$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa File: 521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa (raw, json) Hash identifier: J6gCaf5Cega5ZoS5oeevripmRI9u8HKft5Jz6aoSLWE= Subject key identifier: 79:2D:6B:4F:69:E6:42:90:BD:CC:7C:97:DE:D5:EB:13:77:85:EC:E1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A7CD9D19F13CECA91A0C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 108.170.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:7c:d9:d1:9f:13:ce:ca:91:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=eb52e2e8-784c-4a82-b0ce-fd3c00cc4147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:83:03:01:45:26:5f:61:b8:98:5a:15:21: 19:61:c0:06:a9:43:34:50:e1:97:cf:8c:87:1c:81: d8:95:3e:73:d1:c5:71:8a:fb:de:78:7d:c9:2c:39: 79:ac:40:52:25:0b:66:b5:f1:60:94:f0:8d:a3:bf: 0a:88:39:93:3c:27:68:49:bd:a9:07:0b:16:69:4f: 26:03:4f:f2:02:8c:43:d3:31:1f:7d:d7:8c:24:79: df:27:d2:fe:43:0b:af:21:90:ee:8e:88:36:d7:cf: a0:58:8a:46:0c:52:b5:69:88:74:96:10:ea:1e:7d: 95:14:3d:53:0e:98:f6:5f:b4:26:6a:16:f3:49:3c: fe:91:6f:64:8e:b5:80:74:c7:f7:38:e1:df:54:ac: 03:2e:53:a0:8b:6d:1e:d9:05:85:d7:80:d8:9e:c0: 73:dc:d9:c5:d0:a9:e7:4f:ca:c1:88:1a:45:9f:11: 78:04:29:a8:c7:74:5d:6b:3a:44:0e:3e:80:69:2a: c0:5b:95:26:81:e8:72:79:9b:e1:53:b0:6e:21:b1: 32:66:db:13:bd:a0:a4:ab:e5:ab:d4:0a:47:92:45: e6:08:06:b0:4e:bd:f7:dc:36:0a:fb:09:73:dd:ae: e6:59:24:eb:0a:a7:a3:bd:e0:b7:60:1a:36:fc:00: 84:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2D:6B:4F:69:E6:42:90:BD:CC:7C:97:DE:D5:EB:13:77:85:EC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:70:9e:4e:9d:67:fc:5c:b1:39:e6:1a:eb:43:11:c2:cf:da: 01:c2:e8:18:ed:ed:9d:eb:60:34:73:1b:b4:d1:4d:21:ab:71: c3:f4:0e:8c:41:ed:de:ad:0e:8c:23:4a:95:e0:73:16:d3:b3: af:83:31:a3:a6:70:4a:fd:57:53:96:5a:8f:c1:ee:73:07:e2: 83:a0:ba:b1:7c:9a:b6:92:52:a4:b4:34:8f:6a:6c:e2:79:e7: fc:21:76:e1:ad:d5:b3:49:fb:33:3f:ba:df:2a:0a:be:bc:16: b8:94:62:56:a1:03:58:3a:4e:b7:e7:9b:3e:14:a7:e5:18:da: 70:e6:02:fd:1f:de:5e:5d:3f:d5:4f:32:af:87:d3:02:38:ae: 24:7c:a9:26:b3:2e:d9:d4:fd:96:10:77:97:ce:bb:30:ee:a6: 5d:16:ff:fa:a8:7e:18:d0:04:7e:c4:a2:0f:ef:c3:b1:9c:f2: 92:83:e3:fd:2d:91:d6:1a:c7:79:0a:e5:60:07:8b:36:83:ac: 36:67:de:46:b7:ce:f5:47:02:95:f1:c4:72:62:d5:c9:c5:3e: 64:b3:fe:f2:bd:67:57:58:b0:cf:da:bc:5f:05:5b:6c:80:64: 4c:95:99:40:0c:79:88:41:57:93:26:a1:c1:b7:f6:a0:16:65: 47:ff:a8:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnzZ0Z8TzsqRoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZWI1MmUyZTgtNzg0Yy00YTgyLWIwY2UtZmQzYzAwY2M0MTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvuDAwFFJl9huJhaFSEZYcAGqUM0UOGXz4yH HIHYlT5z0cVxivveeH3JLDl5rEBSJQtmtfFglPCNo78KiDmTPCdoSb2pBwsWaU8m A0/yAoxD0zEffdeMJHnfJ9L+QwuvIZDujog218+gWIpGDFK1aYh0lhDqHn2VFD1T Dpj2X7QmahbzSTz+kW9kjrWAdMf3OOHfVKwDLlOgi20e2QWF14DYnsBz3NnF0Knn T8rBiBpFnxF4BCmox3RdazpEDj6AaSrAW5UmgehyeZvhU7BuIbEyZtsTvaCkq+Wr 1ApHkkXmCAawTr333DYK+wlz3a7mWSTrCqejveC3YBo2/ACErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkta09p5kKQvcx8l97V6xN3hezhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTIxYTNlOTctMWE1Yy0z ZmM0LTk5M2ItNTUyMWZmMTJkOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1wnk6dZ/xcsTnmGutDEcLP2gHC6Bjt7Z3rYDRzG7TRTSGrccP0DoxB 7d6tDowjSpXgcxbTs6+DMaOmcEr9V1OWWo/B7nMH4oOgurF8mraSUqS0NI9qbOJ5 5/whduGt1bNJ+zM/ut8qCr68FriUYlahA1g6Trfnmz4Up+UY2nDmAv0f3l5dP9VP Mq+H0wI4riR8qSazLtnU/ZYQd5fOuzDupl0W//qofhjQBH7Eog/vw7Gc8pKD4/0t kdYax3kK5WAHizaDrDZn3ka3zvVHApXxxHJi1cnFPmSz/vK9Z1dYsM/avF8FW2yA ZEyVmUAMeYhBV5MmocG39qAWZUf/qHo= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:48 2026 by rpki-client