$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa File: a42880a1-b447-3c0e-acb2-9877d9ca7371.roa (raw, json) Hash identifier: /9SiaYvW9nR8daZklag9sCUyo8b4US52rvyN6CJNCEM= Subject key identifier: 20:EE:89:C6:50:C6:2D:B0:00:23:91:47:23:01:DA:99:A1:2F:FF:C4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A4C2F3FAAFA86C3516F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 108.170.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:4c:2f:3f:aa:fa:86:c3:51:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=ebf9b5df-9ed1-45f7-bb25-473ae934750a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:ee:51:8e:cf:50:db:88:9c:63:67:49:14: fe:62:ae:95:0d:62:a3:38:13:45:e6:57:9e:f2:02: b6:af:d4:31:c2:03:7d:b9:bf:80:e1:8b:e1:e7:3c: b2:09:af:93:a8:87:fc:4b:55:47:fe:7b:31:98:3c: 18:f1:f1:b9:01:ed:1c:d9:98:0a:06:8e:96:cb:5c: 01:4d:c2:31:c3:98:af:e0:d5:92:1e:01:e7:e7:41: 55:04:af:7c:f4:96:bd:74:7d:3d:6a:23:ee:26:e8: 53:27:31:8a:16:41:f7:7a:7b:a8:82:b5:b8:52:59: 5d:99:b6:d0:a1:fa:bf:fb:33:c2:36:93:f4:05:09: 91:3e:51:1e:ff:01:31:0c:0e:d9:91:bc:e3:13:45: b2:60:1e:f7:75:a2:b1:1d:ca:ea:c2:1a:1e:79:3b: b5:a4:f9:bb:28:88:dc:36:70:76:b7:4e:16:9b:f6: f4:1e:5b:09:30:8d:61:df:3a:8e:85:c4:cb:76:9c: 93:1d:17:66:d9:97:6b:7d:f9:e2:26:41:34:68:5b: 7a:87:59:09:ef:93:68:a2:0d:34:b7:fe:ed:f7:4b: 39:9a:85:25:97:de:db:57:7e:a6:fc:f4:82:44:a4: e5:60:63:0e:72:9f:ce:d3:d0:a2:dc:d8:29:0a:8a: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EE:89:C6:50:C6:2D:B0:00:23:91:47:23:01:DA:99:A1:2F:FF:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:64:2b:a0:3e:85:13:de:e0:09:ca:f5:85:15:81:24:bd:aa: 77:f0:10:28:a3:64:00:1d:f4:71:21:80:af:62:14:fd:6d:35: 10:f1:55:28:02:4a:17:70:32:be:cf:8f:9d:13:34:1b:e7:8c: 58:a8:7b:ff:51:e5:bd:e2:c2:85:70:bd:6b:02:0f:7f:6d:04: b3:37:a6:7d:65:55:52:ad:bd:e0:91:89:43:09:c9:05:a0:f7: 6e:e8:8c:9b:c9:e0:9d:6e:77:a8:74:39:4f:d1:ab:be:f1:89: df:3e:e3:41:64:bd:08:cb:84:c7:95:57:c8:52:2d:7d:08:03: d6:b3:9b:3f:de:66:b8:32:a5:96:81:1d:97:ad:b8:65:14:0f: 4c:97:85:3a:a7:f6:52:87:46:74:3b:7f:36:ec:d6:ed:14:d1: 88:53:f6:67:a9:c3:7a:f9:b9:2e:d6:bc:ac:e8:de:bd:dd:38: e1:1b:3b:76:8d:9a:4d:68:e4:a2:e4:9d:d0:fa:c1:74:75:59: 4c:33:5a:89:46:27:92:00:3b:8e:b5:90:ca:1e:76:2c:5c:aa: 54:7a:80:cc:4a:81:92:3e:8f:c1:f2:23:bb:5e:4b:4e:a1:53: 22:12:6a:b8:cd:e3:fc:e6:37:70:62:d5:e4:fd:d8:a4:7a:24: 53:57:20:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkwvP6r6hsNRb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZWJmOWI1ZGYtOWVkMS00NWY3LWJiMjUtNDczYWU5MzQ3NTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDnuUY7PUNuInGNnSRT+Yq6VDWKjOBNF5lee 8gK2r9QxwgN9ub+A4Yvh5zyyCa+TqIf8S1VH/nsxmDwY8fG5Ae0c2ZgKBo6Wy1wB TcIxw5iv4NWSHgHn50FVBK989Ja9dH09aiPuJuhTJzGKFkH3enuogrW4UlldmbbQ ofq/+zPCNpP0BQmRPlEe/wExDA7ZkbzjE0WyYB73daKxHcrqwhoeeTu1pPm7KIjc NnB2t04Wm/b0HlsJMI1h3zqOhcTLdpyTHRdm2ZdrffniJkE0aFt6h1kJ75Noog00 t/7t90s5moUll97bV36m/PSCRKTlYGMOcp/O09Ci3NgpCooLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDuicZQxi2wACORRyMB2pmhL//EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQyODgwYTEtYjQ0Ny0z YzBlLWFjYjItOTg3N2Q5Y2E3MzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJkK6A+hRPe4AnK9YUVgSS9qnfwECijZAAd9HEhgK9iFP1tNRDxVSgC ShdwMr7Pj50TNBvnjFioe/9R5b3iwoVwvWsCD39tBLM3pn1lVVKtveCRiUMJyQWg 927ojJvJ4J1ud6h0OU/Rq77xid8+40FkvQjLhMeVV8hSLX0IA9azmz/eZrgypZaB HZetuGUUD0yXhTqn9lKHRnQ7fzbs1u0U0YhT9mepw3r5uS7WvKzo3r3dOOEbO3aN mk1o5KLkndD6wXR1WUwzWolGJ5IAO461kMoedixcqlR6gMxKgZI+j8HyI7teS06h UyISarjN4/zmN3Bi1eT92KR6JFNXIBI= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:52 2026 by rpki-client