$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa File: cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa (raw, json) Hash identifier: 8tTCNrzM1OkG1tfK+CZ0hLEy9cj+4cwbYHKuh16lo8w= Subject key identifier: 98:23:23:8D:9F:A8:D7:9C:49:CB:04:FF:3D:38:2E:09:67:0E:55:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EC0A7390E11E91CB785FC72D4 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 15169 IP address blocks: 108.177.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:39:0e:11:e9:1c:b7:85:fc:72:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=cdd875fd-2835-479b-a0e3-fa4f4ce201f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:eb:ad:ce:7b:5f:df:62:f5:61:3c:f7:8a:46: 5a:4b:26:c7:b3:d2:08:86:18:ba:cc:2f:d7:2b:84: d7:b7:33:6f:83:d4:3e:dc:61:f0:6f:fe:a3:0a:2c: 13:51:7c:e0:9e:1c:c8:17:a5:d7:d4:0f:19:3f:3f: fc:43:1d:a1:c5:83:56:06:d8:8a:13:6f:b3:6f:a4: 94:15:bc:b5:c2:e2:50:aa:33:a1:c2:a7:5f:3a:1e: a1:3d:51:3e:f0:09:e6:19:f4:4f:8b:7b:a7:c5:0b: 5a:e1:b5:0e:28:bb:10:de:f7:e6:60:3b:73:55:de: ce:d6:e4:51:7f:24:fe:71:7c:81:61:ae:31:33:2c: 1b:81:19:b9:b9:f1:af:c7:6f:c1:59:dd:e5:f6:ec: 33:f0:ef:29:c8:22:e2:01:43:08:7f:c4:59:84:22: 5a:77:9a:75:62:4d:9c:b7:5f:83:4c:d8:96:94:20: b9:54:9d:83:d2:b9:d2:af:4f:8f:c4:c1:d8:93:ae: 63:60:41:36:52:38:59:fb:ae:b3:de:e2:d4:b0:b4: bd:48:ec:8a:ac:b8:6c:df:06:b3:b0:f1:f1:04:28: e9:20:07:4d:38:39:d1:2d:87:17:93:96:06:8b:9a: de:d3:d7:9c:79:85:66:1a:51:18:7b:8f:cc:89:18: af:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:23:23:8D:9F:A8:D7:9C:49:CB:04:FF:3D:38:2E:09:67:0E:55:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb486e80-1606-3cc8-8fcc-80c739f8eccd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:17:5b:94:95:8a:03:e8:9a:89:3b:4d:9a:9b:1d:2f:7c:b8: cd:2a:e8:29:c3:bd:d8:d1:51:f2:29:57:93:eb:e7:e8:7a:ce: c6:78:74:ec:27:8b:77:8c:fb:03:02:83:62:78:48:2d:52:c4: 26:ea:96:04:f4:09:d2:55:6f:13:a7:4d:1a:aa:4e:bb:d7:24: 07:f3:d4:0f:65:7a:62:ca:17:f1:2b:d1:4d:d9:bf:79:03:60: 3b:96:91:95:35:b9:65:6a:f1:fc:2d:ed:45:76:c7:6c:df:bc: 87:64:85:49:90:28:a1:df:cf:3b:8b:2a:1a:a8:66:13:4e:bb: df:0c:f3:33:97:5f:34:99:b9:32:be:8d:03:16:b9:20:ba:50: f2:ae:c2:24:65:48:72:63:c7:fe:0a:4f:d6:5d:0c:d6:30:d8: b0:3d:fb:5e:d4:60:15:06:68:f7:3b:db:9d:47:81:a6:3c:af: 9e:c0:c2:4a:15:52:17:16:33:89:f2:a1:ff:8c:5f:88:67:4c: ef:0e:d9:a0:68:35:54:2e:38:3a:8b:b9:ce:32:de:3f:a5:b4: db:7b:39:3e:68:ca:a5:50:b5:ac:da:f4:9d:54:fa:58:0e:b3: a7:89:61:6a:ef:5e:d0:7d:54:3d:57:c0:b1:92:e7:e2:4b:3a: 06:23:57:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApzkOEekct4X8ctQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk Y2RkODc1ZmQtMjgzNS00NzliLWEwZTMtZmE0ZjRjZTIwMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Outzntf32L1YTz3ikZaSybHs9IIhhi6zC/X K4TXtzNvg9Q+3GHwb/6jCiwTUXzgnhzIF6XX1A8ZPz/8Qx2hxYNWBtiKE2+zb6SU Fby1wuJQqjOhwqdfOh6hPVE+8AnmGfRPi3unxQta4bUOKLsQ3vfmYDtzVd7O1uRR fyT+cXyBYa4xMywbgRm5ufGvx2/BWd3l9uwz8O8pyCLiAUMIf8RZhCJad5p1Yk2c t1+DTNiWlCC5VJ2D0rnSr0+PxMHYk65jYEE2UjhZ+66z3uLUsLS9SOyKrLhs3waz sPHxBCjpIAdNODnRLYcXk5YGi5re09eceYVmGlEYe4/MiRivawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgjI42fqNecScsE/z04LglnDlUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2I0ODZlODAtMTYwNi0z Y2M4LThmY2MtODBjNzM5ZjhlY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIXW5SVigPomok7TZqbHS98uM0q6CnDvdjRUfIpV5Pr5+h6zsZ4dOwn i3eM+wMCg2J4SC1SxCbqlgT0CdJVbxOnTRqqTrvXJAfz1A9lemLKF/Er0U3Zv3kD YDuWkZU1uWVq8fwt7UV2x2zfvIdkhUmQKKHfzzuLKhqoZhNOu98M8zOXXzSZuTK+ jQMWuSC6UPKuwiRlSHJjx/4KT9ZdDNYw2LA9+17UYBUGaPc7251HgaY8r57AwkoV UhcWM4nyof+MX4hnTO8O2aBoNVQuODqLuc4y3j+ltNt7OT5oyqVQtaza9J1U+lgO s6eJYWrvXtB9VD1XwLGS5+JLOgYjV+Q= -----END CERTIFICATE-----Generated at Fri Aug 7 21:43:07 2026 by rpki-client