$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa File: 5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa (raw, json) Hash identifier: SsVjcFU9vsQz46ixhoQTWc6ztwVyR8REHwbcDtXjy4I= Subject key identifier: F4:35:2D:AD:9C:0C:25:2A:E5:C6:82:CC:C3:82:C4:4F:96:3E:26:A7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A79BE8B565CDAE2699D40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 108.177.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:79:be:8b:56:5c:da:e2:69:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=56c1789f-4b4c-4bf7-a27b-216e278f326b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ee:a5:db:cf:7b:f8:c9:47:25:d8:40:44:65: dc:9c:71:78:62:6a:8f:09:c3:87:74:bc:49:df:80: 68:14:02:4a:96:7b:db:84:a5:d5:2b:e0:85:b8:67: ba:e0:bc:06:0d:7c:82:ab:01:51:5b:cf:f1:e2:c0: 28:70:fc:f7:4c:e0:7c:86:06:1d:9a:ce:db:ff:a1: 3e:3a:f4:fc:dc:63:92:19:41:56:b7:38:79:f9:f1: f2:1b:3c:d8:02:58:c4:2e:e5:58:a8:ea:11:2a:5e: d8:88:2d:fd:d9:a1:b5:3c:dc:5d:e7:40:6b:db:7f: 73:84:39:44:74:89:0a:66:e4:36:0b:43:a3:f1:2e: 62:7e:88:83:dd:72:9b:56:6a:d1:ef:bd:d8:f1:de: 91:b0:51:37:a3:fb:ba:fc:f9:ba:4a:9d:2e:4c:ba: 62:9b:71:a3:35:78:36:7b:7e:1a:5a:b0:f9:26:eb: 35:f7:43:ce:e5:e8:42:f6:86:d1:fd:7f:49:4b:6a: 04:cc:f0:21:39:14:39:cf:2c:cb:f0:13:c0:0c:f1: 73:2a:19:3e:dd:44:d0:50:90:0b:78:ee:98:b7:7b: 0f:4e:23:40:f3:9d:3d:d0:a8:61:15:08:cd:40:d3: 91:0d:89:9f:97:4b:ee:44:e8:a5:c8:9f:f7:5b:d3: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:35:2D:AD:9C:0C:25:2A:E5:C6:82:CC:C3:82:C4:4F:96:3E:26:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f7:f7:3c:7e:aa:c9:de:2d:b7:a5:ee:f5:c1:c3:72:d5:31: 11:f9:fa:48:62:e3:6e:a9:3f:53:c7:99:b9:cf:40:94:f8:4a: 8e:88:07:44:cc:bb:cc:68:2d:df:5b:26:22:da:92:ff:c5:31: 46:2b:a8:d5:17:ac:14:6c:e1:e9:f1:ff:bf:2e:c8:7d:ea:6f: a8:74:e7:46:98:a2:f7:35:8b:6d:57:0a:92:2d:0f:a8:27:2e: 69:c8:f5:65:68:33:44:b4:f5:93:27:63:ca:c4:de:aa:6b:b0: 45:6b:65:8f:3a:be:56:ad:14:04:28:c8:11:bc:48:26:06:c1: ae:8d:29:a3:14:0b:dc:cb:1a:ac:c3:e7:34:08:fc:de:da:63: 2e:c0:17:bb:e4:e3:72:24:1d:49:49:89:54:33:b4:af:f4:c8: ec:25:2c:0c:1b:fc:de:b2:39:24:9a:a4:3c:d7:18:f1:83:ac: e4:a0:2d:07:9a:f6:fa:7a:ee:0f:1d:12:5f:17:cc:28:e9:de: 50:ee:9d:b2:cb:df:5e:92:cd:7a:49:e7:00:a6:ed:b9:cf:bc: 43:cd:3c:27:bb:47:62:9c:98:18:64:3d:1c:1f:f2:08:51:63: 99:b1:63:72:26:74:95:a5:62:35:37:10:cc:2d:be:1b:d6:79: de:a2:4c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnm+i1Zc2uJpnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NTZjMTc4OWYtNGI0Yy00YmY3LWEyN2ItMjE2ZTI3OGYzMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu6l2897+MlHJdhARGXcnHF4YmqPCcOHdLxJ 34BoFAJKlnvbhKXVK+CFuGe64LwGDXyCqwFRW8/x4sAocPz3TOB8hgYdms7b/6E+ OvT83GOSGUFWtzh5+fHyGzzYAljELuVYqOoRKl7YiC392aG1PNxd50Br239zhDlE dIkKZuQ2C0Oj8S5ifoiD3XKbVmrR773Y8d6RsFE3o/u6/Pm6Sp0uTLpim3GjNXg2 e34aWrD5Jus190PO5ehC9obR/X9JS2oEzPAhORQ5zyzL8BPADPFzKhk+3UTQUJAL eO6Yt3sPTiNA85090KhhFQjNQNORDYmfl0vuROilyJ/3W9NSWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ1La2cDCUq5caCzMOCxE+WPianMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTM2OWZjZGItODIzYS0z ZjdhLWFjYTUtMWNhYmUwMWYxZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/39zx+qsneLbel7vXBw3LVMRH5+khi426pP1PHmbnPQJT4So6IB0TM u8xoLd9bJiLakv/FMUYrqNUXrBRs4enx/78uyH3qb6h050aYovc1i21XCpItD6gn LmnI9WVoM0S09ZMnY8rE3qprsEVrZY86vlatFAQoyBG8SCYGwa6NKaMUC9zLGqzD 5zQI/N7aYy7AF7vk43IkHUlJiVQztK/0yOwlLAwb/N6yOSSapDzXGPGDrOSgLQea 9vp67g8dEl8XzCjp3lDunbLL316SzXpJ5wCm7bnPvEPNPCe7R2KcmBhkPRwf8ghR Y5mxY3ImdJWlYjU3EMwtvhvWed6iTPE= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:31 2026 by rpki-client