$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a899bf22-be60-3a95-bac4-9f2d21b4a70d.roa File: a899bf22-be60-3a95-bac4-9f2d21b4a70d.roa (raw, json) Hash identifier: ngGabk85O+G5JzA4/6L+Bvndua7bh1650XJtN5Mk8kQ= Subject key identifier: E6:58:01:D6:7E:18:74:38:A6:77:D7:8D:79:FC:6E:11:CB:7D:E1:27 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584FB0BDD98C341068F20F90DD00 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a899bf22-be60-3a95-bac4-9f2d21b4a70d.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 36692 IP address blocks: 108.171.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:d9:8c:34:10:68:f2:0f:90:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=685c9e25-b261-44ce-9abe-d266ecfe4a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:71:77:48:ee:65:ad:e3:69:20:8e:78:b4: 3a:64:79:b0:63:ca:67:15:1b:af:42:48:7f:57:a2: 8a:f1:9b:d1:72:ec:06:c9:9c:88:a8:1d:6d:f2:d1: f0:82:53:de:0c:9c:ba:57:ba:32:ef:f6:1a:6f:5d: fc:67:10:63:cb:1f:f7:37:16:38:2f:02:78:a9:db: 3a:62:dd:8a:2b:ca:78:da:82:c5:01:aa:5b:fb:af: c2:f3:7a:59:1d:61:ab:e2:81:0b:23:8a:ba:fb:7e: 57:70:8b:93:28:e4:c1:cb:22:39:5e:73:ce:76:f6: 4f:ac:6e:bd:7f:01:f9:d1:23:a7:ae:de:a4:69:ad: a3:02:88:43:74:06:a7:c3:94:74:91:05:be:02:c7: 13:c7:08:93:a2:f8:d2:0c:3c:d0:e4:8e:64:9e:76: fd:93:b7:e2:b3:c6:bc:66:fd:eb:0b:cf:e4:37:d2: d8:39:2f:13:87:97:30:24:f8:97:3c:a4:f6:65:6e: ba:a3:8f:e9:ed:5b:5d:67:a7:b8:71:48:46:b9:6f: ce:7e:9a:67:ae:5a:a7:be:80:1d:84:04:70:7e:d9: e1:79:23:74:d7:56:1b:6c:b9:9d:3c:b3:dc:1d:58: bd:1d:a5:66:1d:c7:ab:08:b2:52:1b:56:e5:0c:2a: e2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:58:01:D6:7E:18:74:38:A6:77:D7:8D:79:FC:6E:11:CB:7D:E1:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a899bf22-be60-3a95-bac4-9f2d21b4a70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 108.171.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:47:a4:e5:ac:6c:d0:0e:98:a4:31:b3:a3:63:ca:e3:13:9c: 81:b9:35:83:a9:93:ab:e3:0d:97:1d:2d:db:c5:bb:30:45:2b: 71:b8:3d:3d:f3:a7:79:4c:c5:5b:42:9a:b6:40:d8:e0:14:5e: 36:86:1d:fe:8e:d6:e3:c1:45:6f:f8:00:07:1f:65:59:e1:16: d5:9a:f0:c2:09:a3:5c:81:44:61:4c:bf:24:ef:4b:31:14:18: 44:0a:c2:6a:50:76:61:6c:92:66:41:1d:c5:2b:d9:47:0e:b3: 84:3a:d9:93:44:37:d5:94:4d:78:2a:fa:b1:44:b8:c6:65:26: 5d:32:74:6d:92:3b:03:60:7d:f2:b5:82:d1:03:52:58:4d:c2: 19:27:39:d3:6e:65:69:65:b7:ea:48:83:fa:87:d0:6e:6d:30: 18:fc:8d:c7:3b:c9:4d:31:9f:2a:f1:e2:ee:33:b7:c9:ae:c6: d2:eb:3c:87:35:a1:46:1d:5d:67:ee:87:b1:f8:09:cb:fd:56: be:a3:1b:e8:06:44:7c:91:d7:4a:19:40:80:78:1c:44:00:1c: 59:4a:4b:e1:aa:56:ba:00:1f:71:78:7d:6b:16:ea:03:c4:95: 17:8f:06:97:04:dc:62:22:59:86:1b:5f:ca:6e:28:00:84:30: 3a:94:de:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wvdmMNBBo8g+Q3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk Njg1YzllMjUtYjI2MS00NGNlLTlhYmUtZDI2NmVjZmU0YTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVlxd0juZa3jaSCOeLQ6ZHmwY8pnFRuvQkh/ V6KK8ZvRcuwGyZyIqB1t8tHwglPeDJy6V7oy7/Yab138ZxBjyx/3NxY4LwJ4qds6 Yt2KK8p42oLFAapb+6/C83pZHWGr4oELI4q6+35XcIuTKOTByyI5XnPOdvZPrG69 fwH50SOnrt6kaa2jAohDdAanw5R0kQW+AscTxwiTovjSDDzQ5I5knnb9k7fis8a8 Zv3rC8/kN9LYOS8Th5cwJPiXPKT2ZW66o4/p7VtdZ6e4cUhGuW/OfppnrlqnvoAd hARwftnheSN011YbbLmdPLPcHVi9HaVmHcerCLJSG1blDCriKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZYAdZ+GHQ4pnfXjXn8bhHLfeEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvYTg5OWJmMjItYmU2MC0z YTk1LWJhYzQtOWYyZDIxYjRhNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKuBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVHpOWsbNAOmKQxs6NjyuMTnIG5NYOpk6vjDZcdLdvFuzBFK3G4PT3z p3lMxVtCmrZA2OAUXjaGHf6O1uPBRW/4AAcfZVnhFtWa8MIJo1yBRGFMvyTvSzEU GEQKwmpQdmFskmZBHcUr2UcOs4Q62ZNEN9WUTXgq+rFEuMZlJl0ydG2SOwNgffK1 gtEDUlhNwhknOdNuZWllt+pIg/qH0G5tMBj8jcc7yU0xnyrx4u4zt8muxtLrPIc1 oUYdXWfuh7H4Ccv9Vr6jG+gGRHyR10oZQIB4HEQAHFlKS+GqVroAH3F4fWsW6gPE lRePBpcE3GIiWYYbX8puKACEMDqU3vE= -----END CERTIFICATE-----Generated at Thu Nov 5 14:50:47 2026 by rpki-client