$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa File: aa48523e-152e-352b-93ab-2b9702c9a66c.roa (raw, json) Hash identifier: 6vOaA1v+LUZTUBMBRIF88ZuFFJiuLlqhAWzAVWW2RL0= Subject key identifier: 74:80:B1:92:50:80:4B:9B:4B:DB:5B:15:31:6B:76:79:BF:57:10:1C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A4C0A60C796C2A7F63200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 108.170.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:4c:0a:60:c7:96:c2:a7:f6:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=ab221c89-1fb3-4ab7-ab34-b7381455c325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a3:1c:2d:65:3e:17:dc:24:d7:c3:04:58:fe: d9:ca:4a:5b:11:e7:00:b3:8d:c3:11:75:84:2c:7a: 0c:5e:44:4d:2d:a0:4d:10:88:d5:31:ba:c8:3d:31: 12:3a:e9:23:f3:e6:30:37:37:cb:bc:39:74:ab:18: f7:40:35:5b:ce:b0:1f:bc:9a:07:17:c6:e4:35:54: 9e:aa:76:bd:7a:87:14:1b:c9:7b:fe:17:fb:c9:93: 25:cb:ad:66:6a:78:f1:6e:9f:7b:9c:c8:04:5a:fe: 36:ec:d3:b4:ad:21:f7:02:42:40:09:61:ff:29:58: cc:89:25:5a:0d:74:43:8d:43:54:e3:3b:fe:5f:5b: a8:61:58:ac:8b:aa:57:81:96:52:02:36:0c:de:21: 70:7b:47:d1:ee:6e:de:85:2c:7d:ce:7f:b7:ec:82: 79:ae:4f:a6:80:2f:75:32:89:f5:29:9e:6a:51:16: f5:90:56:24:14:2f:76:6f:9b:3f:06:17:6e:f4:fc: 4a:23:81:43:7c:4c:5f:d0:3b:27:48:cd:85:2b:ac: 3b:33:0f:d7:5f:4c:cd:7d:32:f5:a6:88:71:11:83: da:f9:b0:03:70:9e:82:48:b3:70:c2:78:3c:97:49: 49:15:41:22:49:10:e1:f8:c3:52:6d:f9:19:07:96: 41:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:80:B1:92:50:80:4B:9B:4B:DB:5B:15:31:6B:76:79:BF:57:10:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:50:bb:a0:a8:78:f9:5d:f7:40:cd:10:98:de:3a:10:46:9d: df:e2:f1:41:0d:d2:68:e7:ed:ef:a2:e8:ec:a0:5a:a1:89:3f: dc:0b:a5:4d:75:2a:8e:77:61:24:7d:38:bd:6f:a6:d6:fa:20: 31:f4:fb:ff:a0:47:39:51:c9:fd:40:23:0e:05:7c:41:70:6d: 8e:f7:be:a9:94:2a:a9:ed:4f:ec:86:78:b7:a7:2d:33:fc:dc: 13:6c:24:f6:08:45:f7:ad:ac:a1:50:09:48:cf:3b:63:6d:2e: 01:44:b2:99:49:34:06:ed:5d:de:41:4b:01:53:4f:f6:bc:fe: 59:bb:30:00:fa:03:0a:1c:75:d9:96:33:db:68:16:3c:12:52: 8d:74:69:97:c3:9c:4f:0c:19:f2:f4:ee:f1:ea:58:0d:5b:c4: 0a:67:c7:78:c6:d7:cb:3a:10:a3:e9:92:72:c7:92:e3:c5:6d: c4:f6:dd:22:32:d8:91:9d:13:b4:32:05:22:f2:c5:26:da:99: e5:ad:99:b7:c4:66:1f:5a:b8:ee:55:4f:66:f3:63:2c:fa:1d: 11:fd:19:50:c7:c4:9c:09:a2:30:5d:de:5b:90:2e:fa:19:f0: 20:e6:65:8e:01:6d:f3:48:13:cc:8e:b5:5a:1c:75:a6:b7:ff: be:cd:f1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkwKYMeWwqf2MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YWIyMjFjODktMWZiMy00YWI3LWFiMzQtYjczODE0NTVjMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqMcLWU+F9wk18MEWP7ZykpbEecAs43DEXWE LHoMXkRNLaBNEIjVMbrIPTESOukj8+YwNzfLvDl0qxj3QDVbzrAfvJoHF8bkNVSe qna9eocUG8l7/hf7yZMly61manjxbp97nMgEWv427NO0rSH3AkJACWH/KVjMiSVa DXRDjUNU4zv+X1uoYVisi6pXgZZSAjYM3iFwe0fR7m7ehSx9zn+37IJ5rk+mgC91 Mon1KZ5qURb1kFYkFC92b5s/Bhdu9PxKI4FDfExf0DsnSM2FK6w7Mw/XX0zNfTL1 pohxEYPa+bADcJ6CSLNwwng8l0lJFUEiSRDh+MNSbfkZB5ZBaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSAsZJQgEubS9tbFTFrdnm/VxAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE0ODUyM2UtMTUyZS0z NTJiLTkzYWItMmI5NzAyYzlhNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpQu6CoePld90DNEJjeOhBGnd/i8UEN0mjn7e+i6OygWqGJP9wLpU11 Ko53YSR9OL1vptb6IDH0+/+gRzlRyf1AIw4FfEFwbY73vqmUKqntT+yGeLenLTP8 3BNsJPYIRfetrKFQCUjPO2NtLgFEsplJNAbtXd5BSwFTT/a8/lm7MAD6AwocddmW M9toFjwSUo10aZfDnE8MGfL07vHqWA1bxApnx3jG18s6EKPpknLHkuPFbcT23SIy 2JGdE7QyBSLyxSbameWtmbfEZh9auO5VT2bzYyz6HRH9GVDHxJwJojBd3luQLvoZ 8CDmZY4BbfNIE8yOtVocdaa3/77N8Yc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:12 2026 by rpki-client