$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/31a45e03-b937-3056-877c-75e8d2084a61.roa File: 31a45e03-b937-3056-877c-75e8d2084a61.roa (raw, json) Hash identifier: BsJos1P9s1f3W65V8O2h52qDQi4sZgX5fjuk6C4h+H8= Subject key identifier: DF:61:40:E1:1A:B8:CB:24:9A:F2:58:BD:DE:8F:FC:CA:44:03:CA:20 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584F71ED7E5304C41248F0302F00 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/31a45e03-b937-3056-877c-75e8d2084a61.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 21581 IP address blocks: 108.161.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:7e:53:04:c4:12:48:f0:30:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=0826567b-35dc-4f3b-bd9e-ec98dceafec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:e7:23:16:65:ff:40:ce:30:32:14:14:2d: f2:51:32:ea:8b:ad:d3:a6:7f:34:11:2c:2f:d5:c8: fd:87:17:c3:3c:ca:17:5e:d6:38:8d:c4:93:7b:f6: 07:07:fa:2a:44:ec:9f:90:fb:f5:10:25:db:cf:72: da:dd:c4:75:e0:75:d9:a6:0b:9c:84:cb:43:bb:b2: 88:a7:87:49:7c:96:68:04:41:db:be:a8:72:c2:58: 62:9e:42:f7:0f:e6:2f:89:05:95:9b:30:a0:80:86: bf:47:d7:56:d7:dd:7f:1d:23:0d:0a:7e:d8:19:34: 4f:8d:b7:68:55:4c:a9:7c:7e:f1:c4:dc:30:0a:39: 71:6c:32:f0:44:c7:10:16:e1:4c:b9:f4:cb:c6:fb: a2:5a:36:16:f3:f8:ff:52:ef:d6:7b:6e:d1:ce:10: 3d:26:af:d8:8b:20:81:21:35:b2:e4:9b:c7:3e:b7: 9b:d4:00:71:f3:e3:b5:e8:bb:e5:e5:dc:b6:d7:62: 43:1f:3f:6a:14:47:de:54:64:f8:13:89:96:47:f3: 3f:92:21:2e:3f:6e:59:98:e3:d3:af:8b:a8:33:4f: cd:c1:50:12:a4:4a:88:87:fe:61:d2:79:d3:79:88: fd:31:79:8d:6c:cb:6b:e9:87:de:7c:fd:3e:a2:b3: 2f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:61:40:E1:1A:B8:CB:24:9A:F2:58:BD:DE:8F:FC:CA:44:03:CA:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/31a45e03-b937-3056-877c-75e8d2084a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9e:2f:bb:7b:d9:ee:73:01:eb:76:a4:7f:5d:85:92:c7:44: 23:3b:f6:f7:24:3a:40:46:81:77:16:c0:38:f1:c1:71:6c:5b: 0c:8a:80:c6:3f:ec:07:cd:7e:7e:6c:58:76:9f:bf:08:02:81: 1c:bd:61:fd:44:e7:ac:1f:0d:77:86:63:e8:ed:8c:d3:72:e3: 21:37:4e:2a:39:5f:b0:90:09:7b:85:9c:b6:a1:db:7e:1c:93: 75:df:fe:1c:02:f5:33:25:fc:3b:ea:76:d5:d9:59:81:be:32: 06:7f:40:50:8a:64:04:d5:53:1d:33:c4:c8:ec:05:1f:c6:0c: f6:d1:bb:5b:a8:6f:9e:55:51:59:87:81:fd:13:84:33:d2:24: 3f:a5:cd:02:dc:ff:50:d8:d7:a4:5f:e9:ba:2d:e0:ef:bf:5d: 06:6f:e0:05:9c:dc:a3:30:d1:96:88:91:79:44:49:8e:24:4e: 27:41:8a:b2:5a:54:e4:c2:e9:89:3a:25:01:2e:31:2e:2d:c8: 6f:3b:f2:1e:63:d0:44:70:ca:3e:fc:87:ae:b8:03:1e:91:c1: 1d:c9:4b:9c:6d:8a:3e:06:28:e5:b5:f6:33:fc:dc:c7:97:5f: e7:d4:dc:04:e4:29:ca:20:7a:a9:ab:2f:59:2d:c3:ba:46:06: 9a:5b:95:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7X5TBMQSSPAwLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MDgyNjU2N2ItMzVkYy00ZjNiLWJkOWUtZWM5OGRjZWFmZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFDnIxZl/0DOMDIUFC3yUTLqi63Tpn80ESwv 1cj9hxfDPMoXXtY4jcSTe/YHB/oqROyfkPv1ECXbz3La3cR14HXZpguchMtDu7KI p4dJfJZoBEHbvqhywlhinkL3D+YviQWVmzCggIa/R9dW191/HSMNCn7YGTRPjbdo VUypfH7xxNwwCjlxbDLwRMcQFuFMufTLxvuiWjYW8/j/Uu/We27RzhA9Jq/YiyCB ITWy5JvHPreb1ABx8+O16Lvl5dy212JDHz9qFEfeVGT4E4mWR/M/kiEuP25ZmOPT r4uoM0/NwVASpEqIh/5h0nnTeYj9MXmNbMtr6YfefP0+orMvZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9hQOEauMskmvJYvd6P/MpEA8ogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvMzFhNDVlMDMtYjkzNy0z MDU2LTg3N2MtNzVlOGQyMDg0YTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6eL7t72e5zAet2pH9dhZLHRCM79vckOkBGgXcWwDjxwXFsWwyKgMY/ 7AfNfn5sWHafvwgCgRy9Yf1E56wfDXeGY+jtjNNy4yE3Tio5X7CQCXuFnLah234c k3Xf/hwC9TMl/DvqdtXZWYG+MgZ/QFCKZATVUx0zxMjsBR/GDPbRu1uob55VUVmH gf0ThDPSJD+lzQLc/1DY16Rf6bot4O+/XQZv4AWc3KMw0ZaIkXlESY4kTidBirJa VOTC6Yk6JQEuMS4tyG878h5j0ERwyj78h664Ax6RwR3JS5xtij4GKOW19jP83MeX X+fU3ATkKcogeqmrL1ktw7pGBppblUQ= -----END CERTIFICATE-----Generated at Sun Oct 11 07:35:04 2026 by rpki-client