$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/152e21f9-a4e6-3fc6-8847-e747084d8b1d.roa File: 152e21f9-a4e6-3fc6-8847-e747084d8b1d.roa (raw, json) Hash identifier: wAlQDJoefBXRrZX6Iw+qbOGUnULqlXDYCLlx3d8qNZQ= Subject key identifier: EC:F4:8F:60:18:1B:09:61:58:24:4E:90:37:2F:F3:FA:49:C6:4A:8D Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584EA793922FCC844BC885DAF980 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/152e21f9-a4e6-3fc6-8847-e747084d8b1d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 53940 IP address blocks: 108.59.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:92:2f:cc:84:4b:c8:85:da:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=efafb6a0-b358-4d74-8bf6-66b9f8c39d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:db:ae:e4:e0:1e:4a:27:f2:b0:7d:ea:0d: bb:f8:c0:d9:23:43:9a:37:61:19:6b:12:10:fb:3d: 5a:59:34:88:0b:99:31:87:97:61:ba:9b:a3:7c:05: 58:cf:6d:26:73:77:72:88:9a:d1:08:3c:52:79:d5: cd:42:94:40:48:9c:3e:f1:b0:a1:ed:14:6e:d9:15: e0:73:a6:28:05:87:cc:3c:18:9c:c3:d7:01:36:cf: 08:ec:02:60:64:43:91:fd:56:e9:8f:bf:8e:97:19: 8a:84:61:70:e4:cd:92:9e:9f:94:6f:eb:7c:a0:4c: c9:05:4b:0e:5e:ba:da:fb:1f:12:c5:c1:cc:a4:ab: 21:ad:a6:35:08:a9:02:47:46:01:c5:d8:d1:e5:f8: 10:b5:4c:32:4d:7d:c4:da:31:a7:79:6d:9b:e1:f1: 39:99:ce:d3:ca:fe:f4:0b:dc:a6:c4:b1:1d:f2:4d: ff:24:92:16:93:90:5b:ee:6a:b9:7a:db:ff:b6:8b: b9:82:6b:83:4f:92:00:ca:b2:70:04:bf:cc:44:66: a1:dd:81:c0:ef:bf:86:11:d9:f5:40:f4:04:6d:05: b0:d6:e9:66:8c:9e:a4:c6:68:31:39:bd:a8:0b:9a: e3:85:e0:2b:61:1e:78:ff:b5:19:e6:5c:75:54:0a: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F4:8F:60:18:1B:09:61:58:24:4E:90:37:2F:F3:FA:49:C6:4A:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/152e21f9-a4e6-3fc6-8847-e747084d8b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 108.59.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e1:08:00:22:9b:38:c4:ac:6a:09:9c:19:2f:49:0a:5b:90: 87:a4:d8:56:b0:83:c8:17:d3:75:49:e6:62:e3:05:cc:61:4f: ef:e7:c6:86:50:cb:6f:43:9f:2c:ec:78:c9:d8:a1:36:3a:82: c5:5a:9e:ab:df:a9:1c:10:80:04:db:e5:7c:81:d7:cf:63:89: 4d:ed:87:68:e0:3d:8f:03:c5:f4:f7:b0:97:45:89:48:4b:1b: 96:ef:00:d2:75:0d:16:ba:6d:f3:c6:9c:e7:c0:b1:9e:f7:10: c5:a6:6f:ae:bc:9f:c3:86:bc:77:6f:8a:27:e3:2e:8e:f9:f4: a3:88:14:c7:80:9d:4f:8e:d4:04:cd:54:39:9f:8b:bb:57:d5: 9c:87:d1:dc:8a:50:84:bf:ec:25:19:48:c8:92:2c:ee:69:b3: 1f:c7:92:ef:3a:00:f9:2f:62:79:ac:eb:7f:bc:a1:c0:4f:e9: c7:ac:22:fe:16:a6:9c:15:dc:35:64:16:68:ad:1d:6a:1e:87: 53:f9:d0:a7:7c:d8:af:10:73:e7:dd:ae:4f:eb:31:d4:00:ed: ae:c2:05:a6:5c:4d:52:d1:96:4b:13:66:3f:87:10:e4:c4:4c: d4:47:bb:be:77:eb:a8:51:3d:e6:ba:bd:13:20:69:f3:03:1c: 5c:f7:90:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk5IvzIRLyIXa+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWZhZmI2YTAtYjM1OC00ZDc0LThiZjYtNjZiOWY4YzM5ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrbbruTgHkon8rB96g27+MDZI0OaN2EZaxIQ +z1aWTSIC5kxh5dhupujfAVYz20mc3dyiJrRCDxSedXNQpRASJw+8bCh7RRu2RXg c6YoBYfMPBicw9cBNs8I7AJgZEOR/Vbpj7+OlxmKhGFw5M2Snp+Ub+t8oEzJBUsO Xrra+x8SxcHMpKshraY1CKkCR0YBxdjR5fgQtUwyTX3E2jGneW2b4fE5mc7Tyv70 C9ymxLEd8k3/JJIWk5Bb7mq5etv/tou5gmuDT5IAyrJwBL/MRGah3YHA77+GEdn1 QPQEbQWw1ulmjJ6kxmgxOb2oC5rjheArYR54/7UZ5lx1VAozQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOz0j2AYGwlhWCROkDcv8/pJxkqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvMTUyZTIxZjktYTRlNi0z ZmM2LTg4NDctZTc0NzA4NGQ4YjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzhCAAimzjErGoJnBkvSQpbkIek2Fawg8gX03VJ5mLjBcxhT+/nxoZQ y29DnyzseMnYoTY6gsVanqvfqRwQgATb5XyB189jiU3th2jgPY8DxfT3sJdFiUhL G5bvANJ1DRa6bfPGnOfAsZ73EMWmb668n8OGvHdviifjLo759KOIFMeAnU+O1ATN VDmfi7tX1ZyH0dyKUIS/7CUZSMiSLO5psx/Hku86APkvYnms63+8ocBP6cesIv4W ppwV3DVkFmitHWoeh1P50Kd82K8Qc+fdrk/rMdQA7a7CBaZcTVLRlksTZj+HEOTE TNRHu75366hRPea6vRMgafMDHFz3kIo= -----END CERTIFICATE-----Generated at Fri Sep 4 21:10:16 2026 by rpki-client