$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa File: 521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa (raw, json) Hash identifier: XJzUjVDt6MfxXqTxoplOoWzp3dNlucSx7fFoql/dwtI= Subject key identifier: 31:58:E6:82:D0:38:7B:4B:4D:D3:BA:A3:E0:29:66:7F:11:CF:41:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984D072FC53648B1737C100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 108.170.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:d0:72:fc:53:64:8b:17:37:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=43b9b932-a64b-4e2a-a04f-a113bbfdaa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:a9:a8:18:1f:d4:02:c3:4d:15:94:76:9b: bd:f3:1d:b9:0d:d1:c8:b3:2f:33:6e:93:30:29:02: 31:06:c6:8f:b6:57:28:7c:7a:e3:43:64:ca:b6:67: 86:11:88:58:f4:10:2b:fc:2d:25:f6:57:d6:a8:9e: 63:ae:4a:a7:9e:95:e8:7f:5b:99:b8:7f:fb:95:7a: e2:de:3d:41:b0:75:66:64:39:61:1e:f3:33:9d:92: 24:93:5e:3b:d5:34:72:a4:2f:77:ed:2d:11:ed:af: e0:75:be:b4:84:60:5d:fd:fd:07:60:13:9b:e7:55: 09:c2:de:60:20:36:de:02:c2:a0:89:80:15:e8:6e: 51:30:29:d5:cc:f6:99:93:92:06:2d:de:fe:ce:20: 1f:1b:cc:d8:9f:fe:6e:33:26:ef:b6:60:f7:83:34: 31:0f:7c:e0:81:25:03:6f:e9:e3:2c:cd:ba:eb:e7: 14:1d:69:af:d9:c6:0b:4a:15:33:d5:e4:ba:fe:36: 9e:0f:16:c7:17:40:19:c8:d8:87:d7:08:0a:3b:5d: 8b:9d:b0:f7:ea:5c:73:b0:a8:0a:a8:cc:d2:b2:18: e5:b4:b4:c6:8e:a8:36:a6:19:f0:f3:13:3f:bc:04: ac:3f:e0:29:90:ed:1f:1e:fa:e9:a0:fe:e6:0d:95: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:58:E6:82:D0:38:7B:4B:4D:D3:BA:A3:E0:29:66:7F:11:CF:41:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:86:32:b4:4b:52:db:50:ea:b5:58:54:81:e0:00:ad:57:5a: 3c:e1:e8:58:31:b4:05:e8:55:1f:63:b6:25:bf:51:a2:3c:ce: 7b:75:bf:15:2a:7f:f8:97:ea:29:8c:d1:93:3e:67:41:af:37: a5:8e:42:47:29:0e:f4:98:9b:c4:48:9c:89:45:98:20:b4:09: c5:6a:27:6c:74:93:62:25:b8:15:e7:f3:35:13:9f:9d:3c:ed: 33:89:5e:3b:a3:95:fa:c6:b2:f1:37:aa:b6:db:e0:c2:5e:82: 86:39:9f:5b:a3:1a:7f:07:bc:4c:35:c4:c8:2c:70:53:f3:89: 57:34:d1:95:99:0d:e2:4f:5e:52:f7:cf:90:39:3d:85:d5:a9: e6:f5:c5:fa:77:d0:fa:ab:c5:46:f4:34:6d:e2:39:f1:4c:74: ab:85:fe:57:e0:03:d2:c7:f6:91:1f:1c:e1:b4:87:9d:05:4f: 01:01:7f:47:24:e2:a4:ab:b0:57:60:84:2b:19:56:13:46:c9: 98:3f:b5:a5:1f:e1:a5:53:b1:e5:7f:28:f0:21:8f:82:8b:d5: 4b:ae:63:08:f5:da:1b:51:12:b6:35:70:00:df:5b:a0:7d:3f: 9d:46:a5:de:02:8c:5a:12:43:95:ab:17:9a:6f:40:d8:24:63: 3c:44:40:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhNBy/FNkixc3wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDNiOWI5MzItYTY0Yi00ZTJhLWEwNGYtYTExM2JiZmRhYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP6pqBgf1ALDTRWUdpu98x25DdHIsy8zbpMw KQIxBsaPtlcofHrjQ2TKtmeGEYhY9BAr/C0l9lfWqJ5jrkqnnpXof1uZuH/7lXri 3j1BsHVmZDlhHvMznZIkk1471TRypC937S0R7a/gdb60hGBd/f0HYBOb51UJwt5g IDbeAsKgiYAV6G5RMCnVzPaZk5IGLd7+ziAfG8zYn/5uMybvtmD3gzQxD3zggSUD b+njLM266+cUHWmv2cYLShUz1eS6/jaeDxbHF0AZyNiH1wgKO12LnbD36lxzsKgK qMzSshjltLTGjqg2phnw8xM/vASsP+ApkO0fHvrpoP7mDZXERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFY5oLQOHtLTdO6o+ApZn8Rz0FFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTIxYTNlOTctMWE1Yy0z ZmM0LTk5M2ItNTUyMWZmMTJkOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiGMrRLUttQ6rVYVIHgAK1XWjzh6FgxtAXoVR9jtiW/UaI8znt1vxUq f/iX6imM0ZM+Z0GvN6WOQkcpDvSYm8RInIlFmCC0CcVqJ2x0k2IluBXn8zUTn508 7TOJXjujlfrGsvE3qrbb4MJegoY5n1ujGn8HvEw1xMgscFPziVc00ZWZDeJPXlL3 z5A5PYXVqeb1xfp30PqrxUb0NG3iOfFMdKuF/lfgA9LH9pEfHOG0h50FTwEBf0ck 4qSrsFdghCsZVhNGyZg/taUf4aVTseV/KPAhj4KL1UuuYwj12htRErY1cADfW6B9 P51Gpd4CjFoSQ5WrF5pvQNgkYzxEQMQ= -----END CERTIFICATE-----Generated at Fri Sep 25 18:30:54 2026 by rpki-client