$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa File: aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa (raw, json) Hash identifier: wdo3Qd2hd/wQCVZ8xyJB6BpsobVLqY2fTeDEU2t7DnU= Subject key identifier: EC:07:34:A9:45:77:3C:1C:23:22:89:40:E6:81:65:12:1E:28:DD:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A829DF8653C57DD8EBE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 108.177.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:82:9d:f8:65:3c:57:dd:8e:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=741f8b58-404a-444e-a63b-3b5d4da1a1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b9:73:c7:02:ef:a0:8f:cf:0a:2d:49:06:da: a2:df:a4:14:58:31:64:c2:32:c1:74:37:a5:43:c2: 7c:07:cc:15:a9:f9:1d:ef:b8:54:35:5b:00:0e:7f: 92:17:80:02:b6:db:da:9c:ad:03:17:25:95:82:14: 13:1c:01:15:b4:e3:94:a8:5e:e4:1c:79:1e:2b:88: 4e:88:d1:53:85:75:3f:d3:2b:d7:34:33:e9:c6:91: 11:ac:e4:8d:7f:90:cd:42:76:e9:58:53:a2:8a:aa: e0:bb:fe:b7:7e:f0:c6:d9:21:da:85:d3:52:58:6d: db:f4:3a:e4:fa:3b:2e:67:f2:2e:6c:8f:98:94:e3: 42:d5:f9:91:7f:85:2c:7e:a8:77:29:94:5f:07:7b: 75:fa:f9:d0:f3:6f:d8:28:6f:a2:97:15:dd:15:1f: b8:a8:75:53:98:89:b7:c8:55:c9:de:2a:50:68:14: 8a:a6:57:9e:1c:eb:76:75:14:b0:21:d4:e4:5f:75: 12:99:d9:43:f6:be:bf:2e:fc:fb:8d:c9:6c:11:2e: 44:ef:e8:8c:9a:cf:a5:47:1c:07:a0:18:3b:d9:3d: 7d:94:8d:59:7d:5f:dd:42:ed:cd:f6:7e:20:b4:67: 94:17:35:9f:64:87:51:13:16:31:40:96:ee:a0:dd: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:07:34:A9:45:77:3C:1C:23:22:89:40:E6:81:65:12:1E:28:DD:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:05:2c:7d:62:e3:50:ca:5a:99:fe:35:66:e7:ea:d8:fd:a4: 36:7b:f3:fd:c3:25:b7:b5:1b:be:e0:87:5e:08:81:24:d1:a3: a1:34:20:d8:91:86:25:f5:1b:1c:5e:36:e3:bf:25:cc:05:23: b6:7b:21:9c:09:96:07:d5:7c:d0:1c:70:3e:d9:8c:15:44:fd: 19:71:da:15:16:de:6e:56:eb:c7:da:ff:96:45:74:2d:26:fd: 33:c3:c9:80:90:bf:d3:c0:b1:21:ca:0c:d7:20:f5:75:dc:ec: 2d:d0:8b:88:ee:53:f9:f0:08:96:7d:b5:10:65:6e:42:f1:13: c4:b3:38:f1:3d:4f:db:79:ba:f4:50:a9:a6:12:97:1d:00:f5: fd:19:b2:30:36:5d:b0:8e:d6:b2:05:a7:2f:b5:63:b7:0e:93: 38:21:91:ba:4b:db:1c:60:e7:f1:13:99:19:28:c4:99:32:0f: 44:d4:93:c4:e3:91:ab:1e:a6:5c:f2:a1:11:be:63:4c:d9:86: 92:85:9c:ce:94:55:a5:83:8e:a4:ed:1e:a0:bc:19:60:8d:48: 9b:a4:d6:5a:dc:81:c7:4b:c6:0e:1c:9b:0a:76:45:b2:2d:35: b7:74:c0:65:3c:fd:ba:74:39:c1:ac:df:3f:f3:2f:9d:af:a7: a9:5b:0d:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoKd+GU8V92OvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NzQxZjhiNTgtNDA0YS00NDRlLWE2M2ItM2I1ZDRkYTFhMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrlzxwLvoI/PCi1JBtqi36QUWDFkwjLBdDel Q8J8B8wVqfkd77hUNVsADn+SF4ACttvanK0DFyWVghQTHAEVtOOUqF7kHHkeK4hO iNFThXU/0yvXNDPpxpERrOSNf5DNQnbpWFOiiqrgu/63fvDG2SHahdNSWG3b9Drk +jsuZ/IubI+YlONC1fmRf4Usfqh3KZRfB3t1+vnQ82/YKG+ilxXdFR+4qHVTmIm3 yFXJ3ipQaBSKpleeHOt2dRSwIdTkX3USmdlD9r6/Lvz7jclsES5E7+iMms+lRxwH oBg72T19lI1ZfV/dQu3N9n4gtGeUFzWfZIdRExYxQJbuoN3dxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwHNKlFdzwcIyKJQOaBZRIeKN1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE3YTkxNjgtZDliNS0z ZTNhLWEyYjEtY2UyYTcwNTFjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMFLH1i41DKWpn+NWbn6tj9pDZ78/3DJbe1G77gh14IgSTRo6E0INiR hiX1GxxeNuO/JcwFI7Z7IZwJlgfVfNAccD7ZjBVE/Rlx2hUW3m5W68fa/5ZFdC0m /TPDyYCQv9PAsSHKDNcg9XXc7C3Qi4juU/nwCJZ9tRBlbkLxE8SzOPE9T9t5uvRQ qaYSlx0A9f0ZsjA2XbCO1rIFpy+1Y7cOkzghkbpL2xxg5/ETmRkoxJkyD0TUk8Tj kaseplzyoRG+Y0zZhpKFnM6UVaWDjqTtHqC8GWCNSJuk1lrcgcdLxg4cmwp2RbIt Nbd0wGU8/bp0OcGs3z/zL52vp6lbDTw= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:07 2026 by rpki-client