$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d9dce88-7e22-329a-b1ce-ca85c3b7aabc.roa File: 3d9dce88-7e22-329a-b1ce-ca85c3b7aabc.roa (raw, json) Hash identifier: 4QBkvUDUpci18yhWiWja/ADkt57k9LVQfEeV/0bwN9k= Subject key identifier: 5F:80:E7:08:C4:15:A7:73:F5:C3:72:BC:4D:E3:C8:1C:47:10:30:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984CBDB289EFE41BD558380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d9dce88-7e22-329a-b1ce-ca85c3b7aabc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 108.177.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:cb:db:28:9e:fe:41:bd:55:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0007dc0d-e333-43e2-9340-d12efefcd0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:06:86:f0:6f:ce:d0:9f:c0:a4:a2:60:2f: 24:01:cf:76:8e:a2:bb:94:97:f6:2a:38:64:74:01: d6:bb:33:53:4f:d1:5b:00:9f:b3:5f:cb:b2:97:ba: 7a:1b:96:b8:d3:ea:bb:e5:09:03:59:88:c4:d5:ab: e6:d8:6d:5c:04:2c:75:62:b1:49:b4:82:08:8b:a7: 85:f8:39:fd:3e:38:c6:79:18:2c:ad:05:dd:88:23: cd:05:03:e4:60:75:07:e5:39:39:c9:e5:c5:55:be: 88:5a:c9:e4:63:b0:99:87:c8:91:bd:a9:0f:31:ff: 5d:56:0f:d2:70:75:6e:a6:23:f0:5c:68:96:9a:49: 5b:6e:3d:68:a0:7a:33:97:e7:e1:a6:fc:d6:9c:3f: 07:7e:4b:ea:3f:28:f7:f1:35:79:50:02:a4:1d:d1: b1:90:a2:79:8b:cf:a1:e5:73:a6:5e:4b:ff:d0:c6: c8:32:be:1d:63:55:c6:df:72:df:ec:be:c8:ba:ae: 1b:76:db:21:d1:92:35:bf:c4:1a:67:4c:79:6e:1d: 9a:8a:7b:68:34:71:3d:a7:1a:f5:ed:84:94:32:46: e1:66:7f:4e:61:2f:a7:e2:23:3d:37:67:9b:13:0c: 17:a4:53:71:53:49:f2:4c:f2:c3:ae:2f:ff:7e:aa: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:80:E7:08:C4:15:A7:73:F5:C3:72:BC:4D:E3:C8:1C:47:10:30:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d9dce88-7e22-329a-b1ce-ca85c3b7aabc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:cc:db:50:6f:38:30:57:10:a6:52:6f:28:da:53:db:62:83: 4b:1c:84:91:de:7f:9b:88:26:b4:7f:56:0f:2e:fd:28:58:64: 2c:41:ec:de:33:cf:de:0c:04:01:60:9e:a3:48:56:e6:06:ed: bc:92:26:b4:55:b5:54:e0:65:72:d0:54:05:46:86:2c:03:e6: 9c:81:9b:f8:5b:5a:b4:b3:df:05:42:d6:c0:b3:6f:14:a0:71: ae:c8:31:6b:0d:1d:65:10:c2:16:18:f4:83:02:f6:ae:61:e3: 2b:a9:0a:6e:65:02:1b:f1:b3:84:94:89:e3:57:de:87:64:32: 22:35:3d:b2:13:ec:5a:1c:50:d8:70:ea:04:cc:5f:08:1d:20: 57:62:7a:e6:cb:b6:42:47:0a:5a:54:fa:51:18:bb:c8:56:9e: c5:ea:fe:53:f1:db:4d:e7:bd:c8:16:59:0f:bc:a0:e1:3c:d0: e1:2e:bd:00:4b:89:75:6e:0a:71:eb:7d:0e:1b:29:58:10:7c: 30:1b:d5:d6:3f:28:af:bb:c7:bc:01:08:ff:07:48:5d:1f:0c: 31:93:35:1a:fd:53:06:f3:0a:85:4f:be:a3:10:62:1b:25:24: a9:fa:72:1e:e1:a7:6f:7d:77:3e:ae:86:8c:09:b3:69:2d:c9: 1f:84:6e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhMvbKJ7+Qb1Vg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDAwN2RjMGQtZTMzMy00M2UyLTkzNDAtZDEyZWZlZmNkMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z8GhvBvztCfwKSiYC8kAc92jqK7lJf2Kjhk dAHWuzNTT9FbAJ+zX8uyl7p6G5a40+q75QkDWYjE1avm2G1cBCx1YrFJtIIIi6eF +Dn9PjjGeRgsrQXdiCPNBQPkYHUH5Tk5yeXFVb6IWsnkY7CZh8iRvakPMf9dVg/S cHVupiPwXGiWmklbbj1ooHozl+fhpvzWnD8HfkvqPyj38TV5UAKkHdGxkKJ5i8+h 5XOmXkv/0MbIMr4dY1XG33Lf7L7Iuq4bdtsh0ZI1v8QaZ0x5bh2aintoNHE9pxr1 7YSUMkbhZn9OYS+n4iM9N2ebEwwXpFNxU0nyTPLDri//fqr7+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+A5wjEFadz9cNyvE3jyBxHEDATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2Q5ZGNlODgtN2UyMi0z MjlhLWIxY2UtY2E4NWMzYjdhYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvM21BvODBXEKZSbyjaU9tig0schJHef5uIJrR/Vg8u/ShYZCxB7N4z z94MBAFgnqNIVuYG7bySJrRVtVTgZXLQVAVGhiwD5pyBm/hbWrSz3wVC1sCzbxSg ca7IMWsNHWUQwhYY9IMC9q5h4yupCm5lAhvxs4SUieNX3odkMiI1PbIT7FocUNhw 6gTMXwgdIFdieubLtkJHClpU+lEYu8hWnsXq/lPx203nvcgWWQ+8oOE80OEuvQBL iXVuCnHrfQ4bKVgQfDAb1dY/KK+7x7wBCP8HSF0fDDGTNRr9UwbzCoVPvqMQYhsl JKn6ch7hp299dz6uhowJs2ktyR+EbkM= -----END CERTIFICATE-----Generated at Fri Sep 25 19:03:03 2026 by rpki-client