$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c68ac5ee-b0da-3aaa-9166-e226ab928ff1.roa File: c68ac5ee-b0da-3aaa-9166-e226ab928ff1.roa (raw, json) Hash identifier: 7/oykxrTOt5oDoml0jdLFqzyO/PU6BQHARHWpNpHZ94= Subject key identifier: C8:07:C7:E0:F8:14:36:61:A4:3E:E2:8F:59:25:BD:46:0B:50:BA:62 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E0006141DCE10E205E6750788 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c68ac5ee-b0da-3aaa-9166-e226ab928ff1.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 108.170.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:14:1d:ce:10:e2:05:e6:75:07:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=93552b1d-f7cb-4ba3-aa32-186264ae8716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:25:1e:a5:63:15:a0:ef:13:88:5c:84:8c: b9:a9:6a:78:8f:8f:e1:31:46:b4:ac:ea:c2:34:44: b1:bb:af:28:4b:48:1a:07:cd:b5:a7:48:ab:c8:03: 51:ea:ec:7c:91:41:4b:e3:b6:96:10:32:32:86:1d: 99:2f:c2:f6:77:db:9d:e5:bd:d7:76:df:86:69:b7: 0b:e9:df:6c:3b:69:fe:1c:10:b3:2a:d8:f9:0c:34: 6b:64:b7:c1:e5:d5:4e:90:17:0f:b0:31:37:d0:dc: f5:0f:81:cc:5d:67:4e:7e:b0:fe:74:5f:03:c8:72: c2:8f:c9:cb:99:e5:04:1d:6c:96:43:55:64:b5:9e: 1b:e6:f3:ea:f5:fe:32:9f:f0:e2:7c:33:60:60:4b: 15:1b:52:6b:f3:d3:a4:b9:74:69:35:3e:a9:6e:97: c0:8d:27:9d:86:63:f1:c6:ff:93:60:55:f1:99:8f: 83:c9:72:16:ef:ff:f0:11:b2:bd:5f:0b:45:a8:23: e1:94:da:b0:0f:a7:aa:d7:39:cc:f4:d4:cc:f4:90: f5:f0:03:b5:1a:5c:ce:0c:4c:93:80:4f:f8:2c:a0: f2:71:f0:14:d8:bd:43:3b:0b:f3:f6:fa:aa:a2:97: b7:42:ee:ff:70:9a:52:51:09:0b:20:1a:77:45:a7: ab:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:07:C7:E0:F8:14:36:61:A4:3E:E2:8F:59:25:BD:46:0B:50:BA:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c68ac5ee-b0da-3aaa-9166-e226ab928ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:7e:9c:96:2e:74:87:4d:b7:c3:3e:7b:30:5e:d4:6f:38:d3: e6:13:c6:bd:0e:f2:ad:1f:3c:5d:4d:14:0a:3f:ad:01:c2:f3: f2:02:aa:31:db:1b:1a:3f:fd:c6:5d:eb:de:77:24:26:14:24: 8f:d2:54:f2:2a:b9:10:db:6a:fb:7a:f7:d7:50:f8:0e:b8:85: f5:cd:43:19:26:51:82:48:ad:4b:7d:53:e2:44:71:d7:7a:1f: 89:6b:48:7c:31:87:7e:66:9e:79:c6:2a:ef:0f:51:59:22:93: d4:ae:78:f8:47:39:67:f0:3a:2f:5d:eb:53:7f:9b:4e:82:f5: 6c:eb:f0:44:b2:56:62:9c:81:8b:db:57:ec:fb:6a:85:f9:1d: 57:ee:89:b5:0a:d9:57:97:b6:7c:d9:6d:50:8b:3c:ed:8b:1c: 13:67:16:0a:a7:31:a7:f0:39:38:ca:b1:a1:97:2d:6f:e3:51: f3:26:5c:c2:98:c7:32:86:f9:9c:2d:38:96:56:43:3d:0e:53: 07:02:42:73:5a:2a:f7:71:83:ae:b8:2f:e2:b0:6b:d4:3a:30: 97:d0:33:98:69:1f:97:61:b3:ba:21:5a:45:81:e3:95:99:13: 44:51:27:b9:a7:b7:06:da:82:a3:30:00:c9:c1:31:a9:51:fc: 97:9c:2f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABhQdzhDiBeZ1B4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk OTM1NTJiMWQtZjdjYi00YmEzLWFhMzItMTg2MjY0YWU4NzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEYlHqVjFaDvE4hchIy5qWp4j4/hMUa0rOrC NESxu68oS0gaB821p0iryANR6ux8kUFL47aWEDIyhh2ZL8L2d9ud5b3Xdt+GabcL 6d9sO2n+HBCzKtj5DDRrZLfB5dVOkBcPsDE30Nz1D4HMXWdOfrD+dF8DyHLCj8nL meUEHWyWQ1VktZ4b5vPq9f4yn/DifDNgYEsVG1Jr89OkuXRpNT6pbpfAjSedhmPx xv+TYFXxmY+DyXIW7//wEbK9XwtFqCPhlNqwD6eq1znM9NTM9JD18AO1GlzODEyT gE/4LKDycfAU2L1DOwvz9vqqope3Qu7/cJpSUQkLIBp3RaerVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgHx+D4FDZhpD7ij1klvUYLULpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzY4YWM1ZWUtYjBkYS0z YWFhLTkxNjYtZTIyNmFiOTI4ZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJp+nJYudIdNt8M+ezBe1G840+YTxr0O8q0fPF1NFAo/rQHC8/ICqjHb Gxo//cZd6953JCYUJI/SVPIquRDbavt699dQ+A64hfXNQxkmUYJIrUt9U+JEcdd6 H4lrSHwxh35mnnnGKu8PUVkik9SuePhHOWfwOi9d61N/m06C9Wzr8ESyVmKcgYvb V+z7aoX5HVfuibUK2VeXtnzZbVCLPO2LHBNnFgqnMafwOTjKsaGXLW/jUfMmXMKY xzKG+ZwtOJZWQz0OUwcCQnNaKvdxg664L+Kwa9Q6MJfQM5hpH5dhs7ohWkWB45WZ E0RRJ7mntwbagqMwAMnBMalR/JecLy8= -----END CERTIFICATE-----Generated at Sat Jun 13 09:18:49 2026 by rpki-client