$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa File: 4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa (raw, json) Hash identifier: dMrjfbRbMP9GLEllm0ZyhXsuR7rYxSJWdN2QU6tZ7Tg= Subject key identifier: 40:D0:3E:2C:49:27:76:74:46:17:79:B6:AA:CF:DB:0E:71:EA:25:25 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A4DBF4FA6C85500B68740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 108.177.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:4d:bf:4f:a6:c8:55:00:b6:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=6c0e9d8f-504f-4204-a7a2-a82cffbeee8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:6e:eb:06:dc:10:2d:ac:7e:10:e1:7e:5d: f5:32:2f:4a:79:e7:c5:97:2d:e7:4d:8f:aa:35:a9: 39:bb:cb:69:c2:2c:fa:a5:bc:2f:05:a7:52:ff:c7: 6b:78:a8:23:46:af:e7:e6:d4:55:5f:f4:94:ff:94: a5:22:6a:23:d7:2d:0a:c5:a9:eb:39:1c:fd:83:72: d2:b8:b3:fc:8e:af:da:0b:fa:40:98:9b:0c:54:76: 61:88:a9:9a:50:52:01:89:59:9b:f3:43:21:fe:f8: f7:d7:51:52:ae:9f:59:0e:b4:2f:65:b8:75:6b:58: 3e:2e:4a:a1:c1:8d:10:da:f6:12:7c:7e:d5:44:4d: 87:bf:48:b3:cd:8d:c0:de:0a:1a:07:8c:9b:81:2a: ad:f2:bb:9c:ca:fc:52:f0:1f:18:f8:0b:ee:9b:a8: 1f:c0:33:5a:64:49:e8:d7:17:ef:80:94:3e:52:b2: 29:a4:b0:c1:fb:1d:48:63:9c:35:a2:82:8a:7c:53: b0:0a:39:ab:1b:04:5d:ea:10:04:bf:9e:69:43:d2: 24:33:d5:36:f6:13:b6:c7:fc:96:fb:d9:9e:ee:b2: ee:df:5f:ca:ab:3f:23:c0:ba:d7:f0:12:dd:0f:12: c0:c3:f9:a6:4b:25:e1:93:3c:32:da:9b:7a:31:83: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D0:3E:2C:49:27:76:74:46:17:79:B6:AA:CF:DB:0E:71:EA:25:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:69:e1:72:4a:1a:ed:99:4a:b8:66:6f:48:ee:48:4d:d7:ac: 63:18:16:00:8f:2c:b8:f7:39:6a:c4:45:af:91:30:55:23:a6: 5d:6b:d2:9a:dd:1b:63:f1:7d:d4:57:39:25:7a:cb:c3:8c:75: 46:05:bc:d0:a5:26:18:d9:5d:14:41:78:81:c4:28:e3:54:81: 22:cf:a6:2a:77:98:e2:68:82:83:7c:ac:8c:f9:6c:63:f7:cf: 03:39:96:34:25:0b:89:6e:6c:f0:fd:e9:33:b9:91:29:ae:2b: 1e:f1:fc:ad:12:ed:07:19:f0:0e:a0:19:62:74:94:5e:0e:45: 30:30:26:d2:2c:97:c9:0c:c8:52:cc:5a:85:50:df:e3:e0:9b: 6a:4d:00:f3:a6:07:58:b5:70:94:d8:86:10:66:23:c8:75:e9: 24:5b:df:15:86:82:10:25:23:fa:66:52:38:ab:cb:60:95:f5: e5:07:de:08:62:4d:68:8a:85:4e:ed:82:54:63:30:b1:24:8c: 6c:5d:b9:48:60:42:04:10:36:45:ac:5f:4b:20:82:5a:fc:38: b8:2d:15:01:dd:d1:d7:99:90:98:13:98:ba:a4:68:18:b9:b8: 87:c4:1a:4a:e3:bb:9f:16:1e:a9:0b:cb:f9:74:70:b6:9b:7e: ad:ab:cf:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSk2/T6bIVQC2h0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NmMwZTlkOGYtNTA0Zi00MjA0LWE3YTItYTgyY2ZmYmVlZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4l9u6wbcEC2sfhDhfl31Mi9KeefFly3nTY+q Nak5u8tpwiz6pbwvBadS/8dreKgjRq/n5tRVX/SU/5SlImoj1y0KxanrORz9g3LS uLP8jq/aC/pAmJsMVHZhiKmaUFIBiVmb80Mh/vj311FSrp9ZDrQvZbh1a1g+Lkqh wY0Q2vYSfH7VRE2Hv0izzY3A3goaB4ybgSqt8rucyvxS8B8Y+Avum6gfwDNaZEno 1xfvgJQ+UrIppLDB+x1IY5w1ooKKfFOwCjmrGwRd6hAEv55pQ9IkM9U29hO2x/yW +9me7rLu31/Kqz8jwLrX8BLdDxLAw/mmSyXhkzwy2pt6MYNBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDQPixJJ3Z0Rhd5tqrP2w5x6iUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGVjNmYwODUtYjJlNS0z NjA1LWJhYTItNGYxYzRmYzNkZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARp4XJKGu2ZSrhmb0juSE3XrGMYFgCPLLj3OWrERa+RMFUjpl1r0prd G2PxfdRXOSV6y8OMdUYFvNClJhjZXRRBeIHEKONUgSLPpip3mOJogoN8rIz5bGP3 zwM5ljQlC4lubPD96TO5kSmuKx7x/K0S7QcZ8A6gGWJ0lF4ORTAwJtIsl8kMyFLM WoVQ3+Pgm2pNAPOmB1i1cJTYhhBmI8h16SRb3xWGghAlI/pmUjiry2CV9eUH3ghi TWiKhU7tglRjMLEkjGxduUhgQgQQNkWsX0sgglr8OLgtFQHd0deZkJgTmLqkaBi5 uIfEGkrju58WHqkLy/l0cLabfq2rzx4= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:32 2026 by rpki-client