$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa File: 4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa (raw, json) Hash identifier: BRSUZX1TCh504th7y1TTeG5xDdyTjBHag/zN5m401+w= Subject key identifier: 54:20:A8:4A:4E:9C:78:E7:51:AF:07:65:5F:36:0D:64:AC:28:0A:AD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984B7363C538A9DD3257080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 108.170.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:b7:36:3c:53:8a:9d:d3:25:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=59201871-a3a2-4e2d-a3e2-9ebe3fdb91b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:cd:6b:2b:5a:15:ac:79:c6:35:af:b7:76: c5:4b:90:05:0e:63:6f:d7:9c:25:55:5a:c6:02:94: 42:f0:c7:53:dc:92:03:a5:d3:a9:49:e5:87:17:93: f0:15:98:c7:07:d8:6d:84:55:7e:31:d9:78:a0:83: d6:ec:57:0e:aa:01:83:0d:f1:5f:87:b9:57:1d:e1: 12:51:90:cf:c5:cd:22:c5:e6:b8:09:83:99:76:6d: 50:2a:d7:e6:d5:45:df:68:ab:8f:b0:8a:49:f7:2c: 55:a6:51:d5:94:fe:5d:a0:7a:cd:78:7c:5d:0f:fb: 2a:32:7c:44:07:db:fd:b0:d7:97:a9:33:e1:89:ff: eb:d8:9c:b8:9f:dd:b2:ed:09:e9:be:0b:48:9d:b2: a9:ea:4a:68:a9:68:70:fc:35:36:ea:1b:53:e8:36: 59:11:5d:2c:5d:8d:68:4e:1c:8c:87:9b:b6:64:b3: af:02:08:c1:3b:66:4d:f5:71:03:61:47:3d:31:9e: f2:38:ff:d0:27:5d:fc:ef:dc:b7:18:9f:37:df:1e: 5d:dd:b4:36:45:fc:d7:7e:f8:ad:99:9d:c6:1e:23: 67:72:77:0a:f9:1d:b3:c4:3b:91:eb:cc:58:fc:33: 1b:e5:d3:bb:d2:6f:cf:9c:29:c8:49:81:a6:d7:12: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:20:A8:4A:4E:9C:78:E7:51:AF:07:65:5F:36:0D:64:AC:28:0A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bf:a6:64:cb:b9:ae:1e:f0:ab:11:44:e6:85:c7:f9:62:ab: d9:49:3a:23:09:55:72:06:6a:98:54:a0:61:f3:7e:94:55:0a: 6d:b1:31:46:a6:ab:e5:2f:fe:f0:a8:2e:7d:55:4d:43:10:2e: fe:a9:0c:9b:ca:c7:77:87:31:01:d7:29:02:46:33:e5:b5:2d: 22:e2:80:33:aa:16:02:d7:f7:bd:b9:99:13:00:11:43:77:94: 19:c9:e6:64:39:a5:4c:17:e4:47:0a:19:88:d7:80:9a:59:d5: c3:91:ca:ab:d4:14:27:bb:7b:15:50:4b:49:20:e4:05:eb:a6: 23:2e:76:0e:dc:fd:00:07:d2:b2:fa:97:8f:f5:bc:d2:04:ba: d7:77:b7:14:76:71:a1:79:0d:fe:cd:4f:3f:f3:aa:e4:8d:8a: d9:22:31:1e:b9:55:77:cf:6c:55:7f:89:9c:15:36:49:ac:1b: f7:bd:c4:e6:78:87:2d:5f:6a:b3:00:96:30:28:e0:28:3c:91: 85:86:b3:d9:e9:1d:af:3c:4c:35:18:85:ba:b6:31:ab:05:e8: 27:4f:41:78:1a:0a:2f:97:eb:b8:84:db:fe:b1:f3:85:2a:2c: b8:cc:ed:85:6f:28:7d:35:a2:76:d9:7d:ce:9d:62:a6:48:28: 11:78:bb:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhLc2PFOKndMlcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTkyMDE4NzEtYTNhMi00ZTJkLWEzZTItOWViZTNmZGI5MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RDNaytaFax5xjWvt3bFS5AFDmNv15wlVVrG ApRC8MdT3JIDpdOpSeWHF5PwFZjHB9hthFV+Mdl4oIPW7FcOqgGDDfFfh7lXHeES UZDPxc0ixea4CYOZdm1QKtfm1UXfaKuPsIpJ9yxVplHVlP5doHrNeHxdD/sqMnxE B9v9sNeXqTPhif/r2Jy4n92y7QnpvgtInbKp6kpoqWhw/DU26htT6DZZEV0sXY1o ThyMh5u2ZLOvAgjBO2ZN9XEDYUc9MZ7yOP/QJ13879y3GJ833x5d3bQ2RfzXfvit mZ3GHiNncncK+R2zxDuR68xY/DMb5dO70m/PnCnISYGm1xLWQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQgqEpOnHjnUa8HZV82DWSsKAqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGQ1ZmIyMzQtNGIwZC0z NzViLTg4MzAtZjZhNTUwYmExYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy/pmTLua4e8KsRROaFx/liq9lJOiMJVXIGaphUoGHzfpRVCm2xMUam q+Uv/vCoLn1VTUMQLv6pDJvKx3eHMQHXKQJGM+W1LSLigDOqFgLX9725mRMAEUN3 lBnJ5mQ5pUwX5EcKGYjXgJpZ1cORyqvUFCe7exVQS0kg5AXrpiMudg7c/QAH0rL6 l4/1vNIEutd3txR2caF5Df7NTz/zquSNitkiMR65VXfPbFV/iZwVNkmsG/e9xOZ4 hy1farMAljAo4Cg8kYWGs9npHa88TDUYhbq2MasF6CdPQXgaCi+X67iE2/6x84Uq LLjM7YVvKH01onbZfc6dYqZIKBF4u3k= -----END CERTIFICATE-----Generated at Fri Sep 25 14:58:03 2026 by rpki-client