$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa File: e4217924-b89f-3a6b-b726-c4acf11988c3.roa (raw, json) Hash identifier: NYrTwX5OFg3MKp94fbPVL/zmZUoYQs/snKFEhPL2IAQ= Subject key identifier: BB:C8:2C:80:E9:D7:5B:D3:7C:73:A3:13:2E:31:CA:A2:E6:D0:58:0C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EA794AAB020634299D0948D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 206728 IP address blocks: 108.171.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:aa:b0:20:63:42:99:d0:94:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=172bbcc2-2c3b-4b0a-8cfb-f22088421c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cb:57:39:dc:99:d8:2f:06:74:e1:06:cd:33: 68:bc:46:7d:a9:b1:47:a2:cc:03:25:16:99:d1:09: 17:4d:fc:05:74:fa:ba:70:8e:b2:0c:f7:67:ae:ca: b4:41:57:ae:59:b6:90:be:d4:a2:94:7c:92:e0:a1: f2:0b:92:d2:04:3b:04:c2:50:00:64:a9:07:9b:4a: c0:7f:21:bd:f5:21:b8:32:20:7e:63:fc:64:2c:3f: 99:52:b3:56:b9:8b:07:a7:5e:44:bb:c8:d8:02:63: af:55:90:d9:e4:29:db:d5:f3:4d:04:54:84:b2:3e: 09:db:1f:88:5f:16:85:9e:39:88:15:6b:28:b6:e0: f4:be:73:31:41:e8:4d:cb:fe:9b:8a:2d:ab:31:54: ab:ba:4d:0d:b7:97:38:7c:35:93:7a:f3:24:83:83: 01:7f:72:3e:9b:fa:1b:a3:b8:45:58:61:aa:c9:a3: 07:58:56:0f:7b:23:55:89:ed:ab:f2:f3:5f:bb:a5: a0:18:2b:20:05:50:1d:02:0c:8b:97:ad:01:39:9a: 24:72:25:2c:f7:79:49:67:48:8d:74:d4:60:7d:7d: 45:42:f7:89:46:bd:c8:a1:5f:66:de:88:e7:06:00: 1b:ce:6f:d7:58:de:80:c2:67:a5:d8:d9:44:29:55: 04:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C8:2C:80:E9:D7:5B:D3:7C:73:A3:13:2E:31:CA:A2:E6:D0:58:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 108.171.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e2:b8:60:d7:14:1d:b2:b8:5a:78:54:0d:b0:81:61:f8:33: b9:24:cf:12:1f:c0:ac:31:10:df:8a:95:3f:1c:90:09:4e:9f: 48:0e:a2:05:c7:14:77:54:34:c5:ae:13:e0:55:61:67:0d:81: d3:17:68:4d:78:c3:c9:a9:8d:73:0f:0c:02:92:b5:70:9f:f4: ef:94:f8:f7:70:7e:e6:1c:fe:11:5b:8e:c3:14:02:fe:89:9b: dc:6d:98:82:64:2d:b4:bb:6f:11:67:49:7a:c8:6e:96:30:c8: 01:f3:fc:d3:2a:0c:3b:33:d2:a1:0c:8a:ea:93:9a:50:c4:88: 9e:be:2d:59:57:50:db:1f:df:1b:c8:f1:da:92:74:b6:28:1c: 4f:66:0e:ce:f4:b1:ac:bf:14:0c:71:3b:38:5a:06:b3:28:2d: d2:73:a7:03:0f:61:90:ea:35:8f:ae:17:48:39:28:b5:a9:4d: 68:45:ff:b2:09:94:b7:bc:fd:84:63:5c:5e:c7:8d:3e:93:f9: f6:6c:e9:b3:b1:98:71:49:f7:eb:56:2a:7e:cb:d0:86:79:32: 1d:eb:c1:9b:51:88:6c:38:30:1e:3e:8e:55:ee:26:78:09:a0: 80:6d:bc:87:e4:76:84:c2:76:7d:b5:f8:fd:5f:3f:91:68:e5: d5:5b:5b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlKqwIGNCmdCUjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTcyYmJjYzItMmMzYi00YjBhLThjZmItZjIyMDg4NDIxYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAistXOdyZ2C8GdOEGzTNovEZ9qbFHoswDJRaZ 0QkXTfwFdPq6cI6yDPdnrsq0QVeuWbaQvtSilHyS4KHyC5LSBDsEwlAAZKkHm0rA fyG99SG4MiB+Y/xkLD+ZUrNWuYsHp15Eu8jYAmOvVZDZ5Cnb1fNNBFSEsj4J2x+I XxaFnjmIFWsotuD0vnMxQehNy/6bii2rMVSruk0Nt5c4fDWTevMkg4MBf3I+m/ob o7hFWGGqyaMHWFYPeyNVie2r8vNfu6WgGCsgBVAdAgyLl60BOZokciUs93lJZ0iN dNRgfX1FQveJRr3IoV9m3ojnBgAbzm/XWN6Awmel2NlEKVUECwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvILIDp11vTfHOjEy4xyqLm0FgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZTQyMTc5MjQtYjg5Zi0z YTZiLWI3MjYtYzRhY2YxMTk4OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKsnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTiuGDXFB2yuFp4VA2wgWH4M7kkzxIfwKwxEN+KlT8ckAlOn0gOogXH FHdUNMWuE+BVYWcNgdMXaE14w8mpjXMPDAKStXCf9O+U+PdwfuYc/hFbjsMUAv6J m9xtmIJkLbS7bxFnSXrIbpYwyAHz/NMqDDsz0qEMiuqTmlDEiJ6+LVlXUNsf3xvI 8dqSdLYoHE9mDs70say/FAxxOzhaBrMoLdJzpwMPYZDqNY+uF0g5KLWpTWhF/7IJ lLe8/YRjXF7HjT6T+fZs6bOxmHFJ9+tWKn7L0IZ5Mh3rwZtRiGw4MB4+jlXuJngJ oIBtvIfkdoTCdn21+P1fP5Fo5dVbW4Y= -----END CERTIFICATE-----Generated at Thu Aug 27 17:08:54 2026 by rpki-client