$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18568810-ec78-3b4c-bcb8-9e1011db013f.roa File: 18568810-ec78-3b4c-bcb8-9e1011db013f.roa (raw, json) Hash identifier: ftwhjpvQxawN2uXAU5I01IGI2t2mnhfuk5L9yJUnTL4= Subject key identifier: 37:BE:A0:E9:21:25:E2:23:5F:9A:D8:E7:E6:0E:0D:A4:70:7F:BF:F5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584CA78CE785E24F4E192B102D00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18568810-ec78-3b4c-bcb8-9e1011db013f.roa Signing time: Mon 26 Jan 2026 15:38:32 +0000 ROA not before: Mon 26 Jan 2026 15:38:32 +0000 ROA not after: Sun 26 Apr 2026 14:38:32 +0000 asID: 13536 IP address blocks: 108.171.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:8c:e7:85:e2:4f:4e:19:2b:10:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 26 15:38:32 2026 GMT Not After : Apr 26 14:38:32 2026 GMT Subject: CN=1c2d9762-07f9-49ac-8777-fff41c636bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:39:f7:ed:d8:cb:a1:cd:8b:49:e9:6d:36: 0b:7c:96:ae:be:d8:da:1a:ad:69:be:80:be:31:32: 80:c4:51:93:45:8d:de:f2:2e:f6:3c:e2:2b:dd:6b: d6:6b:43:2f:09:5f:c1:0a:4e:08:b8:98:64:b7:1f: 5c:b4:3c:91:18:37:e1:7d:19:69:47:2b:e9:0f:95: 1d:a5:8b:e5:6d:f4:71:3d:ca:be:f0:b1:87:aa:d7: 8a:8f:94:cb:3c:1a:0e:9d:d0:3d:04:95:82:28:b4: c6:d3:42:72:e4:0f:f5:c8:9e:68:12:5e:e0:7f:1d: 27:fc:66:9d:72:1e:eb:86:7c:4c:0d:a4:2a:d7:66: 22:4c:37:26:d5:06:34:f6:c2:32:fe:d9:64:51:0a: e7:2a:82:82:38:c8:6b:d6:ea:ce:22:81:c1:56:7c: ab:02:7f:c0:d7:ac:82:b5:22:04:48:0b:c4:77:fb: bc:8e:38:d8:1c:7e:81:c4:97:c8:42:18:de:38:55: 8c:ca:28:0b:c9:b2:47:24:03:40:31:1b:f8:7a:58: c6:5f:0a:7c:26:1a:02:c0:e7:b5:6b:b1:2c:af:12: a8:b5:a9:ea:80:6f:de:5c:b9:8d:95:c3:5c:6d:7a: b1:e3:e9:f8:cd:c6:6c:4e:a3:83:e8:de:05:5b:93: bd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BE:A0:E9:21:25:E2:23:5F:9A:D8:E7:E6:0E:0D:A4:70:7F:BF:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18568810-ec78-3b4c-bcb8-9e1011db013f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 108.171.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6e:15:bd:dd:b6:9e:5f:4e:a5:0d:90:1a:34:68:4d:1a:f6: 71:ad:97:9b:75:12:87:a8:0b:b6:4f:48:8c:6c:da:f7:9e:ae: 7d:5f:dc:e9:f3:df:d2:a2:92:13:ec:d4:9d:6f:49:9d:27:8e: 65:30:20:da:dd:97:c2:2f:9e:55:a7:6a:1c:94:0c:52:85:d7: a0:84:bc:95:4b:48:25:a3:fe:2a:13:1b:6d:0f:8b:ac:98:e5: a0:cd:05:5a:73:7a:0b:88:8a:70:9d:39:59:8a:19:c8:6d:d1: 0e:cf:4f:ca:1b:af:2f:07:c7:46:aa:0d:9e:d1:8f:b5:43:cb: cb:f9:1a:02:2c:59:69:12:a2:1d:ac:a2:ab:54:be:ab:49:3d: 45:83:60:c2:f9:8c:84:4a:77:28:f4:9c:9f:5d:01:5a:72:47: e1:4a:95:67:46:6a:88:96:1e:c5:7b:82:05:c0:5c:ea:d9:6c: 5e:83:6b:ea:58:30:0e:d1:a6:32:61:98:39:7c:f1:72:8d:72: 98:84:9e:95:ab:aa:46:cf:79:fc:ba:25:9d:2e:f2:c9:5e:3c: 13:03:9b:7a:ab:1b:47:e3:f5:21:d4:df:ab:7e:4f:5e:f6:90: 11:0f:b8:4a:3d:1f:0e:62:df:1d:53:82:5f:21:de:03:fb:24: 06:89:0b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynjOeF4k9OGSsQLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDEyNjE1MzgzMloXDTI2MDQyNjE0MzgzMlowLzEtMCsGA1UEAxMk MWMyZDk3NjItMDdmOS00OWFjLTg3NzctZmZmNDFjNjM2YmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVo59+3Yy6HNi0npbTYLfJauvtjaGq1pvoC+ MTKAxFGTRY3e8i72POIr3WvWa0MvCV/BCk4IuJhktx9ctDyRGDfhfRlpRyvpD5Ud pYvlbfRxPcq+8LGHqteKj5TLPBoOndA9BJWCKLTG00Jy5A/1yJ5oEl7gfx0n/Gad ch7rhnxMDaQq12YiTDcm1QY09sIy/tlkUQrnKoKCOMhr1urOIoHBVnyrAn/A16yC tSIESAvEd/u8jjjYHH6BxJfIQhjeOFWMyigLybJHJANAMRv4eljGXwp8JhoCwOe1 a7EsrxKotanqgG/eXLmNlcNcbXqx4+n4zcZsTqOD6N4FW5O9zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe+oOkhJeIjX5rY5+YODaRwf7/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTg1Njg4MTAtZWM3OC0z YjRjLWJjYjgtOWUxMDExZGIwMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFuFb3dtp5fTqUNkBo0aE0a9nGtl5t1EoeoC7ZPSIxs2veern1f3Onz 39KikhPs1J1vSZ0njmUwINrdl8IvnlWnahyUDFKF16CEvJVLSCWj/ioTG20Pi6yY 5aDNBVpzeguIinCdOVmKGcht0Q7PT8obry8Hx0aqDZ7Rj7VDy8v5GgIsWWkSoh2s oqtUvqtJPUWDYML5jIRKdyj0nJ9dAVpyR+FKlWdGaoiWHsV7ggXAXOrZbF6Da+pY MA7RpjJhmDl88XKNcpiEnpWrqkbPefy6JZ0u8slePBMDm3qrG0fj9SHU36t+T172 kBEPuEo9Hw5i3x1Tgl8h3gP7JAaJC5A= -----END CERTIFICATE-----Generated at Thu Feb 26 09:23:43 2026 by rpki-client