$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa File: 3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa (raw, json) Hash identifier: 2XybrA3k4GoM/Md/hzP5J5gUljLbgdN7/g6T9SzBhGs= Subject key identifier: 38:0C:4A:28:7B:9D:D5:5A:9A:AC:AF:1E:EF:BD:BB:41:AD:B7:99:96 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A4D7DBF7641A64F351600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 108.177.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:4d:7d:bf:76:41:a6:4f:35:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=e1dd4757-1739-4b51-895e-128183b0111b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:00:06:97:cc:e1:54:f2:e0:88:60:97:90:7c: 27:db:e9:9c:65:d4:17:2b:29:09:2b:79:08:06:16: bd:9b:1d:88:ab:b2:d2:56:c3:f4:ab:cb:40:a0:21: c9:7c:b3:40:ca:41:5b:53:42:ef:ba:76:7a:bc:10: f4:8d:d5:dc:9c:0f:3b:32:e1:67:86:e3:7d:15:89: cc:7e:ac:3d:ff:d5:1b:41:66:92:da:2f:24:b8:83: 70:8f:b8:f3:17:37:f0:7a:a3:13:c7:bd:0b:5e:3a: 9f:e4:d1:a8:ef:f4:04:13:d6:5e:86:ae:54:a1:6b: fa:ca:55:70:1a:29:a9:de:d9:2e:73:42:4c:b5:ba: 69:f8:48:ab:1b:c2:a5:37:fc:08:ca:38:62:f8:0a: b9:6c:83:00:ee:7a:38:cf:31:69:f4:af:dc:f9:23: 58:4e:ac:b7:32:f0:ff:38:52:36:94:3b:c2:e7:a4: 16:6d:1b:c4:29:3c:63:08:8d:ea:be:6d:4e:b9:2b: 3c:f8:da:1a:2e:f3:5e:fb:29:23:24:02:6a:56:72: 74:f5:ea:56:e8:61:19:96:3d:9f:ea:78:63:0e:e6: 8e:a7:34:7a:3b:f7:fb:c6:98:46:44:7a:72:86:52: b9:8e:32:f1:b6:a9:ec:ba:37:74:54:84:24:09:87: 2f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0C:4A:28:7B:9D:D5:5A:9A:AC:AF:1E:EF:BD:BB:41:AD:B7:99:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:9c:4f:24:6c:ab:fd:54:7a:b7:78:a2:5e:5f:fb:6c:ec:4c: e4:74:ff:f5:d0:9f:88:02:7a:8d:7b:1f:4b:ef:6b:34:1c:24: e2:56:43:38:85:7b:89:0b:44:e1:11:00:f2:2a:0f:b3:35:92: 20:e5:ef:77:b7:ae:cf:4d:93:bd:88:db:e9:92:b0:5b:2a:77: 63:70:1b:81:3e:39:12:19:d8:5b:f9:8b:0b:05:b7:6b:85:13: be:e9:8b:5b:c5:2a:82:b0:5a:e7:95:f8:10:50:9b:eb:95:0d: 86:e4:10:cc:70:72:0c:e0:32:f0:8b:4a:5e:7e:f8:21:5a:7a: 0c:1e:cb:46:4d:0a:17:db:58:55:96:66:95:e6:36:c1:01:12: 15:6e:5e:16:8d:f4:4b:5d:a0:19:2a:aa:09:58:b8:2f:c2:75: 17:4d:cf:8d:ff:30:16:53:d4:af:2a:14:76:c5:1c:dd:54:3b: 66:ae:c1:98:aa:74:95:72:fc:ca:7d:68:f7:98:b5:45:a1:b8: 9a:51:85:4c:09:87:35:f8:c2:d7:8e:df:72:8c:ca:4f:f1:6d: 73:1f:f1:62:5a:5e:16:7a:b9:39:c5:77:81:64:3e:4f:90:4e: e2:9c:11:97:20:4b:b4:a0:b2:bd:07:e2:8c:bd:57:ea:15:0d: f9:61:f2:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSk19v3ZBpk81FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZTFkZDQ3NTctMTczOS00YjUxLTg5NWUtMTI4MTgzYjAxMTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgAGl8zhVPLgiGCXkHwn2+mcZdQXKykJK3kI Bha9mx2Iq7LSVsP0q8tAoCHJfLNAykFbU0LvunZ6vBD0jdXcnA87MuFnhuN9FYnM fqw9/9UbQWaS2i8kuINwj7jzFzfweqMTx70LXjqf5NGo7/QEE9Zehq5UoWv6ylVw Gimp3tkuc0JMtbpp+EirG8KlN/wIyjhi+Aq5bIMA7no4zzFp9K/c+SNYTqy3MvD/ OFI2lDvC56QWbRvEKTxjCI3qvm1OuSs8+NoaLvNe+ykjJAJqVnJ09epW6GEZlj2f 6nhjDuaOpzR6O/f7xphGRHpyhlK5jjLxtqnsujd0VIQkCYcvxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgMSih7ndVamqyvHu+9u0Gtt5mWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzkwN2E0YzEtMmFhYi0z YWI5LWIzYWUtOWQxZjcwNGVlNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2cTyRsq/1Uerd4ol5f+2zsTOR0//XQn4gCeo17H0vvazQcJOJWQziF e4kLROERAPIqD7M1kiDl73e3rs9Nk72I2+mSsFsqd2NwG4E+ORIZ2Fv5iwsFt2uF E77pi1vFKoKwWueV+BBQm+uVDYbkEMxwcgzgMvCLSl5++CFaegwey0ZNChfbWFWW ZpXmNsEBEhVuXhaN9EtdoBkqqglYuC/CdRdNz43/MBZT1K8qFHbFHN1UO2auwZiq dJVy/Mp9aPeYtUWhuJpRhUwJhzX4wteO33KMyk/xbXMf8WJaXhZ6uTnFd4FkPk+Q TuKcEZcgS7Sgsr0H4oy9V+oVDflh8vI= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:39 2026 by rpki-client