$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28876791-1d5a-3c63-b2a9-78a536fe4aee.roa File: 28876791-1d5a-3c63-b2a9-78a536fe4aee.roa (raw, json) Hash identifier: e8UKT77o8sxEyvzRCIlHPdUbq90Uh3Jv0Th6lv6wK3Q= Subject key identifier: A3:C9:A4:E2:30:D1:45:FC:1B:03:A5:D7:3B:67:57:38:B1:78:30:03 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584F0D91AD7D1A16853B7FAEB600 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28876791-1d5a-3c63-b2a9-78a536fe4aee.roa Signing time: Thu 03 Sep 2026 14:14:29 +0000 ROA not before: Thu 03 Sep 2026 14:14:29 +0000 ROA not after: Wed 02 Dec 2026 15:14:29 +0000 asID: 36692 IP address blocks: 108.171.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:91:ad:7d:1a:16:85:3b:7f:ae:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Sep 3 14:14:29 2026 GMT Not After : Dec 2 15:14:29 2026 GMT Subject: CN=7a8853f9-0165-4441-8940-48dd95a01c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1f:64:a9:f2:74:59:ff:fe:64:5e:fb:de:bd: 5c:c4:ae:cb:19:09:85:f6:90:a9:08:e0:47:70:c1: 4b:da:41:32:32:9a:7c:ff:83:7f:4c:52:e3:5b:f8: 2e:e5:7f:72:48:56:11:c8:2c:00:82:02:68:4b:6d: 9a:ce:2e:12:5a:fb:6a:09:af:bc:1c:ac:fe:3f:09: 56:3d:05:c6:ae:89:8d:92:4e:83:fe:b0:d1:17:17: 2d:dc:a3:78:09:33:8a:86:90:0c:38:e3:df:36:9f: 51:d0:f7:55:43:27:f1:c4:1b:1e:b9:1b:2d:a5:d5: 36:c4:86:34:2d:92:8b:02:a9:6c:ee:28:47:52:40: 78:a8:0e:f3:0c:da:82:39:f6:1b:12:2e:a3:df:8f: 36:75:2c:06:ef:43:c0:8e:52:62:5a:cf:9b:d4:27: bc:98:3f:2e:04:67:f7:7c:16:90:e1:d1:4d:2f:3a: 7b:81:a4:9f:b9:ed:77:69:9f:27:b0:a5:f7:65:d4: db:0f:cc:36:85:f6:66:c7:72:a2:fe:c8:d1:9f:72: 20:c7:e2:8f:fe:21:b9:ca:37:20:cd:86:33:6c:51: d4:62:3f:e0:2d:82:c6:50:93:b0:5e:f3:24:22:23: ae:48:0d:a2:7b:33:7a:47:ca:9b:0b:a1:52:1c:5b: eb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C9:A4:E2:30:D1:45:FC:1B:03:A5:D7:3B:67:57:38:B1:78:30:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28876791-1d5a-3c63-b2a9-78a536fe4aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 108.171.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6b:41:e7:ed:18:2e:0b:9c:37:cb:4b:62:5d:5e:58:cb:59: ef:79:c6:c6:4b:db:2a:11:5d:52:bd:96:1f:c1:c4:7b:0e:9d: e5:ec:c8:3c:1c:27:f7:d8:ec:eb:5b:ea:5d:5f:4a:2d:c3:7b: e2:52:66:5c:fd:7a:9a:65:8c:a8:eb:4a:02:c9:c3:7c:5a:e0: 7a:44:da:7f:7a:13:d8:03:68:e0:b6:00:ff:55:9c:35:5f:b8: 6c:4a:9d:a1:51:d0:77:7d:a3:5e:4d:3d:4d:1b:d2:4f:cb:60: 3e:dc:eb:0a:dc:fc:d2:d1:f1:69:b2:e1:d7:ee:6b:a6:d7:a6: d2:d8:d1:b5:50:e1:35:65:23:68:b0:75:26:9a:1a:f2:5b:4f: 65:51:27:f6:14:a6:29:de:98:a5:b0:f1:b5:db:5d:b0:91:14: 87:6d:38:1a:2d:1f:69:2b:e2:95:da:cc:88:71:54:e8:53:1d: db:5d:67:b2:cb:b0:cf:c6:74:21:b2:47:29:23:fb:61:1e:70: b9:88:39:31:e6:bd:4d:f7:e0:f7:6d:24:1a:e2:c2:81:7d:58: a7:e3:f4:e9:6b:08:f5:e6:cf:a8:ca:bc:a7:01:12:f2:f1:2e: ef:8b:de:c3:d9:1d:9f:ad:38:31:6d:ff:f0:22:17:09:e8:4c: 76:9d:ba:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Nka19GhaFO3+utgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MDkwMzE0MTQyOVoXDTI2MTIwMjE1MTQyOVowLzEtMCsGA1UEAxMk N2E4ODUzZjktMDE2NS00NDQxLTg5NDAtNDhkZDk1YTAxYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR9kqfJ0Wf/+ZF773r1cxK7LGQmF9pCpCOBH cMFL2kEyMpp8/4N/TFLjW/gu5X9ySFYRyCwAggJoS22azi4SWvtqCa+8HKz+PwlW PQXGromNkk6D/rDRFxct3KN4CTOKhpAMOOPfNp9R0PdVQyfxxBseuRstpdU2xIY0 LZKLAqls7ihHUkB4qA7zDNqCOfYbEi6j3482dSwG70PAjlJiWs+b1Ce8mD8uBGf3 fBaQ4dFNLzp7gaSfue13aZ8nsKX3ZdTbD8w2hfZmx3Ki/sjRn3Igx+KP/iG5yjcg zYYzbFHUYj/gLYLGUJOwXvMkIiOuSA2iezN6R8qbC6FSHFvrxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPJpOIw0UX8GwOl1ztnVzixeDADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMjg4NzY3OTEtMWQ1YS0z YzYzLWIyYTktNzhhNTM2ZmU0YWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFrQeftGC4LnDfLS2JdXljLWe95xsZL2yoRXVK9lh/BxHsOneXsyDwc J/fY7Otb6l1fSi3De+JSZlz9eppljKjrSgLJw3xa4HpE2n96E9gDaOC2AP9VnDVf uGxKnaFR0Hd9o15NPU0b0k/LYD7c6wrc/NLR8Wmy4dfua6bXptLY0bVQ4TVlI2iw dSaaGvJbT2VRJ/YUpinemKWw8bXbXbCRFIdtOBotH2kr4pXazIhxVOhTHdtdZ7LL sM/GdCGyRykj+2EecLmIOTHmvU334PdtJBriwoF9WKfj9OlrCPXmz6jKvKcBEvLx Lu+L3sPZHZ+tODFt//AiFwnoTHaduhQ= -----END CERTIFICATE-----Generated at Mon Sep 21 18:01:02 2026 by rpki-client