$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73e6adc8-cbc8-35b3-ac8d-07858530635a.roa File: 73e6adc8-cbc8-35b3-ac8d-07858530635a.roa (raw, json) Hash identifier: GwI0H4R2m/Y8Pg6gX3MOb6+6KlPuyIxZA+e6/95dGCc= Subject key identifier: 87:43:E6:BC:B3:C0:DD:63:8E:66:52:4F:A6:66:F9:5C:EC:93:D1:CF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F2D87B02D35BDF1766A5BB9C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73e6adc8-cbc8-35b3-ac8d-07858530635a.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 108.170.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:b0:2d:35:bd:f1:76:6a:5b:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=995befd0-16da-4415-9553-f08441428b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:45:c3:f0:c7:88:94:a3:8a:c4:30:b2:96:f8: c6:5a:85:78:a6:9e:51:6c:41:be:1f:01:54:af:9e: de:7b:48:dd:7b:97:4f:9a:46:90:e1:53:2f:65:7b: 5c:1f:21:6c:8d:9e:e9:4d:6e:bf:fe:8c:f5:11:16: 28:71:a6:91:49:12:83:e4:66:32:4d:17:40:49:f2: 89:b0:14:39:db:33:aa:8d:8d:aa:4c:61:ef:90:b5: 69:7d:70:33:1d:77:f5:44:44:b0:4b:21:f6:2d:6c: 37:32:9e:96:90:74:41:0c:58:6a:73:d4:cd:2f:98: cb:79:ea:e5:b9:53:aa:db:f2:60:25:4d:b8:d2:53: 74:f2:e1:eb:2f:d0:d9:77:32:39:70:2d:94:cf:d1: ef:9f:fd:4a:c5:bc:4a:01:17:b7:c9:e9:31:23:0b: fc:64:b7:97:f1:9e:0a:0c:ea:86:7e:cb:51:32:0d: 34:27:db:6a:9b:75:77:ff:cc:02:22:12:8f:c1:f3: 4d:0e:69:74:ac:40:82:31:ff:46:0d:5a:0f:e5:2e: ad:73:ce:75:35:95:32:7e:cc:86:29:4e:47:22:05: 95:ba:52:cf:1e:60:dc:d8:cb:d0:6e:c9:d7:20:a6: df:28:aa:9e:24:99:6b:fb:52:17:57:aa:73:f9:f2: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:43:E6:BC:B3:C0:DD:63:8E:66:52:4F:A6:66:F9:5C:EC:93:D1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73e6adc8-cbc8-35b3-ac8d-07858530635a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:54:f8:6c:47:e4:aa:c2:87:ef:3a:7e:48:dc:1e:8a:c1:aa: 8c:ec:01:57:47:09:e4:4f:da:52:c0:96:d0:b1:0e:1e:d2:2f: df:bd:0f:9d:41:a2:5b:b9:99:97:d4:67:b5:88:84:90:51:a8: a0:63:94:50:5a:6a:5d:77:51:7c:ac:03:89:ed:f8:4b:14:48: 92:d0:0e:e5:c4:35:eb:62:84:e1:e4:b0:4b:a6:c8:96:4c:5e: e9:89:fd:eb:18:80:c9:68:c6:e4:da:5d:53:16:a0:54:e5:36: 24:c8:76:40:10:cb:10:a8:0f:08:c1:d1:08:73:bd:b7:90:1b: d7:e8:6a:63:b9:5e:c0:40:ab:df:54:a4:70:c9:fa:7d:dd:c7: bc:eb:d4:10:4d:58:3a:25:84:f4:ff:87:aa:18:24:b0:04:eb: c6:c9:72:a6:1a:ab:8c:2a:ea:fe:d7:23:83:d4:45:75:44:c3: 2d:56:29:32:c3:5c:9c:cd:7f:cf:ad:07:8e:92:e5:0d:23:f3: e4:b6:4a:45:77:16:c4:cd:60:06:5a:fd:bb:df:9f:5e:bf:e0: 6f:63:10:90:86:16:aa:6c:a3:17:51:fd:bb:f6:f5:e8:e5:8c: ef:0a:4a:b8:64:3a:f9:3d:76:26:c3:60:91:26:5c:4c:35:72: ea:1e:83:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th7AtNb3xdmpbucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk OTk1YmVmZDAtMTZkYS00NDE1LTk1NTMtZjA4NDQxNDI4YjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEXD8MeIlKOKxDCylvjGWoV4pp5RbEG+HwFU r57ee0jde5dPmkaQ4VMvZXtcHyFsjZ7pTW6//oz1ERYocaaRSRKD5GYyTRdASfKJ sBQ52zOqjY2qTGHvkLVpfXAzHXf1RESwSyH2LWw3Mp6WkHRBDFhqc9TNL5jLeerl uVOq2/JgJU240lN08uHrL9DZdzI5cC2Uz9Hvn/1KxbxKARe3yekxIwv8ZLeX8Z4K DOqGfstRMg00J9tqm3V3/8wCIhKPwfNNDml0rECCMf9GDVoP5S6tc851NZUyfsyG KU5HIgWVulLPHmDc2MvQbsnXIKbfKKqeJJlr+1IXV6pz+fKV4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdD5ryzwN1jjmZST6Zm+Vzsk9HPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzNlNmFkYzgtY2JjOC0z NWIzLWFjOGQtMDc4NTg1MzA2MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKryMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRU+GxH5KrCh+86fkjcHorBqozsAVdHCeRP2lLAltCxDh7SL9+9D51B olu5mZfUZ7WIhJBRqKBjlFBaal13UXysA4nt+EsUSJLQDuXENetihOHksEumyJZM XumJ/esYgMloxuTaXVMWoFTlNiTIdkAQyxCoDwjB0QhzvbeQG9foamO5XsBAq99U pHDJ+n3dx7zr1BBNWDolhPT/h6oYJLAE68bJcqYaq4wq6v7XI4PURXVEwy1WKTLD XJzNf8+tB46S5Q0j8+S2SkV3FsTNYAZa/bvfn16/4G9jEJCGFqpsoxdR/bv29ejl jO8KSrhkOvk9dibDYJEmXEw1cuoeg/k= -----END CERTIFICATE-----Generated at Sun Sep 20 21:14:34 2026 by rpki-client