$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0f12d4-87c9-3563-b9bd-ebecf732394b.roa File: df0f12d4-87c9-3563-b9bd-ebecf732394b.roa (raw, json) Hash identifier: ahTjqOt5vH8WfAah3tzPwwClRnlkjXJAk8+lmhIF4Dk= Subject key identifier: FA:1E:89:F5:7B:12:BA:43:03:46:2F:74:CA:7B:D9:A5:89:F2:A2:33 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A7519B74FDC7ED58A06C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0f12d4-87c9-3563-b9bd-ebecf732394b.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 108.177.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:75:19:b7:4f:dc:7e:d5:8a:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=85ad9a82-e61a-47f6-b673-6bc485f434cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ee:06:f6:fe:7d:21:86:b1:0f:06:2a:29:eb: 3b:7c:2d:e1:f0:63:b7:a0:9c:50:17:dd:7b:06:d0: a2:56:b2:0f:e9:c1:69:d4:b3:02:5c:23:cf:7e:37: 68:61:ca:e0:5b:1e:63:c0:21:86:e9:0e:c5:c4:2a: 5e:c3:6c:14:fb:c8:da:d4:a9:c8:b4:eb:fe:3f:d1: c7:43:cc:ab:41:44:72:1d:3f:ea:5a:b9:f9:c6:f3: 7d:8b:49:8d:15:62:46:19:ce:5f:93:c3:6f:48:5a: e3:ed:03:3b:99:4f:3f:ef:b7:bc:bc:e3:4b:50:ed: 84:80:f5:6e:89:29:04:74:28:5b:75:d9:48:a4:32: e0:af:a8:87:f9:5d:d2:78:d4:5a:af:93:eb:62:23: 62:5a:f3:e1:29:0d:78:df:05:eb:6d:f5:e3:6b:6f: 42:53:2e:04:fd:c4:21:1f:47:6e:08:65:f6:dc:8e: 50:e2:ce:20:e5:3d:60:56:78:a7:3a:b4:da:22:ba: 1f:e5:86:25:d1:bc:71:50:de:f3:c3:bf:9c:e2:6e: f0:48:d7:b8:f4:db:38:65:be:7a:a7:46:fe:0a:d7: 94:c2:8b:c2:05:2c:0f:4a:c8:d7:fa:34:dd:7e:f2: ee:4b:46:f0:29:d4:21:70:2e:7c:74:0f:63:18:0f: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1E:89:F5:7B:12:BA:43:03:46:2F:74:CA:7B:D9:A5:89:F2:A2:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0f12d4-87c9-3563-b9bd-ebecf732394b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e9:e6:4a:19:d6:ff:e0:34:26:49:68:51:11:93:74:4a:83: 5b:3c:18:cf:0c:49:85:34:81:af:81:41:23:ed:55:a6:e9:97: b1:53:e9:2d:0a:76:a0:02:a1:04:51:55:2d:7d:82:d2:be:66: c9:30:57:e2:8b:b1:bb:4c:53:f2:f7:f1:ad:50:89:03:59:c2: 42:51:da:af:83:1d:35:3d:42:2c:95:cc:d5:00:46:c2:1f:fb: ba:7b:64:57:8e:fb:21:18:66:6f:5e:2f:ae:36:11:47:f8:8b: 5c:e1:d3:8f:c9:85:f3:7b:1b:62:1c:b9:0d:4b:c4:3e:31:08: f6:06:d7:db:0b:da:5a:17:46:6b:f6:30:d3:e4:02:6b:51:f4: 48:f6:0e:d7:63:a8:7b:86:6b:85:cd:7e:ad:bc:16:55:75:ac: 84:b8:56:74:1e:29:d7:d9:fe:90:6c:0d:b4:40:28:24:b6:ae: 05:dd:96:eb:be:71:72:c1:dc:be:d2:23:be:95:91:65:e3:5e: 48:06:98:69:16:ad:28:15:33:95:e4:69:c6:12:1f:8e:f3:ad: 82:04:fd:34:37:66:58:a8:9e:30:50:50:ef:a9:c9:42:20:60: f4:43:af:64:58:e9:bc:07:75:e5:4a:e8:3d:ee:2a:1a:c8:6c: 39:24:f4:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnUZt0/cftWKBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ODVhZDlhODItZTYxYS00N2Y2LWI2NzMtNmJjNDg1ZjQzNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O4G9v59IYaxDwYqKes7fC3h8GO3oJxQF917 BtCiVrIP6cFp1LMCXCPPfjdoYcrgWx5jwCGG6Q7FxCpew2wU+8ja1KnItOv+P9HH Q8yrQURyHT/qWrn5xvN9i0mNFWJGGc5fk8NvSFrj7QM7mU8/77e8vONLUO2EgPVu iSkEdChbddlIpDLgr6iH+V3SeNRar5PrYiNiWvPhKQ143wXrbfXja29CUy4E/cQh H0duCGX23I5Q4s4g5T1gVninOrTaIrof5YYl0bxxUN7zw7+c4m7wSNe49Ns4Zb56 p0b+CteUwovCBSwPSsjX+jTdfvLuS0bwKdQhcC58dA9jGA+0+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoeifV7ErpDA0YvdMp72aWJ8qIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGYwZjEyZDQtODdjOS0z NTYzLWI5YmQtZWJlY2Y3MzIzOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXp5koZ1v/gNCZJaFERk3RKg1s8GM8MSYU0ga+BQSPtVabpl7FT6S0K dqACoQRRVS19gtK+ZskwV+KLsbtMU/L38a1QiQNZwkJR2q+DHTU9QiyVzNUARsIf +7p7ZFeO+yEYZm9eL642EUf4i1zh04/JhfN7G2IcuQ1LxD4xCPYG19sL2loXRmv2 MNPkAmtR9Ej2DtdjqHuGa4XNfq28FlV1rIS4VnQeKdfZ/pBsDbRAKCS2rgXdluu+ cXLB3L7SI76VkWXjXkgGmGkWrSgVM5XkacYSH47zrYIE/TQ3ZlionjBQUO+pyUIg YPRDr2RY6bwHdeVK6D3uKhrIbDkk9Ig= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:08 2026 by rpki-client