$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4624e650-1c06-3565-b5b5-8e37660cd5f3.roa File: 4624e650-1c06-3565-b5b5-8e37660cd5f3.roa (raw, json) Hash identifier: g8lncqf07PIWQeVsQzxk2P59pTl6lHGaeK4tqu6khms= Subject key identifier: 66:C2:DC:98:83:56:AF:39:AE:6F:FD:4C:AE:0B:B0:7B:7F:40:A5:F8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F2D87B06ECF9B83601EE5F4C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4624e650-1c06-3565-b5b5-8e37660cd5f3.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 108.177.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:b0:6e:cf:9b:83:60:1e:e5:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=d4e01fa9-1440-424c-96aa-8160dfa5685f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:a0:ad:cb:dd:e8:ad:31:ec:3c:28:72:66: a2:10:8f:da:f3:5c:fc:e1:51:8b:3b:78:f1:68:43: fb:4d:25:62:8a:5e:ea:df:75:1a:ea:08:ea:a7:fd: 03:dc:e9:3d:37:57:80:8d:f2:5a:57:62:a6:90:09: 4d:1b:d5:42:66:ed:2f:38:c5:14:bf:fd:69:c9:45: d7:a8:65:dc:b8:62:27:80:cc:af:33:d1:92:fa:6d: 9c:bd:5c:2e:71:fd:10:3a:59:77:b2:6b:0b:36:e7: c2:91:25:24:41:d9:05:df:74:36:df:09:ef:19:84: f2:c2:14:25:5e:23:6c:64:6d:a9:ac:7f:a1:82:74: 78:5a:99:a2:98:20:28:9e:f1:64:2e:3a:93:7d:75: 46:77:40:22:57:06:73:09:fd:43:30:fa:6c:ed:ad: 34:a9:db:a9:89:1a:e8:58:ff:55:ad:8e:ae:da:9b: 51:06:c6:16:2d:ba:91:0e:e2:90:64:30:5b:19:86: db:49:45:3f:57:b5:1f:b5:ba:60:0d:b0:14:b0:c4: 88:86:b9:c2:c7:ee:83:71:b3:bb:f8:9a:e2:69:77: dd:8a:6a:b4:14:89:2a:d3:ff:4e:a5:d1:a1:62:de: db:07:25:18:52:db:b1:81:94:e5:f2:12:0b:9f:71: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C2:DC:98:83:56:AF:39:AE:6F:FD:4C:AE:0B:B0:7B:7F:40:A5:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4624e650-1c06-3565-b5b5-8e37660cd5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:09:f9:06:8a:9e:07:e3:03:c4:69:75:89:af:39:ba:2e:83: 5c:e0:4e:1b:ce:e3:4d:7d:2f:02:27:a0:aa:80:79:42:c7:05: ff:64:f6:6f:64:cd:02:f6:24:c9:7e:84:57:d2:b9:0b:e6:87: 34:55:00:9e:2c:f8:f0:e2:63:b1:c7:aa:44:06:74:02:18:f8: 1a:84:c9:e7:b3:2a:0b:22:1b:23:27:5d:58:84:c9:75:ab:2f: 7f:3e:3b:64:76:80:43:8b:9f:b0:39:4c:02:2c:65:e9:ec:4d: 17:f4:a3:36:8e:5b:f1:32:52:90:4d:1e:b2:25:9c:b6:f7:ba: 98:34:a8:28:1f:0a:9b:a5:7c:c5:b0:a4:6f:68:a4:bb:2c:07: 3a:f2:08:b2:6a:b4:08:b7:0a:5d:c4:25:7b:6e:5d:6c:23:51: 49:1f:c4:d9:ee:74:8a:3b:8d:e3:c4:63:62:e1:b8:ee:73:50: d2:7d:cd:11:66:53:7d:71:4a:75:f8:a2:c3:de:22:19:a4:2b: 86:75:41:9c:22:9d:d1:01:cf:04:32:1a:84:3e:2e:bf:a3:da: 69:7c:4e:29:58:c0:f8:91:8c:11:95:00:ae:a1:f5:72:bc:de: de:91:9e:c1:2c:e0:01:7d:97:68:d0:25:19:d2:f3:50:37:b0: 17:54:c5:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th7Buz5uDYB7l9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDRlMDFmYTktMTQ0MC00MjRjLTk2YWEtODE2MGRmYTU2ODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWKgrcvd6K0x7DwocmaiEI/a81z84VGLO3jx aEP7TSViil7q33Ua6gjqp/0D3Ok9N1eAjfJaV2KmkAlNG9VCZu0vOMUUv/1pyUXX qGXcuGIngMyvM9GS+m2cvVwucf0QOll3smsLNufCkSUkQdkF33Q23wnvGYTywhQl XiNsZG2prH+hgnR4WpmimCAonvFkLjqTfXVGd0AiVwZzCf1DMPps7a00qdupiRro WP9VrY6u2ptRBsYWLbqRDuKQZDBbGYbbSUU/V7UftbpgDbAUsMSIhrnCx+6DcbO7 +JriaXfdimq0FIkq0/9OpdGhYt7bByUYUtuxgZTl8hILn3FEMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbC3JiDVq85rm/9TK4LsHt/QKX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDYyNGU2NTAtMWMwNi0z NTY1LWI1YjUtOGUzNzY2MGNkNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbLEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcJ+QaKngfjA8RpdYmvOboug1zgThvO4019LwInoKqAeULHBf9k9m9k zQL2JMl+hFfSuQvmhzRVAJ4s+PDiY7HHqkQGdAIY+BqEyeezKgsiGyMnXViEyXWr L38+O2R2gEOLn7A5TAIsZensTRf0ozaOW/EyUpBNHrIlnLb3upg0qCgfCpulfMWw pG9opLssBzryCLJqtAi3Cl3EJXtuXWwjUUkfxNnudIo7jePEY2LhuO5zUNJ9zRFm U31xSnX4osPeIhmkK4Z1QZwindEBzwQyGoQ+Lr+j2ml8TilYwPiRjBGVAK6h9XK8 3t6RnsEs4AF9l2jQJRnS81A3sBdUxcM= -----END CERTIFICATE-----Generated at Sun Sep 20 20:13:12 2026 by rpki-client