$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b74a01c-55b7-32bf-bbe6-e6d17c1c67c0.roa File: 5b74a01c-55b7-32bf-bbe6-e6d17c1c67c0.roa (raw, json) Hash identifier: ZkJ28maXyjblOIEVWdU3UrJLxLUxUgR+3227vQ/Hbk0= Subject key identifier: 13:D1:98:6F:1C:8F:C2:F6:29:74:CF:8E:5B:ED:2B:F9:9F:E5:1B:FF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E00061D2AC5221B2DF4088900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b74a01c-55b7-32bf-bbe6-e6d17c1c67c0.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 108.170.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:1d:2a:c5:22:1b:2d:f4:08:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=9b46b3ca-c626-4933-93bd-569cf6ccfd4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:43:1b:88:55:3e:07:41:5c:ab:d6:1d:c5: 64:20:3b:be:42:7b:d5:c8:d0:53:18:a6:a1:18:8a: a8:63:2a:98:1a:0f:33:e2:ac:b8:6f:93:3c:fb:72: a9:e7:0d:89:84:7d:01:30:c2:cb:c7:f9:b8:4f:3e: 09:7e:26:6b:28:15:d5:39:5d:eb:dc:b6:cc:f4:68: 47:36:97:6c:84:1b:84:4c:68:70:85:ca:4a:38:5f: e1:64:a7:f7:7b:08:64:5a:0f:0b:3b:35:c2:98:c6: 6e:65:bd:62:61:46:f5:f9:d7:f2:c6:43:e9:7b:89: 0a:99:3d:9b:d8:39:52:17:bc:7e:46:c1:f5:c2:5d: 80:0d:aa:e4:75:05:99:43:27:31:63:50:8b:b5:62: be:6d:db:1b:32:bf:fc:c2:7e:6c:3c:4c:9a:0b:97: 43:88:fb:97:e2:f1:65:5d:04:de:e8:df:28:60:47: ab:be:f5:ca:51:90:5e:9e:95:8c:0f:1e:5f:60:9a: 28:9f:b3:de:5a:45:69:c1:16:4d:66:38:f6:3d:31: 68:34:5d:80:20:63:12:37:60:1c:cd:e4:ca:ba:fc: 0e:c8:14:cb:56:42:39:58:a5:9a:e7:f8:7b:b4:21: 66:b1:f6:05:10:38:04:9b:20:0f:52:c7:d7:00:80: c4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D1:98:6F:1C:8F:C2:F6:29:74:CF:8E:5B:ED:2B:F9:9F:E5:1B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b74a01c-55b7-32bf-bbe6-e6d17c1c67c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c8:60:88:05:27:c4:a3:d1:a4:32:de:dc:69:9d:54:1e:9a: c8:06:90:42:59:ea:d0:5c:b7:59:c2:4b:a8:9a:b1:7e:b6:37: c5:ea:03:b7:22:32:b5:d2:1a:03:e8:7d:49:a2:f4:ff:32:c2: 53:e3:62:6e:db:4f:20:95:f3:5f:92:53:5c:6b:f1:20:1b:43: 52:46:a7:fd:a8:cb:49:0a:72:f4:d8:82:14:c3:61:70:5b:6d: 7d:68:3c:ae:31:02:1b:34:45:62:d2:50:28:74:0d:72:b1:06: 86:ec:ef:b6:1c:d6:6a:8a:95:93:de:36:22:ba:86:e7:d8:ba: 49:fb:15:6c:bf:6d:52:48:04:f8:fb:5f:17:49:42:9d:af:14: 33:9a:8d:b5:e7:85:61:1a:73:03:ca:a5:0f:37:db:a1:b9:ed: b0:6b:79:58:72:d9:d9:b3:fb:b9:1c:ef:79:cd:b9:88:17:9c: 27:76:c8:de:58:71:af:bb:79:09:27:8f:15:d2:5b:d4:7f:a4: cf:cf:91:26:6a:3d:d5:2c:be:23:1c:8a:5c:e9:c2:91:82:5d: 36:ea:b5:9f:3e:c2:ac:21:fa:15:96:c8:cb:38:9b:8c:53:3b: 5f:95:52:a2:d9:df:78:6b:32:90:f0:76:48:ef:15:4d:b4:36: f2:29:54:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABh0qxSIbLfQIiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk OWI0NmIzY2EtYzYyNi00OTMzLTkzYmQtNTY5Y2Y2Y2NmZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcRDG4hVPgdBXKvWHcVkIDu+QnvVyNBTGKah GIqoYyqYGg8z4qy4b5M8+3Kp5w2JhH0BMMLLx/m4Tz4JfiZrKBXVOV3r3LbM9GhH NpdshBuETGhwhcpKOF/hZKf3ewhkWg8LOzXCmMZuZb1iYUb1+dfyxkPpe4kKmT2b 2DlSF7x+RsH1wl2ADarkdQWZQycxY1CLtWK+bdsbMr/8wn5sPEyaC5dDiPuX4vFl XQTe6N8oYEervvXKUZBenpWMDx5fYJoon7PeWkVpwRZNZjj2PTFoNF2AIGMSN2Ac zeTKuvwOyBTLVkI5WKWa5/h7tCFmsfYFEDgEmyAPUsfXAIDEBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPRmG8cj8L2KXTPjlvtK/mf5Rv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWI3NGEwMWMtNTViNy0z MmJmLWJiZTYtZTZkMTdjMWM2N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTIYIgFJ8Sj0aQy3txpnVQemsgGkEJZ6tBct1nCS6iasX62N8XqA7ci MrXSGgPofUmi9P8ywlPjYm7bTyCV81+SU1xr8SAbQ1JGp/2oy0kKcvTYghTDYXBb bX1oPK4xAhs0RWLSUCh0DXKxBobs77Yc1mqKlZPeNiK6hufYukn7FWy/bVJIBPj7 XxdJQp2vFDOajbXnhWEacwPKpQ8326G57bBreVhy2dmz+7kc73nNuYgXnCd2yN5Y ca+7eQknjxXSW9R/pM/PkSZqPdUsviMcilzpwpGCXTbqtZ8+wqwh+hWWyMs4m4xT O1+VUqLZ33hrMpDwdkjvFU20NvIpVC4= -----END CERTIFICATE-----Generated at Sat Jun 13 11:15:55 2026 by rpki-client