$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa File: 60375f84-058e-3934-9882-84d1a2ec55d3.roa (raw, json) Hash identifier: DPNAPr282sgcEV/b1hkJ4WnERrgV3jSaOQDRej3mkwg= Subject key identifier: 82:49:15:5F:0C:A6:71:DD:41:BE:1B:AC:05:DA:BA:FA:14:A9:0D:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A7B1CBDC44ED2650C4570 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 108.170.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:7b:1c:bd:c4:4e:d2:65:0c:45:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=5f6bce5d-8037-46c3-ab7a-b59f2d9af9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:39:6f:7e:4b:02:26:25:08:cf:7d:7b:3d:33: 92:95:90:9b:e1:f1:28:99:25:1d:b1:f8:81:14:b9: 54:36:f2:97:8d:52:c5:ba:cd:29:b1:84:62:e5:32: 7c:ac:d5:0d:bf:9d:26:c5:0a:d2:77:17:02:0d:71: 1c:4d:60:ea:a9:74:47:36:09:81:0b:9b:ff:fb:fe: 5e:83:50:b7:c7:a8:84:e2:0a:1b:3f:b7:5b:51:11: bc:50:6d:7c:30:dd:ad:c0:4b:72:7f:b0:72:ee:d5: 67:89:1c:8d:59:e4:af:6d:01:c7:05:16:f0:08:24: 23:a3:21:f8:56:28:63:62:17:2d:86:86:98:75:6f: 57:6c:1a:0e:ab:18:9d:d7:d8:11:3f:c2:6d:7f:8a: fd:56:c5:d1:b9:33:61:fd:1c:88:13:b6:0e:d9:94: c0:eb:c2:77:12:78:0a:0a:f1:25:54:bd:70:b0:bb: a3:90:39:66:53:8f:06:4d:04:13:3a:c2:81:7a:6d: d9:5b:f0:06:ef:19:98:40:fd:4d:7c:c6:a7:f8:37: 78:7d:75:7e:45:da:ef:2e:5d:1f:78:ef:3a:90:16: 8b:44:25:12:48:6e:2b:4c:38:5a:9b:a2:77:35:76: 1c:d8:c9:2c:84:62:bb:e1:04:35:a2:01:d3:a8:d8: 88:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:49:15:5F:0C:A6:71:DD:41:BE:1B:AC:05:DA:BA:FA:14:A9:0D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a2:a9:94:34:0f:8e:f7:67:8e:a4:9a:b9:ac:bd:cc:ca:f0: 98:c6:bd:d8:93:39:5d:fa:14:0c:1b:ae:c4:97:bb:06:9f:0c: 7f:b1:3b:02:72:88:ed:0d:77:42:25:ff:d8:b9:75:a2:22:0d: 60:70:5b:96:c2:0d:f0:da:cc:f7:e0:26:b0:7b:b5:93:48:25: 91:20:bd:df:0c:16:fc:03:fd:ba:1d:88:5e:21:85:1b:73:ab: a6:54:6c:d9:8b:83:34:cb:a1:b8:6a:38:8f:7a:af:51:fa:4d: 5c:eb:01:cf:d0:74:14:91:4e:56:60:d4:3b:99:dd:52:46:e7: 22:9e:27:b1:8b:c0:21:d9:37:4d:9a:20:d2:49:2c:d6:b5:15: cc:d6:d2:cf:75:99:3a:3b:6b:15:be:ab:3b:82:35:c6:88:a3: 5f:86:15:c8:24:32:dc:71:9c:29:cf:f1:b4:71:23:37:a8:79: b3:9e:ac:54:68:09:d9:df:14:ad:d9:59:d6:7e:cc:3c:9f:bd: 38:2d:29:e5:5d:04:30:ed:17:5c:5e:c2:82:6f:43:a4:1e:5c: 85:91:2a:2b:d9:9d:2e:b7:e0:97:4e:3a:83:dd:7b:a4:79:55: ac:82:12:26:6d:2a:21:5d:a9:48:c7:9c:0b:88:0e:64:52:9a: ee:bb:b9:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnscvcRO0mUMRXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NWY2YmNlNWQtODAzNy00NmMzLWFiN2EtYjU5ZjJkOWFmOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTlvfksCJiUIz317PTOSlZCb4fEomSUdsfiB FLlUNvKXjVLFus0psYRi5TJ8rNUNv50mxQrSdxcCDXEcTWDqqXRHNgmBC5v/+/5e g1C3x6iE4gobP7dbURG8UG18MN2twEtyf7By7tVniRyNWeSvbQHHBRbwCCQjoyH4 VihjYhcthoaYdW9XbBoOqxid19gRP8Jtf4r9VsXRuTNh/RyIE7YO2ZTA68J3EngK CvElVL1wsLujkDlmU48GTQQTOsKBem3ZW/AG7xmYQP1NfMan+Dd4fXV+RdrvLl0f eO86kBaLRCUSSG4rTDham6J3NXYc2MkshGK74QQ1ogHTqNiIxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJJFV8MpnHdQb4brAXauvoUqQ1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjAzNzVmODQtMDU4ZS0z OTM0LTk4ODItODRkMWEyZWM1NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCiqZQ0D473Z46kmrmsvczK8JjGvdiTOV36FAwbrsSXuwafDH+xOwJy iO0Nd0Il/9i5daIiDWBwW5bCDfDazPfgJrB7tZNIJZEgvd8MFvwD/bodiF4hhRtz q6ZUbNmLgzTLobhqOI96r1H6TVzrAc/QdBSRTlZg1DuZ3VJG5yKeJ7GLwCHZN02a INJJLNa1FczW0s91mTo7axW+qzuCNcaIo1+GFcgkMtxxnCnP8bRxIzeoebOerFRo CdnfFK3ZWdZ+zDyfvTgtKeVdBDDtF1xewoJvQ6QeXIWRKivZnS634JdOOoPde6R5 VayCEiZtKiFdqUjHnAuIDmRSmu67uVU= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:29 2026 by rpki-client