$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa File: d4a5e9c1-d838-365f-9553-97009a7b5512.roa (raw, json) Hash identifier: tnfqxb8DsdiLifnw/LkRPPZqygRG0T9VZMk8KXaCmhw= Subject key identifier: 51:52:C8:EE:F6:77:F5:4D:F7:09:21:B5:8C:00:16:51:02:FB:DE:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4984E577DB00F6E9622CB880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 108.59.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:e5:77:db:00:f6:e9:62:2c:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=512552e6-796e-4f4a-99ca-2c5ea21bb561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0b:90:0d:61:9b:97:7e:9d:f1:ad:f3:f0:42: ba:83:b2:e4:12:25:06:10:22:35:99:a4:11:a7:56: a0:99:9e:de:9f:a2:9a:30:aa:1b:77:66:7b:66:fa: 5f:fc:8c:74:88:59:6e:fe:a0:b7:49:bc:fb:66:80: 63:4a:70:61:59:40:6a:4c:a0:a0:a9:0c:94:61:4c: 0e:2a:99:ff:14:d8:13:9b:43:90:42:55:64:37:a4: 21:05:c5:67:68:b2:c3:38:e0:66:af:6d:15:9e:91: d2:6c:09:e7:9f:41:54:4b:08:a7:af:6d:c2:7b:6c: 4e:f0:13:11:4e:10:d3:ef:c1:9b:1e:b4:c2:ee:cb: 54:f9:bf:0b:fe:86:dd:e0:1b:c7:a9:5e:2d:06:64: 49:5b:6c:6a:86:ba:0a:67:ce:bb:7c:2f:f3:00:b8: 12:4a:66:bc:a5:bd:58:3f:f2:5a:ea:6c:a3:ab:97: c8:c0:24:af:9d:c9:5f:b5:56:1b:16:a6:00:25:61: 9f:fc:e7:b1:32:15:0e:d6:c9:a1:f0:39:e5:20:99: 23:d1:c4:79:8f:20:77:ad:bb:45:eb:eb:4e:0a:f3: d7:ee:9d:fd:03:22:fe:f8:52:90:c6:9c:c3:6c:be: b3:94:7b:06:8a:9d:33:da:7d:92:2b:6f:5c:0d:bd: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:52:C8:EE:F6:77:F5:4D:F7:09:21:B5:8C:00:16:51:02:FB:DE:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4a5e9c1-d838-365f-9553-97009a7b5512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:03:b0:2b:80:db:9c:7f:b3:f9:1b:41:fa:dd:e3:09:a9:6b: 8b:65:58:42:53:23:69:e2:e7:b8:de:2f:eb:7a:41:3a:9b:2f: 75:58:b7:80:f8:89:a0:55:ed:03:ff:4f:a7:72:bd:aa:75:e8: ca:7a:32:c8:d5:7b:8a:d9:54:61:4a:5f:26:f6:18:59:5a:fa: c9:b0:69:47:30:9e:42:c8:ea:9e:c7:c7:ff:10:36:ac:a1:e2: 4e:91:26:2f:9a:24:89:3a:43:98:35:03:e0:95:ee:91:33:9a: c8:29:3e:d9:ad:c9:b9:9a:21:d5:e0:da:b2:ea:44:a9:2c:8c: 7a:c8:f3:0f:70:ee:8c:f7:81:4d:50:3f:e4:1c:5d:41:b5:cc: 90:43:6f:d9:bb:f6:13:e7:85:b2:cd:d9:d4:6e:04:50:02:f2: 0b:b1:aa:da:b1:df:e2:11:13:2a:28:72:50:54:ba:84:c4:43: 42:9a:65:82:c5:38:14:ee:23:16:65:75:aa:2a:e0:9a:88:c0: 2a:ce:14:1f:b1:1f:fb:f3:6a:4e:06:a3:6b:2e:d9:71:20:a7: 13:d2:5d:53:9f:2f:d6:43:be:13:1d:cb:e3:2f:ec:c6:fe:79: 39:0f:67:03:eb:d4:0f:ff:e3:aa:c7:02:69:00:46:b3:58:f3: 42:51:7e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhOV32wD26WIsuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTEyNTUyZTYtNzk2ZS00ZjRhLTk5Y2EtMmM1ZWEyMWJiNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAuQDWGbl36d8a3z8EK6g7LkEiUGECI1maQR p1agmZ7en6KaMKobd2Z7Zvpf/Ix0iFlu/qC3Sbz7ZoBjSnBhWUBqTKCgqQyUYUwO Kpn/FNgTm0OQQlVkN6QhBcVnaLLDOOBmr20VnpHSbAnnn0FUSwinr23Ce2xO8BMR ThDT78GbHrTC7stU+b8L/obd4BvHqV4tBmRJW2xqhroKZ867fC/zALgSSma8pb1Y P/Ja6myjq5fIwCSvnclftVYbFqYAJWGf/OexMhUO1smh8DnlIJkj0cR5jyB3rbtF 6+tOCvPX7p39AyL++FKQxpzDbL6zlHsGip0z2n2SK29cDb2s/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFSyO72d/VN9wkhtYwAFlEC+948MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDRhNWU5YzEtZDgzOC0z NjVmLTk1NTMtOTcwMDlhN2I1NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEDsCuA25x/s/kbQfrd4wmpa4tlWEJTI2ni57jeL+t6QTqbL3VYt4D4 iaBV7QP/T6dyvap16Mp6MsjVe4rZVGFKXyb2GFla+smwaUcwnkLI6p7Hx/8QNqyh 4k6RJi+aJIk6Q5g1A+CV7pEzmsgpPtmtybmaIdXg2rLqRKksjHrI8w9w7oz3gU1Q P+QcXUG1zJBDb9m79hPnhbLN2dRuBFAC8guxqtqx3+IREyooclBUuoTEQ0KaZYLF OBTuIxZldaoq4JqIwCrOFB+xH/vzak4Go2su2XEgpxPSXVOfL9ZDvhMdy+Mv7Mb+ eTkPZwPr1A//46rHAmkARrNY80JRfoI= -----END CERTIFICATE-----Generated at Tue Sep 29 05:35:02 2026 by rpki-client