$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa File: d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa (raw, json) Hash identifier: Z3lwhJ4+43SokE7x01S5AU2NrnufpaA3gaACu4xej2g= Subject key identifier: C1:25:47:0A:1C:67:9B:95:A8:C0:F6:A9:1E:30:72:62:69:06:FB:22 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E0005F32D6F0ECDB3112E3B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 108.170.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:f3:2d:6f:0e:cd:b3:11:2e:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=8478e95e-8e52-445d-a46f-0e1eb4fc008a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:1e:5e:21:4d:a6:9d:f3:9f:f7:8b:de:0a: 0a:da:97:b7:ae:15:97:34:e3:e1:fd:3a:e5:46:fb: 61:04:7d:2a:10:52:e3:35:9e:bd:c1:02:2c:55:70: 88:95:6a:8e:11:36:d8:b9:70:9e:11:04:a0:f0:45: e5:14:99:c4:8f:ab:35:dd:e6:56:0e:ce:3d:ea:6f: be:7a:06:e3:5d:d5:22:3b:ce:0e:bc:da:28:55:e1: 4b:8c:20:ac:36:5f:c5:22:49:5f:eb:1c:d5:34:ce: 51:41:70:1a:37:d3:bc:d5:0c:8c:f8:82:54:01:d0: 1b:8b:2a:7d:c6:8f:a3:78:2d:cc:8e:0b:7d:09:3a: 95:7c:9a:bf:1d:c1:ff:9c:bd:ff:04:a9:d0:a3:d8: a2:6b:98:4c:a2:ca:e1:a3:f3:d9:9b:f2:09:df:a3: 6a:9a:b7:2a:6a:8f:bd:ca:33:03:6e:db:76:80:ca: d2:75:f7:be:0e:88:04:31:71:b1:12:f5:bc:1d:03: 5f:bf:35:42:36:37:50:e1:61:c1:59:a6:5b:7a:f6: 20:1f:5d:84:a0:28:63:cb:29:d2:69:b8:38:0b:98: 0d:20:ca:86:31:fd:01:3a:ef:72:8b:e8:86:9c:63: c7:90:d4:05:80:5d:02:ee:97:41:78:93:f6:62:5d: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:25:47:0A:1C:67:9B:95:A8:C0:F6:A9:1E:30:72:62:69:06:FB:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:76:e8:a7:e3:f5:e4:7c:37:cc:8b:e8:2c:25:17:c0:83:01: 2a:3e:ef:47:80:42:f4:68:50:ad:bc:c0:2b:eb:84:76:94:0b: d6:76:9e:7e:13:0b:57:7e:fc:d1:62:2f:21:4d:51:45:fb:e5: 13:10:17:39:c2:24:73:df:c3:0b:95:ee:9e:58:4b:b4:93:be: 09:f0:dd:2d:e9:8b:83:37:75:83:e3:87:2f:5d:16:c5:4d:eb: 97:97:4c:0d:60:cf:ac:5e:f0:df:91:68:61:68:e5:0d:a9:59: aa:2f:1e:6a:bc:c0:9f:1e:7c:8f:b0:b6:97:78:3a:30:79:ef: 64:60:47:be:4f:99:7c:ab:ab:f0:0e:6d:33:32:07:fc:1f:d6: 3a:f1:12:67:6b:e3:72:aa:a0:59:0c:53:91:03:ce:3b:5f:4c: c1:03:ab:fc:9e:36:af:52:d5:86:02:7b:f0:31:42:e7:05:7c: 3e:2f:21:25:5b:21:7f:5e:94:91:4f:85:be:a1:94:04:69:c3: a4:ec:05:93:0e:f4:c8:40:9d:a6:80:80:68:66:91:d8:69:2c: 59:9e:8d:e4:82:64:fb:50:e9:97:57:ba:2d:f7:28:61:17:88: c1:81:21:b6:a3:82:fd:51:fa:6f:1f:f9:b6:9d:e0:7a:96:35: 13:db:19:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABfMtbw7NsxEuO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk ODQ3OGU5NWUtOGU1Mi00NDVkLWE0NmYtMGUxZWI0ZmMwMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwYeXiFNpp3zn/eL3goK2pe3rhWXNOPh/Trl RvthBH0qEFLjNZ69wQIsVXCIlWqOETbYuXCeEQSg8EXlFJnEj6s13eZWDs496m++ egbjXdUiO84OvNooVeFLjCCsNl/FIklf6xzVNM5RQXAaN9O81QyM+IJUAdAbiyp9 xo+jeC3Mjgt9CTqVfJq/HcH/nL3/BKnQo9iia5hMosrho/PZm/IJ36Nqmrcqao+9 yjMDbtt2gMrSdfe+DogEMXGxEvW8HQNfvzVCNjdQ4WHBWaZbevYgH12EoChjyynS abg4C5gNIMqGMf0BOu9yi+iGnGPHkNQFgF0C7pdBeJP2Yl2ChwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMElRwocZ5uVqMD2qR4wcmJpBvsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDUxM2U1YWMtYmI4MC0z ZWM1LTkxMTgtNzhhNDFjMjBhYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN26Kfj9eR8N8yL6CwlF8CDASo+70eAQvRoUK28wCvrhHaUC9Z2nn4T C1d+/NFiLyFNUUX75RMQFznCJHPfwwuV7p5YS7STvgnw3S3pi4M3dYPjhy9dFsVN 65eXTA1gz6xe8N+RaGFo5Q2pWaovHmq8wJ8efI+wtpd4OjB572RgR75PmXyrq/AO bTMyB/wf1jrxEmdr43KqoFkMU5EDzjtfTMEDq/yeNq9S1YYCe/AxQucFfD4vISVb IX9elJFPhb6hlARpw6TsBZMO9MhAnaaAgGhmkdhpLFmejeSCZPtQ6ZdXui33KGEX iMGBIbajgv1R+m8f+bad4HqWNRPbGYo= -----END CERTIFICATE-----Generated at Sat Jun 13 13:14:23 2026 by rpki-client