$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa File: 10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa (raw, json) Hash identifier: PKFTNH8he6ABy6FoNVX4n9rcqr+QqZyugnzIxABxEec= Subject key identifier: 6B:0D:2C:8E:1D:BE:FA:1A:B9:55:35:5C:62:AB:51:F9:05:16:6E:8A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984D1D46599683F2DC4EF20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 108.177.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:d1:d4:65:99:68:3f:2d:c4:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5e3c8bec-9004-412e-81f4-54681427950d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:e6:43:65:8d:3e:2f:bd:35:bd:19:ec:93: 17:12:c1:c1:db:0f:8a:50:35:12:36:2a:6b:a6:af: 8b:b6:da:b6:5f:37:4f:f4:af:14:ba:9a:e7:07:0f: 77:f9:bf:4c:c4:35:8b:66:3d:f5:77:93:52:9a:8f: 5f:73:7c:0d:86:c3:a0:d3:1e:db:87:b3:1f:7d:15: 6e:9d:f3:40:d1:4b:27:a5:84:dc:ea:a5:b8:f0:d5: b7:93:8b:12:51:6b:34:a7:09:c2:5c:d0:62:1f:e6: aa:9b:9f:68:8b:70:b7:87:9f:8e:5e:e9:eb:bc:bf: 41:60:66:1d:bb:ef:bc:25:2e:6d:ec:58:3d:25:ad: a0:b8:03:41:11:78:d2:46:66:99:45:98:06:bc:00: ad:c2:e5:8c:cf:e1:da:6d:61:ab:5b:90:12:18:ff: 40:94:07:90:f5:32:14:62:99:c4:37:0e:cc:ef:80: 38:cb:79:b0:86:80:df:93:d8:86:fa:06:af:46:42: e4:64:a3:3c:1d:63:8e:82:d9:84:fb:6d:1b:3c:07: 0e:78:7b:fc:f3:fc:87:dd:11:3c:76:70:63:76:be: 2f:78:f1:77:bf:99:12:11:33:06:ae:2c:3b:9e:9f: 77:8b:c7:94:6a:75:4a:51:96:ed:60:52:26:73:6e: 3c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0D:2C:8E:1D:BE:FA:1A:B9:55:35:5C:62:AB:51:F9:05:16:6E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10cf0c36-09ba-3825-b837-8a8a6a10fa66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:22:68:e2:fb:55:00:f7:ab:e3:0a:90:30:9b:e3:e4:5c:ca: 3f:3e:89:20:0e:7b:d2:e7:90:02:90:b6:c9:68:2c:c4:cf:db: 5e:8f:f3:65:a2:86:e6:78:ce:f8:10:ad:3f:61:7d:25:ba:f2: 09:15:c3:0a:75:a2:58:8a:2d:60:9a:43:79:78:ec:1f:5d:c0: b9:90:e3:a8:88:a4:cd:b4:b8:ac:f1:b8:e9:62:5e:9d:d5:6a: a8:01:de:74:0f:af:72:70:aa:b0:50:20:7c:ba:4b:33:3d:37: cf:e2:39:2d:98:c8:f9:a7:0e:71:38:b6:c9:5f:97:5e:1b:24: 60:3c:14:ae:76:53:e9:74:88:bf:e2:b2:3a:8b:aa:1f:d8:d9: d6:9e:f8:47:ad:f8:6a:77:a4:07:bc:dc:13:41:53:2c:e3:06: ed:19:95:14:c3:9d:d4:42:9f:ac:a6:11:69:45:5b:e9:0c:6d: f4:03:69:0d:2f:b3:8d:5c:08:d8:8d:17:64:e9:2f:d2:47:a7: 26:82:6d:6c:59:4a:cc:89:d8:e6:8d:f5:f8:cc:7c:55:b9:53: 19:08:d5:4d:1b:b2:eb:c1:a0:1d:9c:0b:ec:8f:e2:22:85:36: cb:b4:bc:62:54:4c:92:63:78:0c:54:6c:6a:a8:d2:e6:5e:0a: 6e:f4:3e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhNHUZZloPy3E7yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWUzYzhiZWMtOTAwNC00MTJlLTgxZjQtNTQ2ODE0Mjc5NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHnmQ2WNPi+9Nb0Z7JMXEsHB2w+KUDUSNipr pq+Lttq2XzdP9K8UuprnBw93+b9MxDWLZj31d5NSmo9fc3wNhsOg0x7bh7MffRVu nfNA0UsnpYTc6qW48NW3k4sSUWs0pwnCXNBiH+aqm59oi3C3h5+OXunrvL9BYGYd u++8JS5t7Fg9Ja2guANBEXjSRmaZRZgGvACtwuWMz+HabWGrW5ASGP9AlAeQ9TIU YpnENw7M74A4y3mwhoDfk9iG+gavRkLkZKM8HWOOgtmE+20bPAcOeHv88/yH3RE8 dnBjdr4vePF3v5kSETMGriw7np93i8eUanVKUZbtYFImc248NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsNLI4dvvoauVU1XGKrUfkFFm6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBjZjBjMzYtMDliYS0z ODI1LWI4MzctOGE4YTZhMTBmYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0iaOL7VQD3q+MKkDCb4+Rcyj8+iSAOe9LnkAKQtsloLMTP216P82Wi huZ4zvgQrT9hfSW68gkVwwp1oliKLWCaQ3l47B9dwLmQ46iIpM20uKzxuOliXp3V aqgB3nQPr3JwqrBQIHy6SzM9N8/iOS2YyPmnDnE4tslfl14bJGA8FK52U+l0iL/i sjqLqh/Y2dae+Eet+Gp3pAe83BNBUyzjBu0ZlRTDndRCn6ymEWlFW+kMbfQDaQ0v s41cCNiNF2TpL9JHpyaCbWxZSsyJ2OaN9fjMfFW5UxkI1U0bsuvBoB2cC+yP4iKF Nsu0vGJUTJJjeAxUbGqo0uZeCm70Pn0= -----END CERTIFICATE-----Generated at Sat Sep 26 16:40:36 2026 by rpki-client