$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18568810-ec78-3b4c-bcb8-9e1011db013f.roa File: 18568810-ec78-3b4c-bcb8-9e1011db013f.roa (raw, json) Hash identifier: xA/VNjtuqtdw7UF1fMADixZmsovbImxR+HmPDNyZl90= Subject key identifier: C1:09:48:F8:A0:31:BD:74:F0:E6:34:82:D6:54:07:45:6F:40:0D:96 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584E683F5FECE24A60D7DDF20680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18568810-ec78-3b4c-bcb8-9e1011db013f.roa Signing time: Mon 06 Jul 2026 09:00:12 +0000 ROA not before: Mon 06 Jul 2026 09:00:12 +0000 ROA not after: Sun 04 Oct 2026 09:00:12 +0000 asID: 13536 IP address blocks: 108.171.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:3f:5f:ec:e2:4a:60:d7:dd:f2:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 6 09:00:12 2026 GMT Not After : Oct 4 09:00:12 2026 GMT Subject: CN=590c4bde-f9c2-40aa-a0a8-6c74b94b1723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b9:6a:5b:60:56:29:fb:1f:fd:b9:dc:53:ee: 28:84:7f:40:e6:1b:82:ef:bd:0a:d3:75:42:c9:92: bc:73:e6:ed:c2:9f:49:86:96:6d:b3:36:e9:11:ed: 0f:cd:b2:24:9e:a6:b9:7e:4c:96:7c:44:0c:8b:8a: f1:71:e8:63:64:03:5c:cd:5e:26:a5:d1:45:26:b5: 77:6f:16:c9:37:8f:d5:f5:20:f5:04:61:a8:a9:ef: 54:54:8a:e7:89:6a:6e:72:17:8a:f9:1a:cb:97:9c: 9a:06:c3:c1:86:69:08:5a:42:aa:aa:dd:b0:dd:a2: 76:83:4a:55:a3:60:43:46:81:26:90:09:60:a1:ae: 49:3d:8f:87:49:9e:13:8f:f4:37:e5:c7:cd:ba:2e: a6:2a:a7:dc:19:44:fb:f7:3d:6f:69:59:0d:26:b8: 7f:aa:7a:eb:4a:c7:17:66:26:6f:76:92:52:30:24: 2e:a7:4c:54:f0:b2:b0:49:87:be:08:0d:47:4b:44: 12:34:53:45:57:3e:74:85:89:65:d2:2d:61:dd:11: 0e:15:96:ed:5f:da:b9:52:fe:e9:f7:1c:61:f5:b7: c9:82:3e:3e:3c:06:f9:9a:60:b4:c2:de:6b:0e:57: d6:8f:b9:2d:d6:66:e0:7d:31:0e:3f:3b:68:28:be: 72:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:48:F8:A0:31:BD:74:F0:E6:34:82:D6:54:07:45:6F:40:0D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18568810-ec78-3b4c-bcb8-9e1011db013f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 108.171.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:76:31:a4:7f:00:1c:89:ff:88:43:a1:dd:96:ce:bc:8a:2d: cc:a8:32:e8:fb:13:5c:71:9e:83:b9:7b:ec:6e:c7:55:2a:cc: 6b:69:0b:4a:bd:a7:84:d7:81:77:23:2f:66:ee:a5:1b:ef:78: 6c:71:40:ae:da:b9:1f:ee:83:85:c6:b0:83:32:56:95:6e:e7: 77:78:a1:ff:5f:4d:d2:06:90:7a:cc:e9:1b:d2:37:60:07:53: 64:73:37:d5:67:be:de:9d:a1:7a:82:38:70:b3:7f:22:b5:cf: 00:4b:ef:6d:61:46:3e:c7:21:08:44:db:41:75:23:80:e2:e1: ad:d5:27:a0:84:e6:ab:71:25:69:2c:29:d7:0a:4e:8e:0c:11: 85:0d:35:39:d6:13:41:57:f1:3e:bf:52:49:d5:f1:b7:81:92: ac:95:9b:fd:be:b2:56:11:73:57:e1:2e:e0:ce:9a:91:be:7c: 90:85:93:d8:e2:07:6a:10:06:ed:73:a1:68:c0:0d:4c:a2:70: c8:22:07:03:83:3b:99:a8:bf:a1:e4:d0:16:ae:61:1e:a7:d9: ba:a9:c1:d5:91:49:28:32:51:88:87:da:df:22:07:9f:99:e7: 01:59:ef:4b:5e:31:9f:69:05:e2:62:6b:e0:be:14:6e:46:ab: 8c:81:b5:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP1/s4kpg193yBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk NTkwYzRiZGUtZjljMi00MGFhLWEwYTgtNmM3NGI5NGIxNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhblqW2BWKfsf/bncU+4ohH9A5huC770K03VC yZK8c+btwp9JhpZtszbpEe0PzbIknqa5fkyWfEQMi4rxcehjZANczV4mpdFFJrV3 bxbJN4/V9SD1BGGoqe9UVIrniWpucheK+RrLl5yaBsPBhmkIWkKqqt2w3aJ2g0pV o2BDRoEmkAlgoa5JPY+HSZ4Tj/Q35cfNui6mKqfcGUT79z1vaVkNJrh/qnrrSscX ZiZvdpJSMCQup0xU8LKwSYe+CA1HS0QSNFNFVz50hYll0i1h3REOFZbtX9q5Uv7p 9xxh9bfJgj4+PAb5mmC0wt5rDlfWj7kt1mbgfTEOPztoKL5yDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEJSPigMb108OY0gtZUB0VvQA2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTg1Njg4MTAtZWM3OC0z YjRjLWJjYjgtOWUxMDExZGIwMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp2MaR/AByJ/4hDod2WzryKLcyoMuj7E1xxnoO5e+xux1UqzGtpC0q9 p4TXgXcjL2bupRvveGxxQK7auR/ug4XGsIMyVpVu53d4of9fTdIGkHrM6RvSN2AH U2RzN9Vnvt6doXqCOHCzfyK1zwBL721hRj7HIQhE20F1I4Di4a3VJ6CE5qtxJWks KdcKTo4MEYUNNTnWE0FX8T6/UknV8beBkqyVm/2+slYRc1fhLuDOmpG+fJCFk9ji B2oQBu1zoWjADUyicMgiBwODO5mov6Hk0BauYR6n2bqpwdWRSSgyUYiH2t8iB5+Z 5wFZ70teMZ9pBeJia+C+FG5Gq4yBtU4= -----END CERTIFICATE-----Generated at Mon Jul 13 11:40:20 2026 by rpki-client