$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa File: cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa (raw, json) Hash identifier: 7JrKSRxEX/hp0m7GP8436JMqOOUCnxm6qHmdxy44Zmw= Subject key identifier: 9A:C2:CD:16:08:0C:83:57:F2:50:C1:DB:D1:D9:FE:36:3D:DB:B4:E4 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584EA797EC86BB7546DA0A3CBD00 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21581 IP address blocks: 108.161.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:ec:86:bb:75:46:da:0a:3c:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=958bb773-e694-4a14-8797-8516d00b1816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:9a:a4:52:75:07:f5:db:92:2b:fc:56:c8: a2:d6:00:4a:33:d1:a3:e6:a7:a3:62:40:06:fb:3b: 80:0e:fc:a2:18:87:4e:48:24:3f:e5:d7:cf:70:13: 1c:de:a5:af:61:4f:43:5f:16:dc:54:d9:9d:42:9f: 86:e9:b2:bd:1a:5d:51:36:6f:47:4a:9b:5a:30:3b: c5:32:d0:28:ee:db:52:b8:64:76:b5:4a:a3:62:39: 5e:96:df:0e:14:74:b3:0b:2a:17:3a:9b:5e:70:1e: 4a:fe:8b:25:e5:d8:97:d7:33:e5:9a:78:93:7b:9f: 53:26:a7:43:48:a6:2c:2f:de:2f:d0:ea:f4:69:86: 9b:fb:93:d2:10:3c:38:b1:b9:c8:2a:79:96:87:f5: 11:47:eb:7a:02:58:e3:78:ef:33:9c:6b:c9:1c:f3: ed:f4:d5:fe:52:0f:3b:eb:c5:ae:bd:61:17:bf:d5: 75:ac:b6:96:b0:e0:30:c1:c8:2d:e7:34:81:b0:82: f7:0b:c1:9f:15:61:5d:d0:5e:0d:88:87:c8:1f:86: 90:04:c3:c1:2f:ec:7b:f8:50:8a:86:27:5a:83:da: 7b:83:e0:2e:b0:7a:89:d8:af:66:24:12:fc:13:39: b0:5e:78:a8:6e:fc:a5:c5:c8:05:05:69:20:6a:2b: 13:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C2:CD:16:08:0C:83:57:F2:50:C1:DB:D1:D9:FE:36:3D:DB:B4:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b3:18:47:ad:15:12:ba:de:10:4d:3b:c4:2a:78:58:2b:90: 4b:26:3f:ff:1e:8d:10:56:97:01:9e:e4:74:a4:c1:67:33:9a: a8:1c:d6:a5:98:88:16:16:35:4e:5a:0f:ed:3e:b2:e8:34:68: 6e:36:75:b7:88:c6:bb:52:6e:cf:20:97:97:9c:d3:40:95:40: 1a:22:7a:17:5f:fc:9c:95:85:e8:e4:5b:e6:f9:50:27:4b:30: 2e:d2:30:c2:7d:a7:45:a6:90:db:fc:aa:e9:3b:45:15:86:0a: 9d:59:0d:87:4a:4d:c3:cf:7b:37:ad:65:48:29:5c:70:8b:76: 54:5d:6c:a0:5b:a7:b5:8e:de:23:38:98:96:d4:6f:fb:56:50: 7e:be:07:ca:b1:b6:87:0c:2a:3b:82:eb:3f:2e:49:75:a5:93: 8c:3c:a2:1d:9c:bc:96:0e:0d:eb:87:4f:09:9a:33:28:61:eb: 4e:5f:b9:aa:01:54:16:7d:c0:33:22:e3:e8:76:e1:fb:05:c9: 64:34:82:fe:47:a3:13:b8:0e:2e:5d:ce:0e:cb:fd:e7:9f:f6: ce:12:ae:de:94:de:d3:85:27:eb:7b:55:27:c3:e4:c7:47:23: 5a:88:67:bc:79:ea:69:72:64:3e:c2:33:44:9a:df:10:05:fe: 00:13:ca:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl+yGu3VG2go8vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTU4YmI3NzMtZTY5NC00YTE0LTg3OTctODUxNmQwMGIxODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocKapFJ1B/Xbkiv8Vsii1gBKM9Gj5qejYkAG +zuADvyiGIdOSCQ/5dfPcBMc3qWvYU9DXxbcVNmdQp+G6bK9Gl1RNm9HSptaMDvF MtAo7ttSuGR2tUqjYjlelt8OFHSzCyoXOptecB5K/osl5diX1zPlmniTe59TJqdD SKYsL94v0Or0aYab+5PSEDw4sbnIKnmWh/URR+t6AljjeO8znGvJHPPt9NX+Ug87 68WuvWEXv9V1rLaWsOAwwcgt5zSBsIL3C8GfFWFd0F4NiIfIH4aQBMPBL+x7+FCK hidag9p7g+AusHqJ2K9mJBL8EzmwXniobvylxcgFBWkgaisTFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrCzRYIDINX8lDB29HZ/jY927TkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvY2YxMmU2NTgtOWRkNS0z OWYyLWJmNzAtYzBhNDgzNzVkOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABizGEetFRK63hBNO8QqeFgrkEsmP/8ejRBWlwGe5HSkwWczmqgc1qWY iBYWNU5aD+0+sug0aG42dbeIxrtSbs8gl5ec00CVQBoiehdf/JyVhejkW+b5UCdL MC7SMMJ9p0WmkNv8quk7RRWGCp1ZDYdKTcPPezetZUgpXHCLdlRdbKBbp7WO3iM4 mJbUb/tWUH6+B8qxtocMKjuC6z8uSXWlk4w8oh2cvJYODeuHTwmaMyhh605fuaoB VBZ9wDMi4+h24fsFyWQ0gv5HoxO4Di5dzg7L/eef9s4Srt6U3tOFJ+t7VSfD5MdH I1qIZ7x56mlyZD7CM0Sa3xAF/gATyvI= -----END CERTIFICATE-----Generated at Wed Aug 26 08:05:37 2026 by rpki-client