$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f672ba8-ac92-3dd0-a4dd-3614f96ef756.roa File: 9f672ba8-ac92-3dd0-a4dd-3614f96ef756.roa (raw, json) Hash identifier: 3M2ocXWwayxUmSwU/+BQ369HC52knrQnLbqQYLJweO4= Subject key identifier: C8:29:24:E2:59:AC:AF:04:89:15:B5:58:0B:FF:D5:92:87:92:96:F8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EDB2C84AFD258539241BDD200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f672ba8-ac92-3dd0-a4dd-3614f96ef756.roa Signing time: Sun 16 Aug 2026 13:00:12 +0000 ROA not before: Sun 16 Aug 2026 13:00:12 +0000 ROA not after: Sat 14 Nov 2026 14:00:12 +0000 asID: 15169 IP address blocks: 108.177.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:2c:84:af:d2:58:53:92:41:bd:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 16 13:00:12 2026 GMT Not After : Nov 14 14:00:12 2026 GMT Subject: CN=538ff441-18ab-4924-bdba-a5c369670d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:78:bd:b2:09:cf:f5:92:17:96:f6:65:ff:58: 18:77:3f:fa:19:e8:86:dd:1d:6a:d9:c0:e4:0d:f8: b1:d8:a1:e2:1e:cd:94:be:3f:0a:29:af:b9:24:ff: 36:c6:b6:5b:fe:3c:fa:c2:3f:12:d1:9d:c7:30:f4: 1b:ea:65:89:ee:1d:e7:9f:2d:b0:f7:e2:62:ad:57: 38:70:e0:6c:f2:b3:74:3d:54:e7:d9:7c:82:1a:7b: 33:68:26:b8:b0:01:de:1a:41:9f:54:b4:4b:54:ff: 86:55:67:97:be:2d:cc:ef:18:e4:63:f8:d0:54:11: 86:84:cc:6b:6c:36:b5:13:7f:98:b5:1e:c6:e1:79: 0d:2c:84:0c:73:45:41:8e:82:e4:ec:1d:0d:11:4a: 07:ef:e8:0e:e4:12:6b:4a:44:17:49:a3:ee:bc:0b: ab:2a:21:35:06:f8:1d:76:93:fc:3d:fb:03:4f:c9: 44:7c:e2:82:90:8f:61:b3:9c:fe:e2:b9:5a:42:2f: 80:1f:fd:c6:bb:7f:34:1b:2b:55:07:44:dc:c3:7b: 81:a6:ae:f8:68:c0:4a:69:22:9e:63:fb:39:e2:a5: 30:5e:86:d4:a6:0b:a4:53:c6:eb:9a:a3:bb:d9:07: 76:ec:8b:1e:ec:b2:2f:0f:0e:65:c8:6d:6e:4e:2d: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:29:24:E2:59:AC:AF:04:89:15:B5:58:0B:FF:D5:92:87:92:96:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f672ba8-ac92-3dd0-a4dd-3614f96ef756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c9:54:c0:47:c5:98:5a:ac:cf:4a:05:d8:69:73:e0:7a:e9: 89:ac:5c:2a:de:1f:ae:e3:94:b6:3e:b2:27:36:f2:6f:90:ca: f9:c4:2b:a1:9d:10:8e:24:69:fa:d4:92:15:d6:e0:53:3c:c9: b1:4d:f4:1b:55:79:82:67:e4:eb:11:6f:43:30:2a:96:17:09: e1:26:f8:7e:cb:15:29:22:0f:99:42:98:4d:f2:b5:9c:7d:1f: 2c:00:b1:7b:ba:b7:db:95:1b:20:34:d7:50:92:c9:64:18:31: 48:99:1b:52:b0:85:24:97:17:fc:9b:8d:6b:5b:30:e3:8a:45: 03:fb:78:eb:60:38:d7:61:60:5e:b8:86:b6:25:23:c5:51:40: 01:99:51:30:b0:88:1d:eb:2b:8f:60:39:b3:d0:10:aa:81:36: ca:63:5c:d9:fb:fb:a9:29:23:ea:a4:3d:1d:66:6b:ff:2a:7e: 8f:5b:4b:4e:3d:60:ce:19:cc:7a:9f:ee:5a:4b:01:d6:52:62: 4c:19:ae:2c:7a:be:05:e4:3c:f8:04:75:13:d2:05:98:48:35: f1:cc:be:78:5a:25:9b:bc:7f:12:5c:37:1b:d1:ab:7e:22:33: 53:32:8c:00:19:0f:97:ee:cb:bc:a2:09:db:98:3c:54:9b:e3: b7:ec:d4:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLISv0lhTkkG90gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk NTM4ZmY0NDEtMThhYi00OTI0LWJkYmEtYTVjMzY5NjcwZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHi9sgnP9ZIXlvZl/1gYdz/6GeiG3R1q2cDk Dfix2KHiHs2Uvj8KKa+5JP82xrZb/jz6wj8S0Z3HMPQb6mWJ7h3nny2w9+JirVc4 cOBs8rN0PVTn2XyCGnszaCa4sAHeGkGfVLRLVP+GVWeXvi3M7xjkY/jQVBGGhMxr bDa1E3+YtR7G4XkNLIQMc0VBjoLk7B0NEUoH7+gO5BJrSkQXSaPuvAurKiE1Bvgd dpP8PfsDT8lEfOKCkI9hs5z+4rlaQi+AH/3Gu380GytVB0Tcw3uBpq74aMBKaSKe Y/s54qUwXobUpgukU8brmqO72Qd27Ise7LIvDw5lyG1uTi1uAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgpJOJZrK8EiRW1WAv/1ZKHkpb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWY2NzJiYTgtYWM5Mi0z ZGQwLWE0ZGQtMzYxNGY5NmVmNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnJVMBHxZharM9KBdhpc+B66YmsXCreH67jlLY+sic28m+QyvnEK6Gd EI4kafrUkhXW4FM8ybFN9BtVeYJn5OsRb0MwKpYXCeEm+H7LFSkiD5lCmE3ytZx9 HywAsXu6t9uVGyA011CSyWQYMUiZG1KwhSSXF/ybjWtbMOOKRQP7eOtgONdhYF64 hrYlI8VRQAGZUTCwiB3rK49gObPQEKqBNspjXNn7+6kpI+qkPR1ma/8qfo9bS049 YM4ZzHqf7lpLAdZSYkwZrix6vgXkPPgEdRPSBZhINfHMvnhaJZu8fxJcNxvRq34i M1MyjAAZD5fuy7yiCduYPFSb47fs1A4= -----END CERTIFICATE-----Generated at Mon Sep 21 10:23:17 2026 by rpki-client