$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa File: 60375f84-058e-3934-9882-84d1a2ec55d3.roa (raw, json) Hash identifier: /5YuqciHXzpHbOy/VxNItP9tMaD4yEQEzMAV0H2TUNI= Subject key identifier: D0:5F:D4:0F:49:FD:D5:85:F9:40:BB:76:0F:FE:01:1B:4E:C8:FE:55 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984CD491761CB8324644E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 108.170.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:cd:49:17:61:cb:83:24:64:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=320cca08-c8c2-45f4-b02e-8bd4cf4a37b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ff:6f:5a:f5:d7:97:ea:44:ed:5b:be:3d:1e: 65:6a:ee:80:ac:73:6b:b3:f6:70:7c:d9:94:24:3d: db:8c:5e:94:e3:41:f5:27:2b:55:43:b7:2f:b6:2b: 07:f8:f7:66:99:07:a1:13:18:c2:9b:6e:ef:98:45: 66:92:5b:e8:4d:12:4d:40:92:f9:52:ad:5c:96:6f: c6:46:15:ce:3f:77:99:61:84:b5:5c:14:f9:5f:6e: 77:b1:9f:84:16:8a:88:2a:7f:f5:70:62:85:20:41: 39:e6:8b:5c:77:cd:bd:d5:d1:0b:39:50:e4:b4:63: 25:80:97:8d:62:75:50:35:5c:32:cf:f0:bc:26:aa: 4e:90:e7:3b:4f:a4:4b:65:b9:1b:63:e1:84:2c:38: 9c:a5:18:da:6b:0c:52:27:f8:d1:22:af:49:33:70: 3b:46:8a:37:a1:e3:d3:3d:0d:71:be:7d:b4:06:45: f4:03:a9:5c:bc:db:ed:d0:c0:8b:6c:e7:8d:b2:24: 5e:11:a9:fe:8a:b0:dd:89:d6:43:d1:63:a5:36:59: 3a:d1:d3:90:98:f5:76:ba:49:0f:5e:e6:6c:88:e1: 44:4a:fd:f6:17:db:5d:3e:2a:43:92:7b:46:c0:64: cf:f4:c5:b7:4c:09:d9:ad:76:b9:4a:d9:67:d9:e7: 31:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5F:D4:0F:49:FD:D5:85:F9:40:BB:76:0F:FE:01:1B:4E:C8:FE:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60375f84-058e-3934-9882-84d1a2ec55d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ee:c1:4a:a8:72:6f:eb:76:b4:6b:73:c5:7c:ad:fc:b0:d2: 24:1f:77:2b:0a:bc:70:ed:ce:53:9e:6f:7b:f3:30:44:95:03: 7a:90:47:e8:90:83:39:bf:95:e4:8f:41:75:c6:54:ce:4f:27: b3:3d:0a:e4:4f:23:b2:dc:e0:80:5e:16:f7:91:e9:a3:29:ce: ab:e6:74:95:86:51:5c:e1:0e:4b:1b:50:ef:6d:d2:a9:8d:c8: 8f:16:dd:8e:26:58:dc:72:46:e1:5f:2d:2c:11:aa:41:fb:42: b2:49:f6:a3:f0:69:db:50:5c:84:15:62:8e:b7:10:33:78:ed: 2c:da:5e:de:92:82:ec:30:7d:63:0e:84:2e:79:75:38:83:53: 43:a1:27:18:1e:ff:6f:c4:f2:fe:d3:47:ac:25:be:94:dc:8f: 69:b1:dc:76:a1:42:78:2c:e1:1e:21:93:0f:d2:61:95:c2:a4: b7:54:78:93:aa:eb:b2:3b:2f:e0:cf:4f:ea:74:42:5f:0c:47: 56:79:62:c8:ce:00:d4:2d:cd:8c:aa:69:39:99:22:c1:32:ad: 3c:40:35:19:6d:4c:c5:db:d2:6e:2e:48:3f:c0:05:67:c4:2a: bb:eb:92:b0:10:87:db:1b:d7:0d:f1:95:e3:20:ff:ba:9d:57: 3c:6d:4f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhM1JF2HLgyRkTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzIwY2NhMDgtYzhjMi00NWY0LWIwMmUtOGJkNGNmNGEzN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/9vWvXXl+pE7Vu+PR5lau6ArHNrs/ZwfNmU JD3bjF6U40H1JytVQ7cvtisH+PdmmQehExjCm27vmEVmklvoTRJNQJL5Uq1clm/G RhXOP3eZYYS1XBT5X253sZ+EFoqIKn/1cGKFIEE55otcd8291dELOVDktGMlgJeN YnVQNVwyz/C8JqpOkOc7T6RLZbkbY+GELDicpRjaawxSJ/jRIq9JM3A7Roo3oePT PQ1xvn20BkX0A6lcvNvt0MCLbOeNsiReEan+irDdidZD0WOlNlk60dOQmPV2ukkP XuZsiOFESv32F9tdPipDkntGwGTP9MW3TAnZrXa5Stln2ecxlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBf1A9J/dWF+UC7dg/+ARtOyP5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjAzNzVmODQtMDU4ZS0z OTM0LTk4ODItODRkMWEyZWM1NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPuwUqocm/rdrRrc8V8rfyw0iQfdysKvHDtzlOeb3vzMESVA3qQR+iQ gzm/leSPQXXGVM5PJ7M9CuRPI7Lc4IBeFveR6aMpzqvmdJWGUVzhDksbUO9t0qmN yI8W3Y4mWNxyRuFfLSwRqkH7QrJJ9qPwadtQXIQVYo63EDN47SzaXt6SguwwfWMO hC55dTiDU0OhJxge/2/E8v7TR6wlvpTcj2mx3HahQngs4R4hkw/SYZXCpLdUeJOq 67I7L+DPT+p0Ql8MR1Z5YsjOANQtzYyqaTmZIsEyrTxANRltTMXb0m4uSD/ABWfE KrvrkrAQh9sb1w3xleMg/7qdVzxtT78= -----END CERTIFICATE-----Generated at Sat Sep 26 04:16:46 2026 by rpki-client