$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/431c44f9-3908-33e2-9b3e-e1490117b1e0.roa File: 431c44f9-3908-33e2-9b3e-e1490117b1e0.roa (raw, json) Hash identifier: dhTH2Opv4Iyb2du879FJYjdo95daRMB8d864TF5OEkU= Subject key identifier: EE:C7:C5:B5:2C:84:D8:1B:19:5F:2E:7E:FD:06:61:BE:6B:CC:D0:77 Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584F89A850E6AEA1C705FF036380 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/431c44f9-3908-33e2-9b3e-e1490117b1e0.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 402926 IP address blocks: 108.161.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:50:e6:ae:a1:c7:05:ff:03:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=2334c11e-8a5a-447c-af4b-f0ecc8348a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:70:ab:6e:e5:6b:66:df:69:84:55:1c:d1: d1:49:1c:cf:44:f8:3b:8f:88:dc:07:0c:cd:d1:88: f5:a0:e7:54:1e:00:bb:da:ec:e7:b4:36:e4:e2:d7: 3a:fb:63:17:22:9f:5d:f0:f0:e0:30:69:0f:50:83: de:f4:8d:4c:3b:dc:56:11:b9:09:94:34:58:6c:a4: 2f:73:47:14:f7:d0:bb:2b:ac:33:f9:df:02:66:b3: 95:6b:38:bd:fb:ac:aa:b2:8f:34:46:33:4c:59:e3: 44:46:fa:24:eb:7e:40:4f:7e:3e:61:67:d5:6f:f4: de:f1:22:c5:70:1a:72:6c:00:f4:14:a8:c6:d2:39: 9d:23:8b:8e:65:38:67:c8:5a:19:9f:98:8d:9a:33: de:d8:d3:f5:82:85:bb:dc:ab:0f:da:06:f6:80:58: 9b:e9:ba:bf:12:6c:7e:f6:9a:39:28:4e:8f:c2:a1: 3f:c3:1c:f0:9d:e3:4f:8f:34:03:26:2d:4e:6c:49: 5e:e8:36:62:dd:c9:01:ef:47:7c:f2:15:ee:fc:0f: 0b:91:70:99:71:27:fe:e4:ba:5f:a6:82:e2:48:9d: 7f:55:3d:af:8f:a2:fb:91:d2:9d:b2:70:ee:78:81: 0e:47:69:80:27:b7:55:71:30:a0:d9:6a:23:03:0e: e7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C7:C5:B5:2C:84:D8:1B:19:5F:2E:7E:FD:06:61:BE:6B:CC:D0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/431c44f9-3908-33e2-9b3e-e1490117b1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 108.161.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:38:57:b3:86:0b:ee:a9:10:9f:7d:9e:02:25:e8:bc:82:59: 00:b2:40:79:70:18:55:a9:83:d4:46:96:1d:1a:b8:08:30:12: 19:b0:1d:d9:c0:d0:1b:82:a6:62:d9:a2:53:50:50:d2:84:49: c7:56:84:4a:d9:a2:b2:20:1a:16:80:05:80:f1:11:5b:5e:2e: d2:25:f5:4b:8c:c2:e9:8e:db:3b:77:64:d2:06:99:11:4c:28: 47:eb:7c:52:a7:50:4a:2b:0c:50:47:34:62:e8:6f:7f:24:1b: 9f:a0:29:22:6f:97:5e:35:ee:5c:3d:51:c6:e8:4c:a7:17:56: 19:03:eb:d5:2b:bb:78:9b:9e:b9:4c:0a:01:4c:00:c4:33:d4: e8:02:fb:78:7f:80:03:e0:ae:8d:3d:b6:03:2f:11:53:b0:49: a0:5d:e0:bc:92:a2:51:f9:f0:6e:6e:1d:67:ad:7c:3f:d1:f6: d2:81:22:c2:0c:5c:5a:d6:34:a8:95:b5:5f:29:a0:18:47:ee: 0c:f8:d2:8a:e5:ab:c8:65:59:a9:3f:3f:89:a9:7a:5b:9f:69: 77:61:d1:49:d4:c5:9a:ee:73:09:58:5d:35:9c:06:0d:df:1f: f3:7b:af:5e:2c:8c:d8:1e:8b:98:36:8d:26:be:c2:33:94:60: bf:89:9d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFDmrqHHBf8DY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MjMzNGMxMWUtOGE1YS00NDdjLWFmNGItZjBlY2M4MzQ4YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymFwq27la2bfaYRVHNHRSRzPRPg7j4jcBwzN 0Yj1oOdUHgC72uzntDbk4tc6+2MXIp9d8PDgMGkPUIPe9I1MO9xWEbkJlDRYbKQv c0cU99C7K6wz+d8CZrOVazi9+6yqso80RjNMWeNERvok635AT34+YWfVb/Te8SLF cBpybAD0FKjG0jmdI4uOZThnyFoZn5iNmjPe2NP1goW73KsP2gb2gFib6bq/Emx+ 9po5KE6PwqE/wxzwneNPjzQDJi1ObEle6DZi3ckB70d88hXu/A8LkXCZcSf+5Lpf poLiSJ1/VT2vj6L7kdKdsnDueIEOR2mAJ7dVcTCg2WojAw7npQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7HxbUshNgbGV8ufv0GYb5rzNB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvNDMxYzQ0ZjktMzkwOC0z M2UyLTliM2UtZTE0OTAxMTdiMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE4V7OGC+6pEJ99ngIl6LyCWQCyQHlwGFWpg9RGlh0auAgwEhmwHdnA 0BuCpmLZolNQUNKEScdWhErZorIgGhaABYDxEVteLtIl9UuMwumO2zt3ZNIGmRFM KEfrfFKnUEorDFBHNGLob38kG5+gKSJvl1417lw9UcboTKcXVhkD69Uru3ibnrlM CgFMAMQz1OgC+3h/gAPgro09tgMvEVOwSaBd4LySolH58G5uHWetfD/R9tKBIsIM XFrWNKiVtV8poBhH7gz40orlq8hlWak/P4mpelufaXdh0UnUxZrucwlYXTWcBg3f H/N7r14sjNgei5g2jSa+wjOUYL+JnZ4= -----END CERTIFICATE-----Generated at Mon Oct 26 13:55:32 2026 by rpki-client