$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7d4b1cd-578b-3c0b-bc95-e24d489403ef.roa File: e7d4b1cd-578b-3c0b-bc95-e24d489403ef.roa (raw, json) Hash identifier: CXhxox4gRxO43bqdjfTgF62ZPoRpP4ECx96hAnfxoBM= Subject key identifier: AF:B0:20:16:A5:33:48:34:98:30:FC:4E:16:86:C6:E4:95:10:A1:54 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A765877FFB78B842C1690 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7d4b1cd-578b-3c0b-bc95-e24d489403ef.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396982 IP address blocks: 108.170.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:76:58:77:ff:b7:8b:84:2c:16:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=fa9ea020-3c03-484e-bca5-53b84a96043e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a1:8c:0c:b9:01:af:90:10:9c:0b:88:1a:a2: 19:5f:dc:88:9e:42:c7:26:d9:3c:c1:cd:fc:bc:27: d6:9e:cd:08:2c:83:86:11:a2:7e:9c:d3:b5:2c:a3: 0a:f9:5a:b4:b6:8a:6f:1f:b7:48:eb:8a:30:04:7d: 65:4c:a3:53:27:f3:24:a8:29:bc:6d:6d:26:32:19: d1:db:d1:c3:b5:87:0a:69:9e:ef:09:31:93:48:57: f1:9b:fa:75:38:1f:c1:2f:26:39:99:61:6d:77:d7: dd:ef:92:2e:42:98:b1:cd:a5:d3:e4:4c:01:e0:9a: 25:48:78:bd:d2:26:ce:bc:23:6c:63:99:f1:5c:e0: f6:d3:93:4e:d7:17:56:89:ca:19:7a:e3:12:33:79: ab:1f:e4:06:71:59:74:7a:b1:7d:5d:51:e4:f7:46: c6:a2:93:02:6d:1e:8b:5f:ce:65:33:6c:6e:59:3e: fc:62:5c:f4:17:45:25:7f:b8:d0:e8:b5:44:4a:fb: f0:96:b6:d4:db:4d:ca:64:44:5b:b4:50:3a:ae:70: 32:46:24:8d:a0:1d:f2:97:b4:fe:2c:37:96:ab:a5: 2c:c8:41:50:9f:a2:6c:70:bd:3c:a6:bf:8d:53:e3: 76:7d:f0:a5:68:fe:4a:98:d2:6b:43:5a:10:f6:8a: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B0:20:16:A5:33:48:34:98:30:FC:4E:16:86:C6:E4:95:10:A1:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7d4b1cd-578b-3c0b-bc95-e24d489403ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:dc:0e:73:3e:18:46:b4:5d:5e:03:d1:b1:ab:c8:62:90:d2: b2:1f:4c:e4:61:25:35:89:f3:23:28:63:c7:30:c9:e3:2c:01: 08:9c:70:11:09:1e:99:cf:55:20:2f:2b:a6:84:59:e1:9f:d7: 87:1e:a9:db:7f:35:a5:1f:6f:7b:64:6d:90:7e:f1:5f:4f:cb: d1:6d:93:e8:f8:6a:1f:42:a1:8d:0b:0a:82:a2:6d:ae:cc:ff: 78:f3:db:30:fe:5f:bd:50:43:5d:94:60:e0:21:3c:47:1a:27: d2:6b:ae:f0:60:b6:0b:93:09:df:73:c8:74:51:06:f8:5a:dd: c4:47:f7:25:3b:a9:55:96:88:f9:d2:ae:ea:a1:66:f1:41:0b: c5:b6:6d:d8:a7:80:62:ab:25:6b:b4:0b:08:13:7a:65:fe:10: d4:bd:c0:c6:78:0d:1d:2c:5d:72:1c:05:65:1b:5d:67:49:20: 06:60:89:5e:97:e6:34:85:a7:95:97:c5:cd:ba:2a:55:63:98: ab:5f:ba:99:5a:18:53:9c:10:d9:64:e0:13:98:92:0f:17:eb: 87:e1:eb:e3:f8:35:5a:5b:15:92:c3:6a:b5:15:90:ce:20:fc: bc:28:b9:5b:2c:d6:fc:58:e5:cc:1c:fe:40:40:9d:c0:a3:d0: 5b:97:3e:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnZYd/+3i4QsFpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZmE5ZWEwMjAtM2MwMy00ODRlLWJjYTUtNTNiODRhOTYwNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KGMDLkBr5AQnAuIGqIZX9yInkLHJtk8wc38 vCfWns0ILIOGEaJ+nNO1LKMK+Vq0topvH7dI64owBH1lTKNTJ/MkqCm8bW0mMhnR 29HDtYcKaZ7vCTGTSFfxm/p1OB/BLyY5mWFtd9fd75IuQpixzaXT5EwB4JolSHi9 0ibOvCNsY5nxXOD205NO1xdWicoZeuMSM3mrH+QGcVl0erF9XVHk90bGopMCbR6L X85lM2xuWT78Ylz0F0Ulf7jQ6LVESvvwlrbU203KZERbtFA6rnAyRiSNoB3yl7T+ LDeWq6UsyEFQn6JscL08pr+NU+N2ffClaP5KmNJrQ1oQ9oopAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+wIBalM0g0mDD8ThaGxuSVEKFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdkNGIxY2QtNTc4Yi0z YzBiLWJjOTUtZTI0ZDQ4OTQwM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDcDnM+GEa0XV4D0bGryGKQ0rIfTORhJTWJ8yMoY8cwyeMsAQiccBEJ HpnPVSAvK6aEWeGf14ceqdt/NaUfb3tkbZB+8V9Py9Ftk+j4ah9CoY0LCoKiba7M /3jz2zD+X71QQ12UYOAhPEcaJ9JrrvBgtguTCd9zyHRRBvha3cRH9yU7qVWWiPnS ruqhZvFBC8W2bdingGKrJWu0CwgTemX+ENS9wMZ4DR0sXXIcBWUbXWdJIAZgiV6X 5jSFp5WXxc26KlVjmKtfuplaGFOcENlk4BOYkg8X64fh6+P4NVpbFZLDarUVkM4g /LwouVss1vxY5cwc/kBAncCj0FuXPjc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:34 2026 by rpki-client