$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa File: aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa (raw, json) Hash identifier: kH4i4D0uE4syXHwgiraSzhdJFkz8dHAg76jNmiNu3vQ= Subject key identifier: 90:D2:FB:78:1D:02:D5:1A:D7:5B:CE:BE:06:6C:B8:0D:65:C8:EB:AD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79AFF6019149CB32370C000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 108.177.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:ff:60:19:14:9c:b3:23:70:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3cc2f998-6f3c-4cf8-9daf-a73c06cee9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2e:99:bc:ce:38:81:d5:be:dd:49:e9:6c:0e: 5e:8f:70:1e:d0:8f:bf:ee:64:b5:87:20:d0:a8:0d: ed:a1:e9:23:17:1f:c0:16:b0:18:b7:50:f0:32:1c: ca:fe:1b:09:17:ab:81:b3:74:b9:6e:77:63:c1:67: 66:b2:ba:38:01:33:ae:8e:93:93:84:76:aa:dc:be: be:36:af:32:6b:48:32:d6:a6:63:cb:3a:57:eb:ca: e9:2f:6d:ea:b6:75:13:bb:2a:6f:75:d1:70:5c:f6: 4a:c8:9c:c8:f3:0e:f6:94:b6:63:85:cd:97:96:8c: 6f:cb:ac:c7:7b:fc:88:d1:76:53:1b:a9:43:66:6b: f5:ce:cb:0d:1b:02:17:7b:e6:23:4a:d2:38:a0:e2: c4:3e:5c:0b:db:f4:15:27:ed:24:6b:49:0c:20:fe: cd:1c:10:44:c9:a8:be:47:cc:3d:4f:68:6a:e8:b8: c2:97:97:ec:67:96:39:98:4b:4a:b2:8c:e8:b5:4a: 86:e9:81:ea:69:7c:f6:db:ad:59:3a:42:8a:a1:e2: 48:63:ab:88:5f:df:dc:34:4b:fe:74:ab:1b:af:13: b8:9f:d4:cb:36:dc:5e:83:e2:7c:56:77:68:28:d9: b2:1d:e4:f6:7d:fe:6e:40:db:02:61:83:97:6b:ea: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D2:FB:78:1D:02:D5:1A:D7:5B:CE:BE:06:6C:B8:0D:65:C8:EB:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:99:7e:09:1b:cc:b0:32:95:1f:92:9c:86:34:37:51:8f:bb: f2:dd:c9:e5:b4:4e:b8:ad:7f:78:f7:eb:cd:49:3a:67:54:a4: 69:85:af:3a:41:e1:8b:ed:2d:31:f0:87:19:b1:d5:ce:c7:99: 14:a2:20:9e:ce:97:d4:00:61:35:27:5b:e4:b4:51:f4:b2:32: fa:eb:cb:39:04:29:07:8c:3b:aa:08:92:82:48:a8:1b:88:98: 90:e0:0d:a3:a4:4d:aa:a9:a9:e3:bd:6b:54:e1:04:50:4e:34: f6:cd:2b:66:a1:1b:2d:64:1d:e1:14:29:7b:35:dc:c0:be:36: ae:c5:8e:c2:84:7a:9f:28:20:16:9e:e6:1a:4d:cb:cb:e6:ad: dc:e5:df:7b:ce:14:96:26:4c:89:10:00:b4:e1:4a:ff:15:90: 30:d1:0f:a8:27:ab:7a:20:09:32:eb:eb:5e:c4:2d:5a:37:9d: f8:98:80:ef:2b:7c:68:07:71:9c:10:4d:87:12:66:ff:24:13: 0a:56:62:65:42:5e:71:fa:9a:a1:77:76:06:40:4c:76:7d:89: 7e:fe:38:d4:30:7d:85:c3:75:9c:18:6d:9c:32:6d:7e:78:af: c2:0f:cd:d4:84:88:f6:b4:ef:0d:be:7b:f0:3b:42:6b:e6:bd: 60:03:60:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmv9gGRScsyNwwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2NjMmY5OTgtNmYzYy00Y2Y4LTlkYWYtYTczYzA2Y2VlOWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS6ZvM44gdW+3UnpbA5ej3Ae0I+/7mS1hyDQ qA3toekjFx/AFrAYt1DwMhzK/hsJF6uBs3S5bndjwWdmsro4ATOujpOThHaq3L6+ Nq8ya0gy1qZjyzpX68rpL23qtnUTuypvddFwXPZKyJzI8w72lLZjhc2Xloxvy6zH e/yI0XZTG6lDZmv1zssNGwIXe+YjStI4oOLEPlwL2/QVJ+0ka0kMIP7NHBBEyai+ R8w9T2hq6LjCl5fsZ5Y5mEtKsozotUqG6YHqaXz2261ZOkKKoeJIY6uIX9/cNEv+ dKsbrxO4n9TLNtxeg+J8VndoKNmyHeT2ff5uQNsCYYOXa+qRHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDS+3gdAtUa11vOvgZsuA1lyOutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE3YTkxNjgtZDliNS0z ZTNhLWEyYjEtY2UyYTcwNTFjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKZfgkbzLAylR+SnIY0N1GPu/LdyeW0Tritf3j3681JOmdUpGmFrzpB 4YvtLTHwhxmx1c7HmRSiIJ7Ol9QAYTUnW+S0UfSyMvrryzkEKQeMO6oIkoJIqBuI mJDgDaOkTaqpqeO9a1ThBFBONPbNK2ahGy1kHeEUKXs13MC+Nq7FjsKEep8oIBae 5hpNy8vmrdzl33vOFJYmTIkQALThSv8VkDDRD6gnq3ogCTLr617ELVo3nfiYgO8r fGgHcZwQTYcSZv8kEwpWYmVCXnH6mqF3dgZATHZ9iX7+ONQwfYXDdZwYbZwybX54 r8IPzdSEiPa07w2+e/A7QmvmvWADYGc= -----END CERTIFICATE-----Generated at Wed Jul 29 04:27:08 2026 by rpki-client