$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa File: 7f0cb031-dcee-3d44-8d27-f094f67636b1.roa (raw, json) Hash identifier: 9gcCvQWl5Bu3pL4bAXnHojl8GTfe1kvXJr3keWroVjo= Subject key identifier: 2B:F8:D9:F8:7E:38:11:A3:63:17:36:AB:BE:9C:10:C6:23:29:E1:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A4C409E9FFF84013FFE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 108.170.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:4c:40:9e:9f:ff:84:01:3f:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=c66b547a-2860-40ad-8fd0-c9edd3d04797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a4:c1:15:4a:4b:36:eb:c1:51:c4:f0:d9:77: 89:cd:4c:ff:54:83:45:b1:b8:11:0e:24:98:8e:2f: e4:8f:18:e0:7d:81:be:98:f4:51:80:a3:ed:a1:58: 77:19:33:ef:c6:4b:38:00:9a:1d:00:ad:0f:ab:3f: df:0e:1c:20:99:fb:60:21:3e:e8:e8:b8:fd:42:4b: 22:d3:d6:50:9e:95:0d:69:f3:87:06:be:5a:58:74: dc:6a:28:d7:e8:17:26:5d:cc:07:06:34:77:0e:b1: da:8a:42:41:cf:62:cd:1a:db:61:0a:f1:5c:91:33: b8:a5:c0:ae:d3:41:6f:a6:8d:dc:e5:b6:66:7b:36: 48:0f:ca:e2:f1:b8:a3:37:45:3c:f0:68:1a:81:bc: 5c:27:ec:e5:e0:5f:09:f3:47:84:2b:84:02:7a:7d: 44:bc:08:e1:a4:08:26:e2:b1:4d:37:24:fd:83:91: 73:8b:49:72:d1:a1:d0:bc:a4:ba:ec:9a:ad:fd:43: 29:79:32:40:4c:4d:54:32:91:18:fd:5f:a4:42:ce: 29:6a:7b:fb:7d:f5:e2:bc:6f:16:a8:12:d4:2f:eb: 23:4b:80:7c:e7:b9:f4:c0:68:07:ae:77:ea:1c:63: 6e:e4:b2:d9:8b:d5:af:04:51:a0:33:fd:05:0b:43: 40:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F8:D9:F8:7E:38:11:A3:63:17:36:AB:BE:9C:10:C6:23:29:E1:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9b:0a:7a:cc:b6:66:08:45:dd:13:30:b8:7a:c8:4d:d0:b6: 16:aa:1d:f7:ce:7d:d3:b2:93:9e:66:84:8d:87:cb:dc:97:8b: 91:e2:dd:76:7b:97:a7:0f:80:51:1d:62:9a:3b:3e:60:f2:83: 9f:bd:ac:78:32:29:4f:a1:69:bc:4d:4e:7c:3c:3d:24:04:11: fc:b0:71:3f:36:06:40:9b:49:98:e8:6d:13:70:9d:a8:95:4c: 95:7a:a2:68:aa:1f:ee:37:24:1d:2e:96:26:c1:75:63:4c:c7: 25:73:84:5c:4b:1d:82:a5:48:0f:c5:5c:62:0a:ba:d7:bc:c8: be:6f:4c:92:40:2f:de:a8:f9:eb:78:36:8e:a3:c2:1b:c4:44: f7:c4:ac:d7:2f:bf:5e:6c:2b:09:c2:35:ed:81:f4:93:30:94: 46:62:7b:be:15:cb:01:ee:27:69:56:d7:fc:01:51:6a:d4:c6: 13:c9:88:31:cf:f3:9f:4d:c8:b6:ae:64:50:48:2f:4e:33:d0: a2:ff:22:88:d3:7a:51:cf:6f:61:e9:05:cc:2e:a1:03:a5:51: dc:40:64:62:7f:fa:7f:d7:6b:4d:98:c2:be:57:7a:f3:a2:20: 0d:6c:1d:91:2d:8d:30:09:ff:dd:04:aa:38:a4:c0:26:f2:f6: 7b:e8:0f:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkxAnp//hAE//gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YzY2YjU0N2EtMjg2MC00MGFkLThmZDAtYzllZGQzZDA0Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqTBFUpLNuvBUcTw2XeJzUz/VINFsbgRDiSY ji/kjxjgfYG+mPRRgKPtoVh3GTPvxks4AJodAK0Pqz/fDhwgmftgIT7o6Lj9Qksi 09ZQnpUNafOHBr5aWHTcaijX6BcmXcwHBjR3DrHaikJBz2LNGtthCvFckTO4pcCu 00Fvpo3c5bZmezZID8ri8bijN0U88GgagbxcJ+zl4F8J80eEK4QCen1EvAjhpAgm 4rFNNyT9g5Fzi0ly0aHQvKS67Jqt/UMpeTJATE1UMpEY/V+kQs4panv7ffXivG8W qBLUL+sjS4B857n0wGgHrnfqHGNu5LLZi9WvBFGgM/0FC0NA2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv42fh+OBGjYxc2q76cEMYjKeFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2YwY2IwMzEtZGNlZS0z ZDQ0LThkMjctZjA5NGY2NzYzNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqbCnrMtmYIRd0TMLh6yE3QthaqHffOfdOyk55mhI2Hy9yXi5Hi3XZ7 l6cPgFEdYpo7PmDyg5+9rHgyKU+habxNTnw8PSQEEfywcT82BkCbSZjobRNwnaiV TJV6omiqH+43JB0ulibBdWNMxyVzhFxLHYKlSA/FXGIKute8yL5vTJJAL96o+et4 No6jwhvERPfErNcvv15sKwnCNe2B9JMwlEZie74VywHuJ2lW1/wBUWrUxhPJiDHP 859NyLauZFBIL04z0KL/IojTelHPb2HpBcwuoQOlUdxAZGJ/+n/Xa02Ywr5XevOi IA1sHZEtjTAJ/90EqjikwCby9nvoD0o= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:12 2026 by rpki-client