$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa File: e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa (raw, json) Hash identifier: TNnugMeyN+6FEu3QgkXevz01xhfsybZIh1ZffhD8a7o= Subject key identifier: A6:41:34:9F:A7:95:DE:17:4E:84:39:94:2C:B5:53:B1:01:F6:B3:B0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D1F4A8365FC16F0762AAD6900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 108.177.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:83:65:fc:16:f0:76:2a:ad:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=ecfe64a0-49f7-44a0-822d-e6da85355e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:e0:89:cc:cc:a1:72:5d:15:51:50:f4:bb: 09:ae:47:02:f9:7e:7b:aa:44:1b:3f:0d:42:df:15: 57:f0:1c:2f:52:82:47:8a:37:c8:de:d2:23:a8:06: 04:66:45:f8:27:8f:0f:bd:da:10:b4:38:2e:c1:90: b4:8d:09:d5:d3:ab:a7:fb:25:15:2e:36:f4:23:41: 1e:1b:70:74:55:7e:84:c1:b1:4e:9f:4e:64:04:7e: 73:1a:8c:95:2e:39:73:5a:6d:6a:c1:40:3f:80:94: 59:42:d1:17:99:d0:3c:5b:0f:8e:5c:2e:00:1c:98: d4:39:f7:a8:32:f0:ee:ef:74:60:3a:02:8b:a2:5b: 40:bf:3c:7e:07:e1:a8:d7:0b:9d:88:ba:34:d4:fe: b6:c0:51:f2:10:70:3c:6d:81:57:12:f2:94:bd:2e: 96:c9:65:f6:28:01:9c:34:59:1b:9c:b4:9d:b1:db: d3:93:17:4a:b7:dc:8e:bf:9c:f3:45:c4:3c:30:df: b8:22:58:7d:5a:bd:06:93:6d:e0:23:bd:be:a4:37: f4:cf:93:2c:69:2d:8b:c3:8b:9e:ac:60:94:64:ae: c3:f8:76:3e:22:dc:59:c6:c0:2c:4c:64:01:50:02: 0b:5d:d2:31:46:81:ba:22:fd:a1:ff:d4:52:d2:51: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:41:34:9F:A7:95:DE:17:4E:84:39:94:2C:B5:53:B1:01:F6:B3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d5:3f:06:6b:9f:89:96:07:2c:50:d9:46:6a:25:ca:a8:e9: 13:d1:32:fb:98:ac:39:17:fe:45:78:cd:e9:1b:b0:35:ca:7e: 52:66:f6:5f:01:c0:73:ac:0d:ac:cb:12:04:b6:74:5e:c5:c2: 78:e4:3d:80:57:63:b8:84:76:53:ed:07:42:c8:c7:3e:65:bd: 2d:57:c7:4b:17:ac:3e:8b:34:6e:0c:42:c2:97:8c:08:8a:83: 25:89:e0:a8:3b:03:e3:a7:62:72:b6:dd:25:e5:08:68:84:fe: 13:d8:a5:22:bf:35:b8:ee:60:c8:2e:ae:f2:ac:18:ca:9e:47: 14:7d:dd:96:c5:fa:b9:c2:7c:a8:fb:50:4d:6a:e4:81:b8:3f: 68:13:b5:40:e7:9c:57:7a:b5:59:df:a8:67:6f:5c:54:bf:c5: d1:4c:d4:14:0e:c3:21:e5:cf:04:a0:fb:2b:e0:c5:19:e9:58: 22:c5:80:f5:af:e0:c6:30:51:ac:0d:00:24:c8:54:48:22:3d: 62:92:dd:98:06:a8:e9:0c:96:84:38:c2:81:93:62:9c:51:0d: 87:1a:b7:5c:8b:0d:56:6f:38:c8:04:4b:80:1b:b1:05:f1:b7: 27:3a:03:6b:b9:de:dc:39:b3:fb:d5:bc:c7:6d:50:e3:a4:47: 51:cd:4e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoNl/BbwdiqtaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZWNmZTY0YTAtNDlmNy00NGEwLTgyMmQtZTZkYTg1MzU1ZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk7giczMoXJdFVFQ9LsJrkcC+X57qkQbPw1C 3xVX8BwvUoJHijfI3tIjqAYEZkX4J48PvdoQtDguwZC0jQnV06un+yUVLjb0I0Ee G3B0VX6EwbFOn05kBH5zGoyVLjlzWm1qwUA/gJRZQtEXmdA8Ww+OXC4AHJjUOfeo MvDu73RgOgKLoltAvzx+B+Go1wudiLo01P62wFHyEHA8bYFXEvKUvS6WyWX2KAGc NFkbnLSdsdvTkxdKt9yOv5zzRcQ8MN+4Ilh9Wr0Gk23gI72+pDf0z5MsaS2Lw4ue rGCUZK7D+HY+ItxZxsAsTGQBUAILXdIxRoG6Iv2h/9RS0lH5NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZBNJ+nld4XToQ5lCy1U7EB9rOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdlNWQ2ZTUtOGJjZi0z MDVhLTg4ZmQtM2FkNGEzNjgzNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLVPwZrn4mWByxQ2UZqJcqo6RPRMvuYrDkX/kV4zekbsDXKflJm9l8B wHOsDazLEgS2dF7FwnjkPYBXY7iEdlPtB0LIxz5lvS1Xx0sXrD6LNG4MQsKXjAiK gyWJ4Kg7A+OnYnK23SXlCGiE/hPYpSK/NbjuYMgurvKsGMqeRxR93ZbF+rnCfKj7 UE1q5IG4P2gTtUDnnFd6tVnfqGdvXFS/xdFM1BQOwyHlzwSg+yvgxRnpWCLFgPWv 4MYwUawNACTIVEgiPWKS3ZgGqOkMloQ4woGTYpxRDYcat1yLDVZvOMgES4AbsQXx tyc6A2u53tw5s/vVvMdtUOOkR1HNTo4= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:36 2026 by rpki-client