$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa File: d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa (raw, json) Hash identifier: HLe1qxKQqoNwGvCqCAW+8zGO7p0dIz9AT97m2Jy6u1o= Subject key identifier: 43:D5:4A:C1:1E:CC:62:F4:66:58:42:B8:A0:0B:C6:D0:AB:D9:DC:54 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A5D3E6E39342A96921400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 108.170.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:5d:3e:6e:39:34:2a:96:92:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=2efabb77-b7e6-4f10-9c11-e7cedc1700ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:44:a6:a8:64:bd:6b:99:03:2c:6b:e5:b4:79: 76:86:15:ad:85:9e:6b:70:f2:dd:4e:2b:05:28:a8: 53:c5:ba:51:38:d4:ee:ae:80:26:da:2e:e3:b4:37: d6:c1:0d:19:90:ad:c1:1a:e3:88:6f:8b:06:e5:52: df:e0:16:9c:65:ee:4a:23:a0:35:23:98:b6:a8:0c: eb:b8:62:91:aa:8f:c9:5c:5d:bd:20:7e:38:b1:04: 8c:e7:2c:7f:5f:2e:0f:65:b8:f7:2e:8e:a4:2b:5f: 30:14:dd:11:48:23:19:cf:16:e9:16:0c:99:36:6b: b3:2e:b0:43:11:3f:4e:6a:dc:a4:57:b8:7c:6f:34: bd:cc:fe:70:7c:70:7e:6c:94:b2:5d:f9:7f:37:5f: 12:9b:fa:d1:91:bb:85:c2:20:bc:5d:47:f6:19:84: 92:9a:bd:4c:c1:e6:c8:20:d2:26:4c:b0:74:86:47: f7:50:00:aa:b7:6a:1f:26:7c:3a:01:7b:c9:44:97: ff:00:37:72:21:fd:27:a9:bf:fb:02:13:4a:22:c9: c7:dd:3b:19:f6:ba:61:d8:ca:21:e7:e4:cb:8b:bf: 26:8f:bb:62:a7:3b:95:da:ed:ca:7e:b2:02:88:87: ba:df:a8:99:74:0b:b7:fc:e4:ba:c9:68:ee:6d:76: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D5:4A:C1:1E:CC:62:F4:66:58:42:B8:A0:0B:C6:D0:AB:D9:DC:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d4:bf:0e:f5:16:e9:b9:f5:f3:98:09:36:68:6f:b3:c3:6f: 54:af:c2:1c:60:3e:64:b0:3f:f9:37:bb:c3:ba:a7:b4:1d:32: 85:67:e8:fb:46:9c:be:d0:69:7e:b0:1f:64:af:d5:1c:3e:1c: 2f:24:7e:35:39:03:17:8c:49:48:68:9a:07:f1:d8:30:d1:0c: 4f:bf:39:f7:6c:7b:5a:9a:84:cc:8f:90:61:50:d1:57:e4:ed: 57:29:42:7d:4b:7f:3b:aa:97:0b:74:6a:e2:2b:08:a8:ac:3a: 82:76:ee:56:fd:19:d9:20:ee:39:e3:18:92:ed:73:58:a8:b9: ec:ef:7a:ad:c7:c4:6d:f2:2c:1a:18:71:0a:28:92:24:fb:2b: be:49:55:79:d9:fd:78:b5:68:40:42:14:8f:e3:b4:e3:76:ac: 0d:63:2c:39:08:aa:6b:2e:f4:37:c2:22:5a:1c:78:41:5e:92: 07:44:06:eb:f5:c3:97:25:88:a2:a9:85:22:0b:bb:fb:de:66: 67:8f:39:3a:93:89:90:8d:93:0a:bf:9d:d0:a8:f0:9c:f5:0d: 67:4f:c2:d6:52:a7:c6:c7:2a:51:cf:5d:a5:e0:a7:60:1a:55: 6c:ab:e0:95:28:73:61:95:47:c5:b7:92:ae:34:4d:15:e4:2a: a4:1b:a0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSl0+bjk0KpaSFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MmVmYWJiNzctYjdlNi00ZjEwLTljMTEtZTdjZWRjMTcwMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0SmqGS9a5kDLGvltHl2hhWthZ5rcPLdTisF KKhTxbpRONTuroAm2i7jtDfWwQ0ZkK3BGuOIb4sG5VLf4BacZe5KI6A1I5i2qAzr uGKRqo/JXF29IH44sQSM5yx/Xy4PZbj3Lo6kK18wFN0RSCMZzxbpFgyZNmuzLrBD ET9OatykV7h8bzS9zP5wfHB+bJSyXfl/N18Sm/rRkbuFwiC8XUf2GYSSmr1MwebI INImTLB0hkf3UACqt2ofJnw6AXvJRJf/ADdyIf0nqb/7AhNKIsnH3TsZ9rph2Moh 5+TLi78mj7tipzuV2u3KfrICiIe636iZdAu3/OS6yWjubXZPiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPVSsEezGL0ZlhCuKALxtCr2dxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRmZDlhOTEtZWRiMi0z MDI1LWJjNzQtMWEwNTRkNmM2MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDUvw71Fum59fOYCTZob7PDb1SvwhxgPmSwP/k3u8O6p7QdMoVn6PtG nL7QaX6wH2Sv1Rw+HC8kfjU5AxeMSUhomgfx2DDRDE+/Ofdse1qahMyPkGFQ0Vfk 7VcpQn1Lfzuqlwt0auIrCKisOoJ27lb9Gdkg7jnjGJLtc1iouezveq3HxG3yLBoY cQookiT7K75JVXnZ/Xi1aEBCFI/jtON2rA1jLDkIqmsu9DfCIloceEFekgdEBuv1 w5cliKKphSILu/veZmePOTqTiZCNkwq/ndCo8Jz1DWdPwtZSp8bHKlHPXaXgp2Aa VWyr4JUoc2GVR8W3kq40TRXkKqQboAo= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:16 2026 by rpki-client