$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa File: aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa (raw, json) Hash identifier: 7dLChGhECNdd15fRvSRGnoFRhEFsT604GNdXHafo76M= Subject key identifier: E1:85:CE:95:7C:61:1C:24:24:08:60:68:00:8D:54:57:89:07:7C:F0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984DD90BF7A52C2BD5F1E40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 108.177.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:dd:90:bf:7a:52:c2:bd:5f:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c2f9dd64-3972-4789-9392-14d62c076fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:cf:7b:b1:78:0a:b5:31:f7:02:ca:ad:cf: 06:bf:86:24:85:39:6c:be:ce:ac:30:09:91:f2:a3: 23:dd:ac:ac:6e:02:ee:e7:69:f7:d2:86:d4:fa:a3: ab:ae:87:9f:79:c9:06:d7:a2:5e:f6:47:af:d4:ac: dc:a5:82:4d:23:0c:cd:8c:4e:82:a3:40:ee:1c:b5: 07:ec:90:bd:eb:87:67:b9:36:65:86:ce:38:d6:86: 83:a3:97:84:27:20:74:40:20:22:79:96:64:93:ab: ba:a3:85:99:95:e4:ba:d1:9e:48:a3:7a:68:ab:a7: 03:63:50:d5:4e:92:4f:38:f7:0c:7d:c5:21:42:5d: 16:1e:ac:2b:e3:80:dc:2a:e7:7f:c1:cd:6f:01:9f: 8b:f3:bc:cc:23:88:c9:eb:a0:14:ba:c7:f9:f6:bd: 5b:9b:0d:d5:5a:40:5c:24:8f:b0:7c:fa:27:b3:52: a0:48:94:7e:0e:ca:32:d7:2a:58:ba:67:8d:bb:64: 75:ac:7a:c0:df:08:32:04:ec:58:03:82:ff:59:28: 4f:28:86:1d:9a:45:76:80:79:aa:df:7b:6b:15:a1: 8f:f9:a6:2a:17:b9:28:49:b1:72:e0:00:a7:ae:8f: 8a:8e:2a:88:3a:b8:51:71:ca:2f:90:73:2d:e0:9d: 9d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:85:CE:95:7C:61:1C:24:24:08:60:68:00:8D:54:57:89:07:7C:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7c:86:da:98:0c:fe:c5:51:2a:1f:5b:a7:94:f3:53:0e:61: 3e:e4:41:d7:16:21:e9:0b:63:ac:57:9f:f6:7d:b8:14:ef:dc: c6:9e:ee:e2:ad:1d:8a:37:47:76:e8:2b:5a:cf:54:a8:00:69: 2f:0e:bb:37:08:8b:d8:8a:df:90:09:71:01:94:6c:e4:c8:bc: 83:aa:3e:3f:23:84:cc:b7:0d:95:f7:aa:2b:16:09:9c:d6:42: 3d:e4:37:1e:23:54:2f:57:2e:33:fe:af:3f:c6:ac:41:c1:ac: 5c:67:6e:4c:cf:69:59:e4:65:2b:0b:3b:ae:52:44:36:9a:e0: c5:e3:5f:97:28:40:50:58:09:b2:b2:b3:76:0e:89:07:f1:d8: 47:9a:08:f5:35:c1:fb:dd:2c:75:25:22:6b:c8:ba:78:2d:89: 19:c3:de:65:6f:1d:3f:8a:2d:54:68:54:d5:9a:77:e0:bf:fa: 32:c7:a7:ff:64:89:01:a6:b1:e6:74:60:fa:2b:b5:db:4b:27: 3d:56:12:4b:d3:f3:66:21:1d:34:f8:78:54:2b:e7:49:87:04: 69:5c:46:c9:d1:3d:58:68:cb:c6:76:a3:16:e0:90:1a:e7:f9: 7c:da:3a:6c:bf:1f:d8:db:ff:f3:a2:f5:8c:10:d6:ce:c8:0e: 0c:66:8c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhN2Qv3pSwr1fHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzJmOWRkNjQtMzk3Mi00Nzg5LTkzOTItMTRkNjJjMDc2ZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucjPe7F4CrUx9wLKrc8Gv4YkhTlsvs6sMAmR 8qMj3aysbgLu52n30obU+qOrroefeckG16Je9kev1KzcpYJNIwzNjE6Co0DuHLUH 7JC964dnuTZlhs441oaDo5eEJyB0QCAieZZkk6u6o4WZleS60Z5Io3poq6cDY1DV TpJPOPcMfcUhQl0WHqwr44DcKud/wc1vAZ+L87zMI4jJ66AUusf59r1bmw3VWkBc JI+wfPons1KgSJR+Dsoy1ypYumeNu2R1rHrA3wgyBOxYA4L/WShPKIYdmkV2gHmq 33trFaGP+aYqF7koSbFy4ACnro+KjiqIOrhRccovkHMt4J2dswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGFzpV8YRwkJAhgaACNVFeJB3zwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE3YTkxNjgtZDliNS0z ZTNhLWEyYjEtY2UyYTcwNTFjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl8htqYDP7FUSofW6eU81MOYT7kQdcWIekLY6xXn/Z9uBTv3Mae7uKt HYo3R3boK1rPVKgAaS8OuzcIi9iK35AJcQGUbOTIvIOqPj8jhMy3DZX3qisWCZzW Qj3kNx4jVC9XLjP+rz/GrEHBrFxnbkzPaVnkZSsLO65SRDaa4MXjX5coQFBYCbKy s3YOiQfx2EeaCPU1wfvdLHUlImvIungtiRnD3mVvHT+KLVRoVNWad+C/+jLHp/9k iQGmseZ0YPortdtLJz1WEkvT82YhHTT4eFQr50mHBGlcRsnRPVhoy8Z2oxbgkBrn +XzaOmy/H9jb//Oi9YwQ1s7IDgxmjCA= -----END CERTIFICATE-----Generated at Fri Sep 25 19:04:57 2026 by rpki-client