$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa File: 6cefd9ed-c6aa-377f-b955-242338127643.roa (raw, json) Hash identifier: G8h/SRlWjj4COimJHFHF+DzbjOD4nE7uc3rkVDXSUm0= Subject key identifier: 46:BD:25:E9:D7:B6:0C:53:88:DC:0B:97:1B:7E:7D:B4:54:8A:2A:FF Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584EA798735FB314809784B2C440 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21581 IP address blocks: 108.161.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:73:5f:b3:14:80:97:84:b2:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e413bd67-dfdf-4f69-b93f-bf4a12edbd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:5c:58:37:5b:71:ad:e2:7e:d8:63:89:f3: 0a:91:ee:3b:85:c7:cd:f0:1a:7b:f9:33:6c:d5:f7: b3:bb:4a:72:de:7a:34:38:1e:1f:ff:03:53:34:cf: b4:f3:55:c9:1d:07:bb:49:6e:ef:97:d5:84:7b:28: 42:73:f3:4f:60:18:e8:a3:8d:ca:b2:0e:d7:b8:d9: 3f:b1:94:ad:68:c8:70:63:ed:42:ae:82:53:9d:ae: 4c:d8:8a:54:61:24:81:5d:6e:62:5b:5d:d8:42:0f: fe:5b:1a:0e:e5:ff:1e:f6:4d:57:60:6d:d1:89:b1: 47:5b:2e:87:84:12:09:87:d6:55:4a:65:bd:ad:6c: c5:3f:9e:ea:9a:c7:99:5e:cf:62:4e:da:bd:9f:10: 52:b2:a5:9f:74:e7:a4:3c:18:f5:38:f7:1c:97:9f: 69:d3:cf:20:1a:1d:62:82:87:9f:6a:1a:aa:bd:66: d6:2b:d4:4b:12:20:67:7d:e7:1e:96:cb:24:b5:d6: fd:ba:5c:54:0e:fc:40:00:2e:61:65:97:50:b6:3b: c1:02:d8:c9:79:59:f3:ce:2e:fe:26:57:0f:7a:14: d4:87:66:89:3b:3a:cf:3b:38:10:ef:a3:a1:4c:ba: 86:bb:d0:70:ba:93:18:48:a8:df:51:fa:4c:78:a0: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BD:25:E9:D7:B6:0C:53:88:DC:0B:97:1B:7E:7D:B4:54:8A:2A:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:dc:e2:d3:5f:b5:d6:a2:16:96:be:b4:ba:d4:d9:a2:35:cd: f3:8b:a8:75:0b:33:4e:0e:1c:e1:88:17:4a:12:84:b3:42:49: 99:c2:c1:78:5a:c7:73:70:85:cf:b0:aa:0c:7c:aa:db:69:7e: b0:5b:64:98:60:84:45:42:3c:d5:f7:d4:2d:31:9f:79:9c:e1: aa:0d:a7:a3:b9:2e:89:dc:d9:16:7a:fc:21:c3:b5:5a:79:4f: 7a:c5:80:0b:04:05:4e:b5:a1:82:84:16:b4:8c:a6:b3:b2:b8: f4:d4:7f:61:e4:55:02:34:12:11:fc:99:bd:cf:a4:c5:71:07: 9a:a0:f5:3e:8f:bf:45:01:60:ba:a3:ee:e9:9e:de:69:32:4e: 37:a9:e0:a5:01:8a:24:68:d7:00:23:5c:cb:46:75:f2:ab:ae: 25:2b:26:4e:28:03:e9:94:6a:1f:f5:de:0d:56:15:07:ee:36: f0:91:37:70:49:24:bf:b6:bf:85:fc:04:16:88:11:44:e2:84: f1:e0:24:86:2c:a3:00:de:42:17:d3:22:23:12:57:c5:a7:af: aa:59:a6:df:da:c0:73:f2:f7:1c:1c:75:cd:54:12:8e:c1:fd: 5b:fa:a7:90:73:f8:e7:15:cc:07:1b:ef:17:43:0b:65:7d:30: 33:b4:61:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHNfsxSAl4SyxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTQxM2JkNjctZGZkZi00ZjY5LWI5M2YtYmY0YTEyZWRiZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkZcWDdbca3ifthjifMKke47hcfN8Bp7+TNs 1fezu0py3no0OB4f/wNTNM+081XJHQe7SW7vl9WEeyhCc/NPYBjoo43Ksg7XuNk/ sZStaMhwY+1CroJTna5M2IpUYSSBXW5iW13YQg/+WxoO5f8e9k1XYG3RibFHWy6H hBIJh9ZVSmW9rWzFP57qmseZXs9iTtq9nxBSsqWfdOekPBj1OPccl59p088gGh1i goefahqqvWbWK9RLEiBnfecelssktdb9ulxUDvxAAC5hZZdQtjvBAtjJeVnzzi7+ JlcPehTUh2aJOzrPOzgQ76OhTLqGu9BwupMYSKjfUfpMeKArhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa9JenXtgxTiNwLlxt+fbRUiir/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvNmNlZmQ5ZWQtYzZhYS0z NzdmLWI5NTUtMjQyMzM4MTI3NjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArc4tNftdaiFpa+tLrU2aI1zfOLqHULM04OHOGIF0oShLNCSZnCwXha x3Nwhc+wqgx8qttpfrBbZJhghEVCPNX31C0xn3mc4aoNp6O5Lonc2RZ6/CHDtVp5 T3rFgAsEBU61oYKEFrSMprOyuPTUf2HkVQI0EhH8mb3PpMVxB5qg9T6Pv0UBYLqj 7ume3mkyTjep4KUBiiRo1wAjXMtGdfKrriUrJk4oA+mUah/13g1WFQfuNvCRN3BJ JL+2v4X8BBaIEUTihPHgJIYsowDeQhfTIiMSV8Wnr6pZpt/awHPy9xwcdc1UEo7B /Vv6p5Bz+OcVzAcb7xdDC2V9MDO0Ybw= -----END CERTIFICATE-----Generated at Tue Aug 25 21:15:59 2026 by rpki-client