:CC:83:9F:5A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EDB2C8212E18B49FF843DB600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29ab56bf-062f-3052-a0c2-2fee1cecb9f9.roa Signing time: Sun 16 Aug 2026 13:00:12 +0000 ROA not before: Sun 16 Aug 2026 13:00:12 +0000 ROA not after: Sat 14 Nov 2026 14:00:12 +0000 asID: 15169 IP address blocks: 108.177.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:2c:82:12:e1:8b:49:ff:84:3d:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 16 13:00:12 2026 GMT Not After : Nov 14 14:00:12 2026 GMT Subject: CN=2d1e31d6-1f5e-4b67-94e9-1000446ee132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:79:5d:87:36:96:1c:3d:a6:1f:72:7d:e5: 71:bc:a2:1f:f3:00:b3:6e:b0:8c:0c:2f:74:b2:56: 44:32:bd:c8:b5:db:ac:eb:bb:f3:eb:19:62:e8:e0: e9:c4:7b:8d:a2:65:c5:13:78:e3:ff:b8:4c:cc:e8: a6:e5:34:ff:66:b3:54:0a:79:0e:f6:97:2b:bb:2a: 0d:a9:13:c3:b3:9b:38:e1:d6:c6:1e:3f:9f:77:ab: ba:6d:f3:14:cf:e8:1c:c0:a2:65:d0:35:b3:95:38: 98:79:b9:9f:9c:95:01:c7:3f:3f:51:d0:79:43:92: 08:b8:0f:eb:9f:45:e9:7b:11:78:42:d1:6f:35:a6: f3:8f:c1:f5:fb:e4:d4:e1:53:5d:21:74:6a:b2:ac: 31:91:b1:1e:38:db:82:33:c2:ec:27:52:4b:67:6e: dd:b0:82:9d:73:e6:61:be:6a:49:bb:48:01:1a:e7: 4f:38:10:53:eb:e1:ca:44:22:a4:a9:39:90:e5:9c: 03:76:59:3c:bf:ae:3e:af:71:81:88:30:53:eb:3d: 53:dc:dd:93:b2:f9:b5:07:b7:eb:36:00:9a:dd:cc: f3:a1:d1:1a:dd:a5:c8:48:f2:ef:1b:1c:63:7b:39: 16:a8:44:58:a5:f5:72:44:22:2b:80:f0:70:11:3a: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4E:24:30:0C:3A:D0:1F:A7:C0:2C:11:A8:74:87:56:CC:83:9F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29ab56bf-062f-3052-a0c2-2fee1cecb9f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e0:88:a3:04:c8:64:a7:78:0f:1a:5e:19:b0:60:26:33:30: 26:f5:76:e7:84:e6:71:11:04:64:00:aa:b3:6f:dd:07:90:39: 9e:18:0a:64:f8:c8:9c:27:83:86:48:78:bf:0d:46:ec:8e:f4: e0:2b:7d:b3:a6:82:8f:c9:7e:8a:a0:3e:77:55:b7:48:c1:26: f2:fc:4b:74:85:1f:90:49:f4:78:2d:6c:82:cf:97:88:7d:62: 04:37:79:c6:6e:46:8c:62:02:7b:19:03:b4:91:8c:d0:de:52: 2c:df:54:7e:38:e9:ff:05:91:e0:1c:39:f6:ce:32:c0:ed:d0: 93:c8:8a:ee:84:0b:a7:41:06:87:86:b8:31:10:4b:d4:37:2e: 52:c8:cd:fa:d8:22:be:05:bd:11:ba:73:83:9f:2c:17:f1:9e: a8:7e:6b:9e:21:5a:43:b8:87:6d:40:bb:5d:59:1c:92:6a:61: 9e:f9:e3:ef:59:84:e1:ad:41:9c:b6:c8:21:e4:36:d5:9a:68: 9a:8b:de:46:41:1c:28:e2:9a:ad:2e:8b:d9:1b:c9:04:d5:5d: cb:28:b9:29:64:27:ec:0d:1a:91:77:47:79:fa:29:72:84:af: ac:cc:e0:a6:9d:45:55:98:dd:65:0d:5f:1c:25:fc:c1:e2:c2: d3:5f:99:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLIIS4YtJ/4Q9tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk MmQxZTMxZDYtMWY1ZS00YjY3LTk0ZTktMTAwMDQ0NmVlMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRd5XYc2lhw9ph9yfeVxvKIf8wCzbrCMDC90 slZEMr3Itdus67vz6xli6ODpxHuNomXFE3jj/7hMzOim5TT/ZrNUCnkO9pcruyoN qRPDs5s44dbGHj+fd6u6bfMUz+gcwKJl0DWzlTiYebmfnJUBxz8/UdB5Q5IIuA/r n0XpexF4QtFvNabzj8H1++TU4VNdIXRqsqwxkbEeONuCM8LsJ1JLZ27dsIKdc+Zh vmpJu0gBGudPOBBT6+HKRCKkqTmQ5ZwDdlk8v64+r3GBiDBT6z1T3N2Tsvm1B7fr NgCa3czzodEa3aXISPLvGxxjezkWqERYpfVyRCIrgPBwETr5uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9OJDAMOtAfp8AsEah0h1bMg59aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjlhYjU2YmYtMDYyZi0z MDUyLWEwYzItMmZlZTFjZWNiOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvgiKMEyGSneA8aXhmwYCYzMCb1dueE5nERBGQAqrNv3QeQOZ4YCmT4 yJwng4ZIeL8NRuyO9OArfbOmgo/JfoqgPndVt0jBJvL8S3SFH5BJ9HgtbILPl4h9 YgQ3ecZuRoxiAnsZA7SRjNDeUizfVH446f8FkeAcOfbOMsDt0JPIiu6EC6dBBoeG uDEQS9Q3LlLIzfrYIr4FvRG6c4OfLBfxnqh+a54hWkO4h21Au11ZHJJqYZ754+9Z hOGtQZy2yCHkNtWaaJqL3kZBHCjimq0ui9kbyQTVXcsouSlkJ+wNGpF3R3n6KXKE r6zM4KadRVWY3WUNXxwl/MHiwtNfmeI= -----END CERTIFICATE-----Generated at Mon Sep 21 20:05:40 2026 by rpki-client