$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa File: 4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa (raw, json) Hash identifier: DBsRJv7/Y5LNvwvaFYfLxXC6GFdW65o1aMAYueqsY7M= Subject key identifier: 69:AC:81:48:5F:41:68:28:52:3A:3C:B9:82:53:63:02:FB:88:D6:EA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E00060DD7041BF84CB40827C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 108.170.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:0d:d7:04:1b:f8:4c:b4:08:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=3a42427b-6688-4599-957e-f49f379c2712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d1:fa:64:43:4f:21:5e:d9:22:dc:06:c4:a6: 58:cd:10:a5:b9:70:0b:0b:70:cc:6e:e7:f4:0e:ba: 4e:4f:a0:08:21:d1:98:9a:d8:40:06:4f:75:bc:e1: 90:a6:90:a3:e1:c0:fb:cb:cd:6b:16:e3:98:72:9a: 40:a1:54:c3:9f:d7:a9:4d:65:d9:48:52:6c:bd:02: 6c:96:69:7d:37:35:b7:c8:20:4f:72:dd:a7:44:83: a1:e4:6d:00:86:bd:e0:44:7f:70:1f:05:ac:da:03: b5:c4:3c:b5:cc:b4:30:fc:e6:ed:3d:57:e9:d3:ab: ed:b4:66:ce:be:a5:2f:e0:f8:7c:59:35:af:95:6e: 1e:a8:92:3a:5f:c8:d1:fb:b1:f5:fa:63:dd:bb:11: c3:76:d6:dc:87:df:1f:8f:0d:92:7c:e0:bc:86:c6: d8:b0:25:3f:6d:5f:fa:a4:ad:67:66:a3:56:27:ef: 2e:69:1c:47:4a:cf:f3:24:46:c6:15:39:0a:98:d3: 0b:97:d9:9b:4b:0a:d1:67:67:62:55:bc:97:7d:76: fa:85:f7:60:94:5a:e0:31:ad:20:5a:54:5d:21:7a: 2c:1f:0f:70:4d:4e:95:3c:7e:73:8c:7b:c4:ad:5b: 7d:f8:33:54:0f:ea:25:16:30:b2:f4:ba:2b:79:1f: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AC:81:48:5F:41:68:28:52:3A:3C:B9:82:53:63:02:FB:88:D6:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:3d:89:be:11:74:a9:de:ac:12:e3:28:9d:c5:77:0e:a1:73: 48:14:7a:32:c8:4d:70:50:f4:81:33:df:66:d0:07:b3:db:d5: 6b:d1:e8:fb:5b:35:89:74:95:28:86:e8:90:35:f6:7f:f7:f1: d2:58:a3:b1:50:24:c6:52:89:a2:96:db:2b:3f:b0:89:34:cd: 76:28:d3:a1:e9:d7:4d:db:bb:b7:bf:e3:a9:5a:23:77:f9:35: 23:4d:1c:04:ef:89:c5:7d:35:9a:5c:cc:c5:70:1b:93:5a:ed: 02:a4:ac:b1:9d:ca:cd:84:ef:5c:a9:27:ad:a9:21:18:2e:da: ba:c1:90:82:d5:16:59:cf:0a:61:91:6a:5a:26:e9:31:cc:dd: e3:0a:36:40:e6:01:8e:e1:05:c3:b9:9c:59:e1:c5:a5:b6:a6: a8:c4:76:db:b6:e5:02:f3:4e:d0:d0:9f:57:b6:48:cc:9a:27: c9:15:80:94:a1:7f:3e:d3:e2:4b:54:93:be:63:e8:f2:7d:4f: fc:e1:9b:43:31:98:42:8c:f3:a4:d4:ba:64:2b:e4:b6:fd:02: 83:26:9f:68:7c:de:cc:00:be:24:4c:7a:38:70:05:96:d5:05: 28:4c:4e:33:fc:14:ae:89:e5:c3:09:87:59:a7:1e:d4:e3:da: 71:e2:23:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABg3XBBv4TLQIJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk M2E0MjQyN2ItNjY4OC00NTk5LTk1N2UtZjQ5ZjM3OWMyNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdH6ZENPIV7ZItwGxKZYzRCluXALC3DMbuf0 DrpOT6AIIdGYmthABk91vOGQppCj4cD7y81rFuOYcppAoVTDn9epTWXZSFJsvQJs lml9NzW3yCBPct2nRIOh5G0Ahr3gRH9wHwWs2gO1xDy1zLQw/ObtPVfp06vttGbO vqUv4Ph8WTWvlW4eqJI6X8jR+7H1+mPduxHDdtbch98fjw2SfOC8hsbYsCU/bV/6 pK1nZqNWJ+8uaRxHSs/zJEbGFTkKmNMLl9mbSwrRZ2diVbyXfXb6hfdglFrgMa0g WlRdIXosHw9wTU6VPH5zjHvErVt9+DNUD+olFjCy9LoreR8NkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmsgUhfQWgoUjo8uYJTYwL7iNbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGQ1ZmIyMzQtNGIwZC0z NzViLTg4MzAtZjZhNTUwYmExYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk9ib4RdKnerBLjKJ3Fdw6hc0gUejLITXBQ9IEz32bQB7Pb1WvR6Ptb NYl0lSiG6JA19n/38dJYo7FQJMZSiaKW2ys/sIk0zXYo06Hp103bu7e/46laI3f5 NSNNHATvicV9NZpczMVwG5Na7QKkrLGdys2E71ypJ62pIRgu2rrBkILVFlnPCmGR alom6THM3eMKNkDmAY7hBcO5nFnhxaW2pqjEdtu25QLzTtDQn1e2SMyaJ8kVgJSh fz7T4ktUk75j6PJ9T/zhm0MxmEKM86TUumQr5Lb9AoMmn2h83swAviRMejhwBZbV BShMTjP8FK6J5cMJh1mnHtTj2nHiI1Y= -----END CERTIFICATE-----Generated at Sat Jun 13 09:22:18 2026 by rpki-client