$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa File: 4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa (raw, json) Hash identifier: B5JwJukh83QQnhsfFgeRKCCTCydKHlQ+6B0u+W+mqhY= Subject key identifier: 8A:F9:7F:CC:6D:04:D7:C4:BF:84:05:D5:E8:28:9C:5D:44:CC:D3:B9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CA95C20D5222A97AAEBC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 108.177.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:a9:5c:20:d5:22:2a:97:aa:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a9c02037-c65a-446a-b39d-e906bd3cc264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7f:8b:db:c8:98:37:52:73:5b:73:6d:8d:d2: ba:39:5d:d0:d8:28:1c:90:64:0c:da:c2:18:85:f7: 38:bc:06:54:2b:c9:ad:42:9a:fa:85:93:ea:ed:ff: bc:6e:7e:e8:84:66:05:3f:6c:fc:56:3e:f3:f4:09: 9e:92:17:22:8f:3b:de:3b:be:88:e3:49:d3:0d:34: ec:54:cb:94:7d:97:7d:50:47:bf:53:d0:24:70:57: 17:b6:04:ff:47:9c:04:01:a6:1e:55:10:b8:6e:1f: 7c:29:e8:48:b6:d0:fd:a0:bd:72:7c:58:f4:fb:fd: ef:3d:43:30:16:80:bd:ac:10:be:1c:33:6c:a4:65: 41:70:19:23:b7:62:e5:63:a9:f3:bd:0c:38:4b:f0: cf:f2:cc:aa:a2:ef:07:3b:23:74:0a:a5:ca:bc:ea: 15:07:11:c2:43:56:52:b4:43:ec:c9:63:3e:b6:46: 67:19:9b:96:9e:8d:e8:17:c5:47:29:b8:50:ee:e6: 7d:8a:08:7d:6f:05:4e:61:4f:23:02:cd:2f:c7:5e: ba:88:62:77:8e:bb:a7:61:bb:66:19:b5:62:f8:58: 58:d6:07:e6:78:53:3c:a8:4e:50:e5:7f:91:4c:b1: bc:46:5a:1a:f6:61:bb:4b:91:41:ff:29:39:64:b2: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F9:7F:CC:6D:04:D7:C4:BF:84:05:D5:E8:28:9C:5D:44:CC:D3:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:82:c2:d3:c4:62:27:e0:11:fd:58:ea:7d:62:4a:16:82:b0: 76:cf:30:47:22:e6:c9:9c:c5:9d:b7:94:18:e6:e8:0c:ff:49: 40:ae:64:0f:b2:4e:d0:96:be:e8:f3:5c:a7:e4:4b:ec:8d:52: fc:c6:f8:be:5f:c8:cb:5f:8e:ca:ef:94:18:4a:37:9f:39:8b: 43:c7:c5:ed:87:1b:8f:30:a4:d7:a5:5a:75:8c:a7:00:c6:a3: 62:61:45:74:e4:64:59:00:a0:39:2e:8f:ab:8b:07:7c:bb:d4: 36:23:ef:ea:cd:f4:a0:2f:b8:37:f9:42:f6:de:02:26:8a:3c: 0e:53:01:9a:e4:66:b1:07:88:b0:a8:d6:b6:bf:05:49:05:5b: ce:ca:90:4d:db:13:d4:47:51:37:aa:1b:a5:de:d0:46:a2:31: 9c:f9:0a:35:f0:f2:a9:e4:b7:cb:a2:f3:e9:38:e9:13:6f:38: 25:3c:85:0b:0b:39:f7:cb:98:2c:b1:fd:de:32:19:ea:f4:8c: 9b:cf:ef:e6:79:a1:a8:c7:a7:a8:b0:6c:3d:1f:a9:23:a2:ca: c1:8f:2e:f7:cf:94:65:4f:60:d1:5f:3a:84:9a:ab:02:ef:23: 8c:93:a5:15:c4:ca:95:3e:a2:6b:a9:83:66:f0:43:29:1f:34: b9:ca:73:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfKlcINUiKpeq68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTljMDIwMzctYzY1YS00NDZhLWIzOWQtZTkwNmJkM2NjMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin+L28iYN1JzW3NtjdK6OV3Q2CgckGQM2sIY hfc4vAZUK8mtQpr6hZPq7f+8bn7ohGYFP2z8Vj7z9AmekhcijzveO76I40nTDTTs VMuUfZd9UEe/U9AkcFcXtgT/R5wEAaYeVRC4bh98KehIttD9oL1yfFj0+/3vPUMw FoC9rBC+HDNspGVBcBkjt2LlY6nzvQw4S/DP8syqou8HOyN0CqXKvOoVBxHCQ1ZS tEPsyWM+tkZnGZuWno3oF8VHKbhQ7uZ9igh9bwVOYU8jAs0vx166iGJ3jrunYbtm GbVi+FhY1gfmeFM8qE5Q5X+RTLG8Rloa9mG7S5FB/yk5ZLKuPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIr5f8xtBNfEv4QF1egonF1EzNO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGVjNmYwODUtYjJlNS0z NjA1LWJhYTItNGYxYzRmYzNkZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWCwtPEYifgEf1Y6n1iShaCsHbPMEci5smcxZ23lBjm6Az/SUCuZA+y TtCWvujzXKfkS+yNUvzG+L5fyMtfjsrvlBhKN585i0PHxe2HG48wpNelWnWMpwDG o2JhRXTkZFkAoDkuj6uLB3y71DYj7+rN9KAvuDf5QvbeAiaKPA5TAZrkZrEHiLCo 1ra/BUkFW87KkE3bE9RHUTeqG6Xe0EaiMZz5CjXw8qnkt8ui8+k46RNvOCU8hQsL OffLmCyx/d4yGer0jJvP7+Z5oajHp6iwbD0fqSOiysGPLvfPlGVPYNFfOoSaqwLv I4yTpRXEypU+omupg2bwQykfNLnKc14= -----END CERTIFICATE-----Generated at Fri Sep 25 13:56:57 2026 by rpki-client