$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa File: af9062fc-c2de-328a-89b2-ae470ad5b211.roa (raw, json) Hash identifier: r295y2CJix7x9zQbhvAtpCJuHPKWm+ikZZeP2f2KABk= Subject key identifier: 91:0A:76:AB:07:A7:03:AD:1D:56:C9:D6:7C:14:9F:9D:F3:B3:D1:A6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CB1E18EF0FA94CACBEE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 108.177.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:b1:e1:8e:f0:fa:94:ca:cb:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8b2033e1-7952-4873-bdf4-e09ac33a613c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9c:42:b6:90:37:45:9c:2e:bd:c4:72:23:65: 70:d8:4f:e3:55:12:14:3c:f0:45:3d:5e:3c:0e:a1: 61:d9:ff:3d:93:b9:08:0a:25:d4:7a:3b:1f:3c:7e: 55:15:bd:84:09:f3:65:ea:e3:53:44:b5:d0:33:c1: fe:d5:fe:c2:9e:92:69:d9:15:bd:03:13:d4:3b:b8: 7d:e0:a5:1b:5c:0c:2e:fa:5f:15:cf:47:f1:9a:f2: 16:d5:91:7b:db:3f:74:85:ab:2b:d9:47:75:20:e9: ac:0c:71:93:ef:fa:f6:2b:90:ba:ea:82:ef:d0:ac: ac:1f:a5:4e:e4:c5:8a:1b:fd:a2:90:27:db:4d:cf: e1:1d:1d:55:67:cd:37:1c:46:bf:0b:6e:bd:ce:06: 9a:07:d5:23:76:e5:89:2e:fc:2b:f4:7b:f6:7e:d2: 22:fa:67:4f:24:f7:94:19:6f:b6:1e:7b:5d:06:64: 9d:de:a2:e1:47:57:51:e8:c3:26:ba:0d:07:4d:90: 6f:cd:42:14:b9:16:97:b7:aa:b1:24:c8:2b:0c:2c: 95:09:08:5c:34:ea:35:50:7b:14:57:81:ba:ef:0e: 2a:db:d5:cb:9a:eb:ec:42:2c:85:36:25:1b:40:c6: f7:6c:cc:f1:00:d0:c8:db:56:9a:ee:80:62:df:0f: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0A:76:AB:07:A7:03:AD:1D:56:C9:D6:7C:14:9F:9D:F3:B3:D1:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9a:a8:af:bf:18:d7:6f:24:0d:39:c1:b0:9f:d8:b5:56:9c: 22:b7:e6:43:74:de:b9:75:4a:5f:21:47:90:f4:8f:1b:b8:e7: 51:64:a1:6f:bc:12:07:4c:a1:46:9e:3b:f3:6a:f4:fe:28:3c: ec:23:8b:ed:87:09:f0:83:f7:2d:17:58:62:73:cf:fb:a8:ad: ec:68:72:f1:f7:b5:4f:be:ff:ab:c3:6e:c8:5e:46:d8:55:95: ab:3f:8e:be:9c:66:f8:33:0e:1d:32:f8:9b:52:e9:dc:ac:7f: 75:02:cf:ce:4b:17:95:fe:6f:e2:e2:ce:66:8a:9d:dd:f6:53: 3e:6d:48:2b:9a:e7:6c:07:2b:c3:d3:0b:03:21:d0:a9:85:95: da:68:50:35:3b:5f:9b:88:c7:77:72:bc:10:d6:21:4e:a5:ae: 52:2e:22:9c:2b:65:c2:a8:8e:97:21:0a:a8:cb:31:90:2c:7c: 1b:8f:f3:d0:e9:7b:c1:3f:3f:90:ed:73:2f:b8:e3:61:ea:33: 66:e9:0f:c7:9b:67:0a:00:f1:e1:c0:ee:50:14:cb:13:0b:36: f8:0c:f9:75:b2:6b:ab:1a:17:23:f2:03:00:50:af:b6:59:64: 05:b6:53:4c:26:f7:ac:e1:8d:ba:9c:f2:d0:3a:e7:d7:a0:6d: 06:5f:ad:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfLHhjvD6lMrL7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGIyMDMzZTEtNzk1Mi00ODczLWJkZjQtZTA5YWMzM2E2MTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJxCtpA3RZwuvcRyI2Vw2E/jVRIUPPBFPV48 DqFh2f89k7kICiXUejsfPH5VFb2ECfNl6uNTRLXQM8H+1f7CnpJp2RW9AxPUO7h9 4KUbXAwu+l8Vz0fxmvIW1ZF72z90hasr2Ud1IOmsDHGT7/r2K5C66oLv0KysH6VO 5MWKG/2ikCfbTc/hHR1VZ803HEa/C269zgaaB9UjduWJLvwr9Hv2ftIi+mdPJPeU GW+2HntdBmSd3qLhR1dR6MMmug0HTZBvzUIUuRaXt6qxJMgrDCyVCQhcNOo1UHsU V4G67w4q29XLmuvsQiyFNiUbQMb3bMzxANDI21aa7oBi3w9qEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEKdqsHpwOtHVbJ1nwUn53zs9GmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWY5MDYyZmMtYzJkZS0z MjhhLTg5YjItYWU0NzBhZDViMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbLEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKaqK+/GNdvJA05wbCf2LVWnCK35kN03rl1Sl8hR5D0jxu451FkoW+8 EgdMoUaeO/Nq9P4oPOwji+2HCfCD9y0XWGJzz/uorexocvH3tU++/6vDbsheRthV las/jr6cZvgzDh0y+JtS6dysf3UCz85LF5X+b+LizmaKnd32Uz5tSCua52wHK8PT CwMh0KmFldpoUDU7X5uIx3dyvBDWIU6lrlIuIpwrZcKojpchCqjLMZAsfBuP89Dp e8E/P5Dtcy+442HqM2bpD8ebZwoA8eHA7lAUyxMLNvgM+XWya6saFyPyAwBQr7ZZ ZAW2U0wm96zhjbqc8tA659egbQZfrQU= -----END CERTIFICATE-----Generated at Fri Sep 25 14:50:23 2026 by rpki-client