$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa File: 4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa (raw, json) Hash identifier: 6f7Sn8yNEMlRsUkMGHaSVpTnHYKLRxpCi5WI90DMflk= Subject key identifier: CF:CD:16:4E:08:A1:29:87:B8:DE:14:70:8F:5C:B8:FC:41:E3:16:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A70BB5CDF50BF63BA00B0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 108.170.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:70:bb:5c:df:50:bf:63:ba:00:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=3b3b278e-09bb-4f35-89af-bdfbebd37086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:fb:97:4e:10:2e:4e:71:c2:46:da:b6:a4: 7c:3b:a4:af:8c:6a:f0:59:a0:d5:96:29:18:70:b3: fe:c5:a2:62:49:95:6d:b0:ad:a2:16:e5:14:0e:ae: 6e:a8:4c:7f:dd:bb:60:e9:42:f6:82:11:24:92:37: 05:fe:a5:18:31:95:f7:ff:23:fe:11:16:21:15:15: b5:d0:55:ef:11:ab:58:6f:f5:5a:6f:a4:9e:ce:42: ff:fc:8f:fb:2d:26:34:7c:94:de:4a:0d:3e:af:33: 94:1c:cc:4e:df:13:51:53:d4:73:16:3a:3e:ed:89: 40:60:fc:02:b9:db:5d:09:ff:79:2b:cf:e1:96:20: 7d:ec:b7:3e:0f:85:b7:11:1d:89:9a:86:6d:8e:46: 15:64:d6:b6:87:2a:bc:13:1c:4b:a3:bd:90:53:08: 6c:71:58:47:c9:fa:d8:05:21:71:8c:05:de:00:4e: 1a:70:18:6e:56:93:46:85:05:f2:1b:0f:d5:14:95: 51:a4:4b:0f:b5:6b:fc:9e:70:52:7f:9d:26:7d:c5: e6:fb:c7:a4:b8:16:96:f5:80:34:a6:1b:d1:a9:b7: cd:b7:8c:89:69:83:f3:85:a8:31:27:cb:38:d9:90: 38:ce:8d:47:c8:83:c3:2e:ca:26:0b:c4:d6:bd:93: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CD:16:4E:08:A1:29:87:B8:DE:14:70:8F:5C:B8:FC:41:E3:16:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a7:d7:b4:d8:aa:cf:94:31:ed:06:6b:6f:e0:7e:35:ac:a0: 4f:4d:cb:50:25:0b:dd:04:78:f8:ca:eb:a3:2a:df:16:9a:77: 80:0d:fe:47:92:8c:1f:ee:3e:1e:70:b4:ab:6a:29:27:72:14: ae:f2:28:50:5f:cf:b0:f5:6f:75:d0:1d:d0:61:12:c0:04:1b: 92:a6:9a:ad:a4:74:fe:9d:8f:e5:a5:ac:29:6f:ab:87:62:8f: e1:6b:04:e4:68:3d:70:19:e1:88:6f:e5:a7:97:c5:5b:8b:da: 98:4c:ca:75:3f:96:05:3b:60:68:9f:51:31:80:4f:65:89:4e: 20:0a:88:5e:2f:0c:b6:b5:44:ed:5c:a9:84:a4:08:8b:fa:f8: e7:f0:50:c0:20:55:4a:5a:99:6c:3f:45:f5:e4:38:38:57:a4: b1:f2:df:f1:8c:28:36:d8:25:1e:97:bf:b9:0e:ce:71:28:c5: c7:26:ca:45:e9:37:03:25:fb:61:c1:bb:7a:9c:38:f9:e2:47: 19:98:e6:6e:8b:c0:37:f8:77:a1:33:d8:cf:e0:ff:30:0f:5b: 92:1b:dc:ed:b3:4c:86:16:78:81:51:f9:a3:d2:c3:db:ab:33: c8:97:a6:62:7b:18:cc:e6:27:4a:02:f9:df:b8:ba:fc:a0:d3: a1:24:93:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnC7XN9Qv2O6ALAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk M2IzYjI3OGUtMDliYi00ZjM1LTg5YWYtYmRmYmViZDM3MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQn7l04QLk5xwkbatqR8O6SvjGrwWaDVlikY cLP+xaJiSZVtsK2iFuUUDq5uqEx/3btg6UL2ghEkkjcF/qUYMZX3/yP+ERYhFRW1 0FXvEatYb/Vab6SezkL//I/7LSY0fJTeSg0+rzOUHMxO3xNRU9RzFjo+7YlAYPwC udtdCf95K8/hliB97Lc+D4W3ER2JmoZtjkYVZNa2hyq8ExxLo72QUwhscVhHyfrY BSFxjAXeAE4acBhuVpNGhQXyGw/VFJVRpEsPtWv8nnBSf50mfcXm+8ekuBaW9YA0 phvRqbfNt4yJaYPzhagxJ8s42ZA4zo1HyIPDLsomC8TWvZO26QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/NFk4IoSmHuN4UcI9cuPxB4xbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGQ1ZmIyMzQtNGIwZC0z NzViLTg4MzAtZjZhNTUwYmExYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABan17TYqs+UMe0Ga2/gfjWsoE9Ny1AlC90EePjK66Mq3xaad4AN/keS jB/uPh5wtKtqKSdyFK7yKFBfz7D1b3XQHdBhEsAEG5Kmmq2kdP6dj+WlrClvq4di j+FrBORoPXAZ4Yhv5aeXxVuL2phMynU/lgU7YGifUTGAT2WJTiAKiF4vDLa1RO1c qYSkCIv6+OfwUMAgVUpamWw/RfXkODhXpLHy3/GMKDbYJR6Xv7kOznEoxccmykXp NwMl+2HBu3qcOPniRxmY5m6LwDf4d6Ez2M/g/zAPW5Ib3O2zTIYWeIFR+aPSw9ur M8iXpmJ7GMzmJ0oC+d+4uvyg06Ekk+Q= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:30 2026 by rpki-client