$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa File: aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa (raw, json) Hash identifier: N4Ml2mgyDdZPDUWOOy0bBwAQWUAMEhbPdAE9CzX63kA= Subject key identifier: 25:9F:BB:45:AD:35:A8:D9:44:73:7B:D2:E2:70:8B:B2:84:BD:FE:98 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E00061AF81400695752328B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 108.177.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:1a:f8:14:00:69:57:52:32:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=1260acaf-d457-4ede-9f31-926e7dc827c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:67:46:8c:ac:39:5c:73:8e:5c:af:20:fc:7d: 9d:39:fc:02:a7:dd:70:14:89:19:e1:a9:14:d7:cf: 20:56:16:5e:e9:92:39:c1:e9:18:b4:c5:62:8e:e0: 19:f0:95:36:72:e0:18:de:8e:d9:ea:88:d8:23:a1: ec:be:67:da:86:11:4b:86:28:df:f4:26:55:87:78: 36:46:83:fa:cc:fc:97:23:d9:67:25:b8:d5:fe:e9: 80:8b:c5:13:7e:28:ec:91:83:8d:db:d0:2c:99:08: d9:db:64:d2:20:81:2a:35:7b:5c:d5:c1:97:7a:fd: e0:6e:c2:a4:93:32:74:0e:85:74:4b:60:3d:9a:1a: 16:21:e6:47:01:b7:9e:7b:5f:a1:bc:cb:a9:cf:1d: 3c:84:58:16:a6:d0:98:75:0e:7b:fa:a6:12:29:5b: a2:d9:ef:12:9c:ea:dd:66:4e:c1:8a:f6:dc:1f:83: 59:9c:05:dc:68:0e:be:6e:47:ea:5a:b1:c0:01:8e: eb:93:13:45:88:05:65:9f:70:c5:ac:8d:d4:f1:5e: 5a:a4:6a:d1:e4:59:52:04:d5:80:b4:35:0e:98:7d: 68:ab:75:83:a1:a1:ff:48:d7:43:2e:5c:ba:fd:b0: 54:35:8e:c0:20:f4:90:e3:9f:c8:95:a4:9f:4a:a5: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9F:BB:45:AD:35:A8:D9:44:73:7B:D2:E2:70:8B:B2:84:BD:FE:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:95:ba:58:45:af:3c:54:51:20:d6:e7:ab:44:f1:e6:a0:c9: e3:7f:4d:87:9b:c7:76:6f:ae:07:2f:98:d3:c2:5e:d7:48:18: 6d:87:eb:1f:b8:72:19:3f:7b:40:54:74:53:ba:72:a4:6e:5c: f8:94:c9:f8:c9:27:fb:5c:95:93:1a:3b:e2:41:75:23:14:37: cc:68:27:f6:59:9b:dd:b3:2d:82:0a:22:db:e3:22:cd:2c:78: 98:5c:91:5b:1f:ce:55:73:5d:da:09:a7:1a:8f:66:fd:c1:72: 4f:7a:e2:de:20:dc:bd:44:70:0f:a7:5c:18:b0:60:60:e6:9d: 89:e4:71:46:c2:9c:93:7c:0e:8a:fe:54:d3:26:10:39:a2:b5: 51:11:b8:5f:dd:e3:5a:8c:2e:cd:21:03:08:91:3d:3c:29:70: c7:b4:08:ad:9d:44:19:04:a8:f9:9b:c0:7c:28:0d:9e:67:17: c1:7b:c5:de:a0:f4:af:46:4d:3a:98:dc:0a:34:e2:a2:74:8b: e1:ff:ce:af:63:ce:ca:63:9a:1a:f9:a4:f1:d2:82:45:83:8d: a4:73:bf:98:ac:5a:9c:6a:2d:5a:4e:6c:7f:ff:d4:21:ad:0b: e3:5d:10:df:18:d4:db:65:50:31:e7:cc:82:53:4e:a8:13:b0: fd:98:ca:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABhr4FABpV1Iyi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk MTI2MGFjYWYtZDQ1Ny00ZWRlLTlmMzEtOTI2ZTdkYzgyN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimdGjKw5XHOOXK8g/H2dOfwCp91wFIkZ4akU 188gVhZe6ZI5wekYtMVijuAZ8JU2cuAY3o7Z6ojYI6HsvmfahhFLhijf9CZVh3g2 RoP6zPyXI9lnJbjV/umAi8UTfijskYON29AsmQjZ22TSIIEqNXtc1cGXev3gbsKk kzJ0DoV0S2A9mhoWIeZHAbeee1+hvMupzx08hFgWptCYdQ57+qYSKVui2e8SnOrd Zk7BivbcH4NZnAXcaA6+bkfqWrHAAY7rkxNFiAVln3DFrI3U8V5apGrR5FlSBNWA tDUOmH1oq3WDoaH/SNdDLly6/bBUNY7AIPSQ45/IlaSfSqXo4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWfu0WtNajZRHN70uJwi7KEvf6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE3YTkxNjgtZDliNS0z ZTNhLWEyYjEtY2UyYTcwNTFjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOVulhFrzxUUSDW56tE8eagyeN/TYebx3ZvrgcvmNPCXtdIGG2H6x+4 chk/e0BUdFO6cqRuXPiUyfjJJ/tclZMaO+JBdSMUN8xoJ/ZZm92zLYIKItvjIs0s eJhckVsfzlVzXdoJpxqPZv3Bck964t4g3L1EcA+nXBiwYGDmnYnkcUbCnJN8Dor+ VNMmEDmitVERuF/d41qMLs0hAwiRPTwpcMe0CK2dRBkEqPmbwHwoDZ5nF8F7xd6g 9K9GTTqY3Ao04qJ0i+H/zq9jzspjmhr5pPHSgkWDjaRzv5isWpxqLVpObH//1CGt C+NdEN8Y1NtlUDHnzIJTTqgTsP2YyoA= -----END CERTIFICATE-----Generated at Sat Jun 13 13:09:52 2026 by rpki-client