$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa File: 7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa (raw, json) Hash identifier: 0lK08N1xoDhyMn7neYf94OMsnGQ7SbsM/Nhr4djU1l0= Subject key identifier: D1:66:13:81:7A:74:56:0B:61:75:49:66:0C:80:72:5E:9B:D8:72:94 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E000616F0FEFCF2A8C70ED000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 108.170.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:16:f0:fe:fc:f2:a8:c7:0e:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=aca496e0-6e6b-4615-ad4a-6d2868c272f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:a9:a6:ae:2c:6e:bd:40:e1:b0:34:a4:73: 61:97:ae:e6:01:46:3a:6a:38:76:51:a2:b5:95:38: 0e:d6:ce:45:e7:5b:64:48:df:7c:1a:5a:49:dc:89: 97:c5:37:65:ed:be:cc:6d:7e:33:3f:c5:43:b1:98: 85:7e:68:0e:fb:be:74:da:3f:c7:5f:b5:d8:67:55: 6b:54:71:84:3c:4c:a7:03:7a:34:ea:25:d2:c4:24: 2d:fb:9b:1b:d3:e0:a1:67:df:88:21:d7:b2:78:2e: 05:05:72:3a:cb:f8:80:71:93:86:ce:97:5e:a2:70: 78:46:e3:7c:1b:c6:6d:5d:61:d3:21:5c:66:9d:07: 23:99:f8:90:06:fb:0c:c2:72:be:ed:ae:86:7f:e6: cf:53:7a:42:a5:d5:8d:75:58:f9:c0:04:5b:7b:b0: 23:82:8f:a5:77:2c:86:1d:e4:48:b4:f2:ee:de:dc: 03:d0:1b:d8:2b:2c:7c:06:4f:b1:3b:58:e7:9f:33: 0a:19:97:66:9e:cc:fe:94:10:0e:bc:ad:af:69:c4: 78:dc:17:0d:c5:57:bb:f0:86:97:a9:93:f7:6d:14: b1:e4:72:60:e4:a7:e6:a1:5d:5b:9e:a4:a8:e8:18: 69:9a:2f:b8:2c:ef:c4:6b:52:66:55:0d:7c:47:69: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:66:13:81:7A:74:56:0B:61:75:49:66:0C:80:72:5E:9B:D8:72:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:75:26:1c:71:76:89:b3:bd:61:8e:10:ff:42:10:e0:40:c2: af:35:ca:a3:67:3c:af:99:5f:f4:0b:f4:d4:0b:ff:37:a0:72: ce:5c:ce:c7:6f:89:5d:45:3a:e4:f6:16:31:5c:48:12:1f:c0: b1:43:fe:e7:68:da:b0:e6:87:92:ed:10:df:9d:04:bf:70:3f: 6a:a3:ec:32:64:fb:bc:ce:c6:a2:4a:d2:e0:dc:bf:fa:04:ad: 09:0f:ab:b6:88:42:47:a2:0e:7f:76:c5:47:c2:fa:06:bf:f7: 8a:a2:cf:1f:3a:29:76:d2:e8:d0:09:a1:25:6b:60:65:f7:99: 0b:0e:03:98:64:c3:4c:f3:4f:98:38:e8:f6:45:aa:be:91:ef: f3:53:71:00:73:c7:b5:06:d0:7b:d8:c1:0b:da:47:9e:cb:da: 7e:ff:31:87:d1:54:cb:2e:5c:b6:93:09:94:85:66:1f:a2:f4: 94:9e:95:96:d9:38:21:d6:9b:f6:46:21:61:65:e2:6e:17:05: e3:71:7a:1d:b1:6a:a7:15:95:d9:7a:91:b0:cb:96:43:a3:c3: 88:19:c4:e5:6c:d3:a4:d0:2e:40:15:73:34:af:6f:77:0e:64: b8:22:e7:6f:f5:60:f8:71:fd:40:21:ed:fb:f9:b4:ac:7e:0c: ba:63:2f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABhbw/vzyqMcO0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk YWNhNDk2ZTAtNmU2Yi00NjE1LWFkNGEtNmQyODY4YzI3MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCWppq4sbr1A4bA0pHNhl67mAUY6ajh2UaK1 lTgO1s5F51tkSN98GlpJ3ImXxTdl7b7MbX4zP8VDsZiFfmgO+7502j/HX7XYZ1Vr VHGEPEynA3o06iXSxCQt+5sb0+ChZ9+IIdeyeC4FBXI6y/iAcZOGzpdeonB4RuN8 G8ZtXWHTIVxmnQcjmfiQBvsMwnK+7a6Gf+bPU3pCpdWNdVj5wARbe7Ajgo+ldyyG HeRItPLu3twD0BvYKyx8Bk+xO1jnnzMKGZdmnsz+lBAOvK2vacR43BcNxVe78IaX qZP3bRSx5HJg5KfmoV1bnqSo6Bhpmi+4LO/Ea1JmVQ18R2mexQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFmE4F6dFYLYXVJZgyAcl6b2HKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2IyZjk4ZWEtNGQ5ZC0z NWU1LTk1YjgtYjhhYzA4Nzk5NTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG51JhxxdomzvWGOEP9CEOBAwq81yqNnPK+ZX/QL9NQL/zegcs5czsdv iV1FOuT2FjFcSBIfwLFD/udo2rDmh5LtEN+dBL9wP2qj7DJk+7zOxqJK0uDcv/oE rQkPq7aIQkeiDn92xUfC+ga/94qizx86KXbS6NAJoSVrYGX3mQsOA5hkw0zzT5g4 6PZFqr6R7/NTcQBzx7UG0HvYwQvaR57L2n7/MYfRVMsuXLaTCZSFZh+i9JSelZbZ OCHWm/ZGIWFl4m4XBeNxeh2xaqcVldl6kbDLlkOjw4gZxOVs06TQLkAVczSvb3cO ZLgi52/1YPhx/UAh7fv5tKx+DLpjL/0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:53 2026 by rpki-client