$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa File: e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa (raw, json) Hash identifier: qkeXnbr8Srswe4lkEQL0Vj075wgo5h6TJ6hljmuNUyo= Subject key identifier: D3:49:4E:45:AC:31:59:B2:58:48:56:8D:54:CF:E9:A0:CB:4D:B9:69 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A84E4C0B329FE04F34200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 108.170.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:84:e4:c0:b3:29:fe:04:f3:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=f6ff6faf-bdb1-4367-8eac-4498c0ccd821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:4c:1d:40:ca:99:7e:dd:c3:a6:d0:9c:90: e5:a4:63:8e:03:59:9c:df:b3:fc:7a:55:b9:32:ea: e4:20:3f:6f:0e:8f:2f:14:b1:f3:95:6e:36:8f:88: 74:01:ba:a5:0e:5c:af:7c:46:56:56:5a:f5:f9:7d: 2d:14:28:83:70:ef:64:3b:3b:ce:09:fb:6d:32:86: 86:dd:00:eb:e0:f7:42:0f:31:97:13:44:23:5a:3e: c5:f1:ef:85:b0:0b:b3:5c:54:60:77:36:d3:bc:03: 73:73:f1:92:e6:c6:b1:13:60:61:eb:23:1f:7d:00: 2f:7e:fa:f6:57:03:e6:a1:6e:4f:d8:d9:b8:76:ae: 21:b5:d1:21:35:82:9c:9a:a7:41:72:f5:9f:1b:e2: 4f:52:2e:bc:43:20:d3:07:89:12:58:be:65:f8:89: ea:de:d1:b5:8b:29:55:aa:67:f7:ad:91:db:3c:34: dc:c8:72:0b:79:11:16:cc:e7:00:35:2f:c3:04:10: 5f:63:89:86:7d:6e:e5:6e:48:7d:ca:52:bf:e1:c3: 97:8a:eb:29:aa:11:1e:5e:fd:fd:74:c3:97:1c:34: ab:2d:8d:59:37:24:19:93:fa:2f:fb:a4:f4:e5:e0: 8d:47:4f:e0:b9:96:3c:9f:47:a1:cf:e2:07:ed:1a: 21:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:49:4E:45:AC:31:59:B2:58:48:56:8D:54:CF:E9:A0:CB:4D:B9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:23:a3:aa:8a:a3:39:1e:95:81:c5:03:74:a4:60:f0:f2:79: d9:e9:73:dc:f3:84:8d:c7:5c:8a:5b:94:6d:d0:37:87:9f:59: 19:96:67:c6:0a:b5:80:9d:69:6e:c9:b9:df:13:8b:7a:51:17: 28:5e:6d:4e:5f:af:ab:49:44:d3:c4:81:82:f3:00:b3:3f:44: ef:ab:9b:57:c6:a6:70:fa:6f:a5:72:34:c3:71:dd:26:ec:4b: d1:a9:b3:ca:10:06:e4:c8:5d:58:5c:3a:21:22:ff:94:94:56: 48:69:1c:d7:c0:4f:0b:a5:a7:14:38:5f:ef:78:10:9e:29:f7: fd:eb:1e:a3:23:5d:73:4d:dd:01:4f:d1:59:8f:c8:72:a5:39: d7:bb:aa:e9:ae:54:c0:ec:33:4e:75:08:e7:03:65:d0:eb:6f: 89:b4:02:eb:a8:fd:07:d5:82:ff:a5:e7:77:ce:71:2b:6a:dc: dc:17:cc:e8:c0:d6:a1:ea:de:49:85:89:ff:f9:18:28:e7:4f: f3:8e:b0:2b:7d:b6:28:35:9f:cd:c0:bc:e7:a8:20:85:94:46: 69:35:f9:4b:35:28:53:eb:40:75:32:0d:ad:f3:26:6e:9f:fe: e5:72:41:41:e0:3b:63:d6:30:ec:6c:4e:ce:65:95:e1:cc:41: 06:5d:de:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoTkwLMp/gTzQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZjZmZjZmYWYtYmRiMS00MzY3LThlYWMtNDQ5OGMwY2NkODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9lMHUDKmX7dw6bQnJDlpGOOA1mc37P8elW5 MurkID9vDo8vFLHzlW42j4h0AbqlDlyvfEZWVlr1+X0tFCiDcO9kOzvOCfttMoaG 3QDr4PdCDzGXE0QjWj7F8e+FsAuzXFRgdzbTvANzc/GS5saxE2Bh6yMffQAvfvr2 VwPmoW5P2Nm4dq4htdEhNYKcmqdBcvWfG+JPUi68QyDTB4kSWL5l+Inq3tG1iylV qmf3rZHbPDTcyHILeREWzOcANS/DBBBfY4mGfW7lbkh9ylK/4cOXiuspqhEeXv39 dMOXHDSrLY1ZNyQZk/ov+6T05eCNR0/guZY8n0ehz+IH7RohhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNJTkWsMVmyWEhWjVTP6aDLTblpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTNjMTFiZTYtNWIyYi0z NmJlLWIwZGUtMjAyMWNlY2ZjM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABojo6qKozkelYHFA3SkYPDyednpc9zzhI3HXIpblG3QN4efWRmWZ8YK tYCdaW7Jud8Ti3pRFyhebU5fr6tJRNPEgYLzALM/RO+rm1fGpnD6b6VyNMNx3Sbs S9Gps8oQBuTIXVhcOiEi/5SUVkhpHNfATwulpxQ4X+94EJ4p9/3rHqMjXXNN3QFP 0VmPyHKlOde7qumuVMDsM051COcDZdDrb4m0Auuo/QfVgv+l53fOcStq3NwXzOjA 1qHq3kmFif/5GCjnT/OOsCt9tig1n83AvOeoIIWURmk1+Us1KFPrQHUyDa3zJm6f /uVyQUHgO2PWMOxsTs5lleHMQQZd3sk= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:28 2026 by rpki-client