$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa File: 4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa (raw, json) Hash identifier: tAQT/vGSxKJPJXKASeZG8ufsdM6QPakTryYIQ3CquMc= Subject key identifier: FF:8D:81:F1:BC:F5:EA:66:78:36:37:91:80:5C:58:5E:FD:8F:43:1B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CC86D4CA692BD23A83240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 108.177.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:c8:6d:4c:a6:92:bd:23:a8:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1a1842c4-8181-4984-9804-1c157a9b322b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:a2:d8:7f:4b:03:c0:9a:cd:cc:18:62:01: d7:f4:38:e9:73:87:36:ae:d2:c4:7e:84:5c:2e:30: 2d:2a:8a:b3:89:9a:e4:f5:2e:88:5d:19:36:b5:d1: d3:98:21:d4:ac:f2:1b:7e:0c:ef:5a:e2:ea:8d:2f: 19:4e:7a:f6:aa:73:97:cd:28:64:ed:31:6e:54:70: b9:0e:d0:a6:89:4e:7c:61:69:bb:d7:97:37:6d:94: c7:bf:98:52:b7:84:36:04:aa:f6:72:74:24:78:df: 78:4a:ba:23:67:0f:a1:8a:ec:21:13:aa:65:e4:65: 41:a0:0c:86:04:2c:06:c4:90:46:28:78:58:53:44: c7:db:79:33:6b:eb:6b:da:b2:82:e0:58:44:42:b3: 2c:b8:9f:c5:fb:6c:ee:25:65:86:95:fb:32:0d:07: 05:0b:11:ec:1c:44:28:2a:7b:ce:79:be:f3:6d:e7: 63:4c:be:0b:7d:d5:97:21:73:a7:7b:4e:37:c4:2f: 45:98:f7:4f:55:8d:52:6a:ad:05:77:30:99:b4:7c: 10:81:55:8a:18:d5:a2:0e:a8:81:f9:db:82:bb:22: 99:32:b6:f3:04:d2:36:bc:1c:12:a8:10:a1:8a:00: 06:6f:4a:57:39:67:47:5d:dd:a3:d4:cd:c9:4c:62: 0e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8D:81:F1:BC:F5:EA:66:78:36:37:91:80:5C:58:5E:FD:8F:43:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ab:1e:1e:bb:1e:a3:5f:1a:71:4d:8d:30:ca:5b:36:68:af: 56:5e:7a:fa:8d:1c:d5:d9:bf:fe:4c:c1:ff:93:fc:00:cd:15: c8:f4:52:c5:7e:ad:d4:89:6b:3d:b1:82:51:06:63:69:bf:25: 87:6b:5e:5a:88:f5:cf:3d:80:0f:cd:d9:42:b0:c9:94:74:6a: f7:94:06:3d:05:b4:3e:69:9a:74:cb:6f:74:61:0b:ff:fb:3e: 15:45:e8:62:06:11:19:2a:56:b8:99:bd:07:22:b5:2d:07:91: 95:01:0b:8d:73:e1:6b:2e:cf:37:c7:f9:cf:cc:cc:2e:65:5f: 3c:dd:4f:6a:96:92:31:85:fc:18:13:17:b4:cf:b7:b5:ec:8a: 8f:52:a7:84:ff:b1:18:3e:8c:ec:ed:5c:53:6d:7c:42:a5:a8: 6c:99:26:e5:d4:d6:bc:94:28:93:f1:ef:f9:25:d5:ea:fb:5e: 77:2a:83:03:29:f6:ee:5d:a9:72:63:e6:0d:75:0e:04:b2:e5: 1d:95:b6:0d:73:52:f5:5b:b3:22:ee:9d:d3:b2:37:1e:5b:6f: 6a:f5:cc:f3:da:f8:35:17:5f:bd:5b:b8:90:b3:67:06:4d:ed: 4a:d1:7d:63:fd:41:e2:2f:3a:8e:cb:7b:75:cf:61:5e:b4:e0: 6d:c3:4e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfMhtTKaSvSOoMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWExODQyYzQtODE4MS00OTg0LTk4MDQtMWMxNTdhOWIzMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+Ki2H9LA8CazcwYYgHX9Djpc4c2rtLEfoRc LjAtKoqziZrk9S6IXRk2tdHTmCHUrPIbfgzvWuLqjS8ZTnr2qnOXzShk7TFuVHC5 DtCmiU58YWm715c3bZTHv5hSt4Q2BKr2cnQkeN94SrojZw+hiuwhE6pl5GVBoAyG BCwGxJBGKHhYU0TH23kza+tr2rKC4FhEQrMsuJ/F+2zuJWWGlfsyDQcFCxHsHEQo KnvOeb7zbedjTL4LfdWXIXOne043xC9FmPdPVY1Saq0FdzCZtHwQgVWKGNWiDqiB +duCuyKZMrbzBNI2vBwSqBChigAGb0pXOWdHXd2j1M3JTGIO4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+NgfG89epmeDY3kYBcWF79j0MbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGNlMTJhNjUtMTRkYS0z YjcyLTk1YTUtZGEwYWMxYzMxNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIirHh67HqNfGnFNjTDKWzZor1ZeevqNHNXZv/5Mwf+T/ADNFcj0UsV+ rdSJaz2xglEGY2m/JYdrXlqI9c89gA/N2UKwyZR0aveUBj0FtD5pmnTLb3RhC//7 PhVF6GIGERkqVriZvQcitS0HkZUBC41z4WsuzzfH+c/MzC5lXzzdT2qWkjGF/BgT F7TPt7Xsio9Sp4T/sRg+jOztXFNtfEKlqGyZJuXU1ryUKJPx7/kl1er7XncqgwMp 9u5dqXJj5g11DgSy5R2Vtg1zUvVbsyLundOyNx5bb2r1zPPa+DUXX71buJCzZwZN 7UrRfWP9QeIvOo7Le3XPYV604G3DToA= -----END CERTIFICATE-----Generated at Fri Sep 25 14:54:23 2026 by rpki-client