$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa File: aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa (raw, json) Hash identifier: aPMAyoYgBryOYJHXQS5yCtENsoV79zLyQkl62zX5auE= Subject key identifier: AD:18:E3:E4:FC:88:BD:1A:44:0D:0E:F9:2A:47:F4:F4:BA:C6:F2:D4 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584EA79876E9954C17F139AE1700 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21581 IP address blocks: 108.161.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:76:e9:95:4c:17:f1:39:ae:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7c95860d-ed7f-470c-8d5e-a02d0624b40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:0b:8a:54:c3:b9:cc:ad:d1:07:00:61:99: 33:cf:81:e2:10:fb:a5:00:ca:5f:c5:40:86:ff:ed: 1d:e0:6c:46:4c:70:14:9b:52:11:d7:ae:fe:e0:8c: 00:0a:1b:69:41:50:84:1c:69:d2:e2:cc:b7:f7:6d: a2:6b:92:93:a1:88:ab:50:08:87:0b:eb:0c:4b:26: 46:6a:99:9a:41:15:da:d0:21:69:da:f5:25:56:22: b7:dc:48:1f:2d:dc:cb:ca:fe:48:32:89:59:7f:b2: 75:4d:0a:ad:43:be:cb:47:71:83:a5:ea:15:bb:67: c9:48:df:84:6c:04:25:12:52:c2:ee:fb:1d:89:15: 0f:54:3b:93:57:b8:48:e5:15:e3:6b:e6:22:70:47: eb:be:35:b8:1c:88:0e:6d:b3:53:9f:d7:99:3c:a1: 7f:a3:d0:ba:0c:20:23:2b:95:23:16:29:8f:59:1c: f3:46:c7:26:74:d5:8c:e7:51:be:b3:1a:63:b9:78: de:c6:cd:14:0b:e3:e5:1c:3a:22:37:a0:46:30:c3: ac:37:e9:de:c6:bc:e9:7b:7c:7c:fe:e7:fd:6d:4b: 72:9f:74:52:ea:41:39:1c:38:9c:10:7b:39:24:1c: d6:e9:bc:57:9c:d5:3f:ce:35:bb:3e:8f:21:57:e9: aa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:18:E3:E4:FC:88:BD:1A:44:0D:0E:F9:2A:47:F4:F4:BA:C6:F2:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/aed93bfa-9682-377b-b2b6-d73c1d09f1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:63:94:6a:11:77:a8:0e:ec:24:3e:ea:6c:7d:aa:36:e1:7b: 2b:3f:55:79:eb:1c:ff:56:cb:68:b5:6b:76:52:6c:af:3f:b9: 35:21:9d:fd:2e:bb:70:ca:9b:d6:8a:eb:b9:cf:19:4d:de:8f: 15:f6:4b:a3:2b:a8:71:3f:ae:e1:34:28:57:51:a5:e7:02:a5: 69:7d:70:27:13:bf:08:db:47:e7:ac:3c:a3:40:6a:d7:4d:e4: 9d:06:a1:92:7c:1c:87:b7:48:de:f1:6e:9f:8c:31:bc:72:cf: 7f:8f:f3:f4:58:20:4c:bc:a3:cb:15:0b:df:bd:f1:c2:9f:c5: b9:bb:d1:b5:8c:76:f2:45:02:34:a2:29:ca:41:0a:d0:cf:fe: 27:7b:b0:8d:a6:40:01:af:24:2e:77:20:75:84:43:1d:a0:56: 4e:8d:94:c3:5f:8c:a2:36:b3:89:47:b7:03:31:41:76:d4:ab: 65:c0:e5:74:70:a2:e5:e9:ce:fa:fb:8a:95:8d:a8:ce:4d:d4: db:14:a4:6d:87:7d:e6:15:ba:01:1d:59:51:a7:68:92:55:18: 4c:7f:4a:f6:ec:07:44:87:97:57:5f:3a:3a:c5:6c:74:f8:9d: 7c:31:19:bb:02:e8:f9:16:eb:17:c3:42:c3:66:05:70:89:36: 32:4c:9a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHbplUwX8TmuFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2M5NTg2MGQtZWQ3Zi00NzBjLThkNWUtYTAyZDA2MjRiNDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQYLilTDucyt0QcAYZkzz4HiEPulAMpfxUCG /+0d4GxGTHAUm1IR167+4IwAChtpQVCEHGnS4sy3922ia5KToYirUAiHC+sMSyZG apmaQRXa0CFp2vUlViK33EgfLdzLyv5IMolZf7J1TQqtQ77LR3GDpeoVu2fJSN+E bAQlElLC7vsdiRUPVDuTV7hI5RXja+YicEfrvjW4HIgObbNTn9eZPKF/o9C6DCAj K5UjFimPWRzzRscmdNWM51G+sxpjuXjexs0UC+PlHDoiN6BGMMOsN+nexrzpe3x8 /uf9bUtyn3RS6kE5HDicEHs5JBzW6bxXnNU/zjW7Po8hV+mqiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0Y4+T8iL0aRA0O+SpH9PS6xvLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvYWVkOTNiZmEtOTY4Mi0z NzdiLWIyYjYtZDczYzFkMDlmMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABljlGoRd6gO7CQ+6mx9qjbheys/VXnrHP9Wy2i1a3ZSbK8/uTUhnf0u u3DKm9aK67nPGU3ejxX2S6MrqHE/ruE0KFdRpecCpWl9cCcTvwjbR+esPKNAatdN 5J0GoZJ8HIe3SN7xbp+MMbxyz3+P8/RYIEy8o8sVC9+98cKfxbm70bWMdvJFAjSi KcpBCtDP/id7sI2mQAGvJC53IHWEQx2gVk6NlMNfjKI2s4lHtwMxQXbUq2XA5XRw ouXpzvr7ipWNqM5N1NsUpG2HfeYVugEdWVGnaJJVGEx/SvbsB0SHl1dfOjrFbHT4 nXwxGbsC6PkW6xfDQsNmBXCJNjJMmlM= -----END CERTIFICATE-----Generated at Tue Aug 25 15:37:51 2026 by rpki-client