$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa File: cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa (raw, json) Hash identifier: rCQU7G3nliAUleAgLoCUZfKB6Yryb4EJ8UGBITw0NcI= Subject key identifier: F7:B5:A0:B1:92:A7:BD:BB:91:14:EA:5A:27:5E:DE:21:30:F3:AD:8F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292ED1E9E8246822D6BE650 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 108.177.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ed:1e:9e:82:46:82:2d:6b:e6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=a9780704-b56f-4d3c-8b5c-149a15b04852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:d5:d1:39:48:00:ef:4b:d4:0f:f4:0e:50: 28:2d:bb:a0:b9:c1:86:0c:e7:5a:fa:d0:13:21:64: 1a:75:ea:a7:e9:cc:0b:e3:41:e1:56:64:19:80:d9: f2:8f:6b:69:59:68:00:58:45:16:9e:f2:f5:af:73: d1:f3:eb:4b:a4:2b:9a:4b:b0:f7:04:36:66:e2:62: 65:4f:41:eb:4e:13:bb:fe:1a:88:1f:57:3a:2e:d9: de:00:21:65:30:40:a6:bf:65:dd:71:84:5f:08:55: c4:93:f3:22:f9:f6:4e:1c:38:89:13:a7:70:98:77: 27:e3:0c:83:a3:37:8d:34:15:64:ea:e3:d0:26:11: e0:3f:94:bf:c5:ef:e4:89:1b:d6:3c:4c:57:99:81: e5:19:6e:d7:81:12:f5:ee:4a:0a:5c:a2:bc:7e:a6: 54:bd:9e:0e:5c:86:98:8d:53:39:61:d1:d4:6e:b2: f8:94:75:2b:d3:70:08:db:07:33:5c:8d:c2:95:da: 85:9f:2d:a6:fb:b5:43:3a:87:d3:71:cc:7e:32:2d: 32:12:5f:01:8f:70:63:dc:9a:fe:66:1a:4f:eb:f2: 16:b6:29:6c:3d:16:39:c9:69:3e:43:2b:78:2e:77: 7e:7c:11:b4:5a:6b:12:7d:b4:3e:d9:d0:16:96:32: ac:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B5:A0:B1:92:A7:BD:BB:91:14:EA:5A:27:5E:DE:21:30:F3:AD:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:05:66:ce:d7:28:f4:c7:e1:5f:52:a6:93:ed:95:df:93:24: f5:76:06:6a:cc:35:58:04:18:87:53:3c:a2:6b:1f:d5:c1:92: 27:57:3c:8c:83:71:97:18:d9:3e:67:cb:a6:34:6f:78:2c:8b: 9a:84:43:c1:df:4a:d3:3c:4f:b4:86:73:85:6c:42:33:70:65: e5:27:9a:6d:12:fe:8d:16:d8:73:32:6e:16:f7:22:81:0e:a3: 4b:3a:82:a4:94:54:e3:02:41:9d:cb:4a:74:9b:a4:d7:1a:f5: 65:4d:55:e9:6e:7d:0e:09:91:d3:6f:5d:e6:9d:15:d0:ee:40: 8f:79:40:12:3d:2a:2f:f9:b4:2f:60:17:fd:1f:c3:12:79:e9: 8b:0d:92:a5:4a:4c:ee:1a:44:e0:f4:6c:ea:7b:9e:6d:a4:f5: f7:e0:1f:76:54:f9:30:cf:d1:61:75:4c:39:d2:71:66:f8:a1: ce:10:ac:d2:24:e3:59:cb:7a:a6:a3:ff:32:f7:7d:ce:e4:84: 6a:f1:cd:21:9e:41:81:3e:c5:68:e7:36:bb:74:fa:c7:16:e1: 90:4c:1b:63:da:0c:64:46:9c:7e:98:52:ee:ef:ce:8d:47:a2: 2a:8d:d2:23:b9:7e:cb:48:f5:21:b8:34:6b:b2:92:d6:4f:09: 0d:66:03:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iku0enoJGgi1r5lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YTk3ODA3MDQtYjU2Zi00ZDNjLThiNWMtMTQ5YTE1YjA0ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwXV0TlIAO9L1A/0DlAoLbugucGGDOda+tAT IWQadeqn6cwL40HhVmQZgNnyj2tpWWgAWEUWnvL1r3PR8+tLpCuaS7D3BDZm4mJl T0HrThO7/hqIH1c6LtneACFlMECmv2XdcYRfCFXEk/Mi+fZOHDiJE6dwmHcn4wyD ozeNNBVk6uPQJhHgP5S/xe/kiRvWPExXmYHlGW7XgRL17koKXKK8fqZUvZ4OXIaY jVM5YdHUbrL4lHUr03AI2wczXI3CldqFny2m+7VDOofTccx+Mi0yEl8Bj3Bj3Jr+ ZhpP6/IWtilsPRY5yWk+Qyt4Lnd+fBG0WmsSfbQ+2dAWljKshwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe1oLGSp727kRTqWide3iEw862PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2I0ODZlODAtMTYwNi0z Y2M4LThmY2MtODBjNzM5ZjhlY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgFZs7XKPTH4V9SppPtld+TJPV2BmrMNVgEGIdTPKJrH9XBkidXPIyD cZcY2T5ny6Y0b3gsi5qEQ8HfStM8T7SGc4VsQjNwZeUnmm0S/o0W2HMybhb3IoEO o0s6gqSUVOMCQZ3LSnSbpNca9WVNVelufQ4JkdNvXeadFdDuQI95QBI9Ki/5tC9g F/0fwxJ56YsNkqVKTO4aROD0bOp7nm2k9ffgH3ZU+TDP0WF1TDnScWb4oc4QrNIk 41nLeqaj/zL3fc7khGrxzSGeQYE+xWjnNrt0+scW4ZBMG2PaDGRGnH6YUu7vzo1H oiqN0iO5fstI9SG4NGuyktZPCQ1mA0g= -----END CERTIFICATE-----Generated at Thu Nov 5 18:56:15 2026 by rpki-client