$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa File: d8acef3d-fb29-33d5-b657-56e7f8e32298.roa (raw, json) Hash identifier: nCxajj/26G27q1n0VNdR49c9WHjjEQworM1x1Lub+h4= Subject key identifier: 31:27:22:9E:17:2B:DE:C5:13:46:33:80:83:CA:32:C8:F2:F7:74:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A8486622B9CCEA339A280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 108.177.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:84:86:62:2b:9c:ce:a3:39:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=914dc1f6-678d-41f6-9b44-7ef88c8eddc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:25:28:67:cc:fd:0b:52:d8:7e:5a:09:9e:6b: 8b:9d:6c:84:4e:08:4c:83:13:17:7d:c1:ae:84:b5: 98:b9:74:ba:bc:68:d2:00:4d:a4:0a:e0:8a:d4:f4: 47:5a:b9:90:6d:af:19:7f:36:22:40:6b:94:c7:98: a5:ac:80:d8:99:16:80:fe:eb:c9:3f:c1:d2:6e:07: e3:ee:aa:53:dd:b9:c8:33:60:fc:27:c0:44:f8:17: 7d:0d:ab:d2:8b:ff:07:de:f3:11:48:2d:40:c2:89: 66:41:11:cb:1e:5a:0a:0f:5e:01:cb:10:13:d8:05: ac:80:38:75:6f:8e:37:93:84:96:70:e4:35:fc:41: bd:e3:ee:b1:f4:36:52:22:e9:db:72:82:86:c6:7a: 1e:da:7a:77:79:00:b7:75:32:fb:c9:98:68:34:27: 48:fc:c4:ff:6c:2a:03:6e:5e:88:64:9e:f4:b0:54: 47:ae:12:bc:44:83:ed:40:07:e2:9a:c1:c6:eb:22: 30:7c:63:97:62:f9:bf:9b:1e:66:47:28:e3:a3:3f: fd:cd:ae:f6:3c:0e:a4:72:2b:49:64:0b:12:cd:45: f0:bd:23:2f:19:b6:4d:0e:16:57:4a:93:dd:6f:03: c1:bf:8b:17:e2:5b:d2:a1:6f:a0:20:04:8c:11:a2: b0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:27:22:9E:17:2B:DE:C5:13:46:33:80:83:CA:32:C8:F2:F7:74:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b6:9f:b6:36:5f:05:b6:85:84:65:9f:d0:31:94:27:b9:2f: ac:c6:31:12:98:db:a1:f8:73:04:e3:e2:45:36:42:b7:56:c6: c4:87:d3:37:77:f4:7a:96:6f:65:52:a9:4d:39:17:81:c3:95: 53:36:da:58:63:23:5d:9b:72:2a:6a:8c:25:5f:b0:bc:5b:88: 61:52:c3:ef:73:85:77:cf:9f:e1:7f:c7:cd:71:e2:5c:9e:bc: 4b:95:42:c1:b9:da:16:df:20:8c:46:6f:5e:4b:cc:ed:c2:5b: 9b:17:10:55:d9:dc:a0:ed:06:92:3a:5a:7d:70:c4:bd:17:78: 4a:34:b8:45:92:50:f7:d1:7c:1e:b9:fd:59:8e:ff:8e:5f:e0: 33:bc:14:6d:47:3f:db:4f:cb:da:5b:6f:d9:30:03:37:7f:57: d0:5c:be:b6:e9:f1:17:f4:dd:77:4d:e8:1c:5c:a4:84:68:49: 80:26:38:50:95:87:0e:74:22:02:f5:ac:b6:e8:46:0b:8e:f1: 92:0b:bf:ca:20:23:70:18:2a:e3:e5:7b:c8:a6:bf:04:45:e7: b2:33:39:d7:a5:b4:8c:3c:c1:9e:93:f3:20:11:a8:c6:e4:a9: ec:90:2c:09:7c:b4:ef:b9:7a:18:51:87:02:69:f5:cd:27:69: 93:29:9b:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoSGYiuczqM5ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OTE0ZGMxZjYtNjc4ZC00MWY2LTliNDQtN2VmODhjOGVkZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCUoZ8z9C1LYfloJnmuLnWyETghMgxMXfcGu hLWYuXS6vGjSAE2kCuCK1PRHWrmQba8ZfzYiQGuUx5ilrIDYmRaA/uvJP8HSbgfj 7qpT3bnIM2D8J8BE+Bd9DavSi/8H3vMRSC1AwolmQRHLHloKD14ByxAT2AWsgDh1 b443k4SWcOQ1/EG94+6x9DZSIunbcoKGxnoe2np3eQC3dTL7yZhoNCdI/MT/bCoD bl6IZJ70sFRHrhK8RIPtQAfimsHG6yIwfGOXYvm/mx5mRyjjoz/9za72PA6kcitJ ZAsSzUXwvSMvGbZNDhZXSpPdbwPBv4sX4lvSoW+gIASMEaKwSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEnIp4XK97FE0YzgIPKMsjy93T9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhhY2VmM2QtZmIyOS0z M2Q1LWI2NTctNTZlN2Y4ZTMyMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa2n7Y2XwW2hYRln9AxlCe5L6zGMRKY26H4cwTj4kU2QrdWxsSH0zd3 9HqWb2VSqU05F4HDlVM22lhjI12bcipqjCVfsLxbiGFSw+9zhXfPn+F/x81x4lye vEuVQsG52hbfIIxGb15LzO3CW5sXEFXZ3KDtBpI6Wn1wxL0XeEo0uEWSUPfRfB65 /VmO/45f4DO8FG1HP9tPy9pbb9kwAzd/V9Bcvrbp8Rf03XdN6BxcpIRoSYAmOFCV hw50IgL1rLboRguO8ZILv8ogI3AYKuPle8imvwRF57IzOdeltIw8wZ6T8yARqMbk qeyQLAl8tO+5ehhRhwJp9c0naZMpmyI= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:06 2026 by rpki-client